Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/53d7016b-4b41-35cf-8171-3435ddd1bd3b.roa
File: 53d7016b-4b41-35cf-8171-3435ddd1bd3b.roa (raw, json)
Hash identifier: 8vTe4snpjELGC8B/VcJ92ARTgCvFeA1+wMKlHx9TsRs=
Subject key identifier: 97:1D:9C:86:47:75:D5:82:B7:88:23:51:52:4A:2C:7B:78:72:0D:D1
Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial: 010D0C9F43285848068B13EC1E74571515F64E80
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/53d7016b-4b41-35cf-8171-3435ddd1bd3b.roa
Signing time: Thu 28 Nov 2024 04:21:58 +0000
ROA not before: Thu 28 Nov 2024 04:21:58 +0000
ROA not after: Wed 26 Feb 2025 04:21:58 +0000
asID: 214963
IP address blocks: 2602:f9df:800::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:8b:13:ec:1e:74:57:15:15:f6:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Validity
Not Before: Nov 28 04:21:58 2024 GMT
Not After : Feb 26 04:21:58 2025 GMT
Subject: CN=e659d73c-9d63-4f07-8737-1922c1fe2faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:36:d7:4a:4f:fb:35:ee:20:b7:b3:89:c1:
ee:5d:b4:30:6f:40:5e:69:5d:c1:4f:a8:33:25:61:
d7:98:f8:f8:ff:d0:49:6f:47:b2:52:c1:46:b2:82:
f1:54:31:d7:ca:fd:18:17:d3:c6:cd:8e:2a:ca:58:
89:2c:af:52:b8:84:3b:ae:df:27:97:16:03:3d:e3:
ea:54:88:01:83:3b:b9:06:bb:fe:90:04:20:a0:b3:
42:f5:f7:d7:28:24:d0:82:71:f2:85:94:d0:e5:c4:
fe:aa:8b:78:08:0a:38:4a:43:da:14:6f:86:c0:18:
7f:87:08:a3:17:90:bf:ec:3d:ca:ba:c7:85:01:df:
64:6c:25:8c:e5:f5:ef:6d:9b:e6:e4:a3:6b:f2:be:
49:6f:ec:7f:b4:93:1d:f6:0b:ed:c3:b3:53:03:3c:
3e:82:d7:1f:bc:f2:b2:08:6e:27:04:0e:a5:8c:d1:
df:dd:d3:c3:7e:07:b7:a8:47:e9:03:89:80:cc:60:
42:8f:2e:2d:60:e6:73:25:f9:30:4c:17:8d:f5:1d:
c6:45:cd:3b:4c:b2:fe:9c:a7:f6:ef:f6:49:e0:fa:
76:aa:d0:38:dc:01:18:56:ab:4d:66:e6:a1:b8:a8:
68:d3:5e:67:ce:55:f3:aa:01:13:8d:13:21:d1:ec:
e4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1D:9C:86:47:75:D5:82:B7:88:23:51:52:4A:2C:7B:78:72:0D:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/53d7016b-4b41-35cf-8171-3435ddd1bd3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
X509v3 Authority Key Identifier:
keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9df:800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:dd:28:bb:96:3c:4f:e0:4e:c4:af:92:eb:45:6d:d3:42:f1:
1f:b4:18:f4:39:b2:b4:c3:36:d4:08:63:4b:31:01:49:e9:5b:
32:f9:79:c3:0e:e8:76:3c:e8:ba:ca:1c:d1:85:6b:86:ab:24:
13:05:ef:57:67:af:c8:da:34:eb:27:7d:c6:7c:d2:22:5f:f6:
07:9b:98:fd:88:98:b9:76:3c:59:1e:e5:7f:f1:ec:48:42:eb:
79:3f:4c:c0:61:1c:3a:f2:c4:3e:a3:01:cb:dc:df:62:19:88:
96:a2:d1:11:87:27:1b:b5:66:d7:ac:32:e8:1f:61:d5:41:93:
26:e3:88:ff:ca:54:91:e9:6c:4a:ee:c9:12:dd:ea:35:9b:3b:
e9:a9:bb:b5:8d:ce:a5:52:c2:81:60:d3:c0:78:39:55:5a:4d:
7d:1b:02:11:17:be:f5:4e:71:b0:cf:a0:00:25:a2:2f:cb:1e:
ad:19:94:37:38:ea:4e:58:76:ad:cd:71:2a:bb:5b:f8:e8:f7:
aa:c8:4b:e5:d3:ab:98:32:56:0d:8c:f8:4f:fe:ab:27:ed:f5:
6a:ec:c0:02:ee:59:d8:ee:ff:af:e1:0b:27:2f:90:ea:9a:00:
c0:d8:96:c0:e6:b5:ae:92:83:a3:6e:6d:39:d2:73:18:b8:6f:
56:33:62:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:37:08 2025 by rpki-client