Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/946563ac-c6cc-31d5-9f7d-30ad1e88f87a.roa
File: 946563ac-c6cc-31d5-9f7d-30ad1e88f87a.roa (raw, json)
Hash identifier: 0PbBAJWP0c3r6891khcXAW9lmnvne2RAVwqoj9sXCZU=
Subject key identifier: C8:86:5D:DF:AA:C6:11:AB:67:D8:69:BE:D4:13:8E:F7:D2:42:AB:61
Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial: 010D0C9F432858480678157EEC7CC54C9B89F780
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/946563ac-c6cc-31d5-9f7d-30ad1e88f87a.roa
Signing time: Thu 28 Nov 2024 03:43:41 +0000
ROA not before: Thu 28 Nov 2024 03:43:41 +0000
ROA not after: Wed 26 Feb 2025 03:43:41 +0000
asID: 201386
IP address blocks: 2602:f9df:700::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:78:15:7e:ec:7c:c5:4c:9b:89:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Validity
Not Before: Nov 28 03:43:41 2024 GMT
Not After : Feb 26 03:43:41 2025 GMT
Subject: CN=33d82dc7-9ed4-411e-8d05-b364778d2187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:98:48:d6:f7:90:e7:6f:72:28:1c:66:6b:
d3:3f:bc:e9:34:d3:20:1e:73:0b:ce:0b:dd:bc:ba:
97:bc:dc:83:92:fb:36:40:26:86:09:71:f3:d7:f5:
86:03:0d:a2:fe:fc:d3:59:a0:11:49:de:35:40:f4:
04:f0:43:ef:d8:50:74:f5:50:7c:71:e3:2c:fb:2a:
df:7c:68:a9:4b:1b:a7:9d:a8:75:a0:47:29:29:95:
3c:03:89:01:1e:f7:b8:46:59:2e:a0:9f:26:75:15:
fd:d0:69:ab:40:d4:7c:b3:fc:78:92:4e:ef:5d:91:
63:e5:fa:52:ca:08:7a:42:95:c2:07:37:e8:31:e4:
7a:24:24:4f:45:70:a5:80:af:a6:45:5c:25:b7:ce:
95:95:45:de:85:a0:7e:3e:ba:3d:01:d6:cb:43:00:
2d:50:20:e4:36:69:cf:f4:46:99:86:88:15:60:46:
43:6d:30:c0:a8:cf:d3:a8:d4:53:39:c9:38:6b:ba:
de:ce:82:dc:1f:a0:5a:14:11:b4:ab:ca:2b:4d:a6:
ff:e0:12:de:dc:7c:19:dd:ff:18:04:db:26:fb:e2:
dc:47:75:cf:d7:5f:33:b0:72:1f:3e:cf:65:c9:6d:
5b:1b:48:58:42:48:fc:1d:9a:46:68:8b:9b:fe:e5:
e5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:86:5D:DF:AA:C6:11:AB:67:D8:69:BE:D4:13:8E:F7:D2:42:AB:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/946563ac-c6cc-31d5-9f7d-30ad1e88f87a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
X509v3 Authority Key Identifier:
keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9df:700::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:14:a5:b1:3f:4e:39:dc:f4:39:f1:0b:78:86:80:b1:7c:6a:
8d:df:e6:fd:8d:09:69:dd:f9:69:3c:ad:4e:4b:b8:3f:f2:f2:
91:d8:34:af:8b:cd:93:06:70:30:8a:63:98:1e:76:50:b2:86:
10:5d:48:6d:be:99:91:d0:9e:a8:36:ce:f3:4b:89:58:a7:b9:
fd:e3:35:cc:6d:2e:b0:f5:9f:a5:56:c8:65:c4:66:57:f3:7f:
19:2a:38:97:92:eb:41:f9:92:fd:a1:e4:df:75:ec:53:42:bc:
a3:4c:7e:2e:e0:69:1c:b9:46:d4:51:c2:f7:77:2f:36:91:cb:
0a:20:83:74:df:af:c5:6d:78:35:90:62:81:26:7f:27:c1:34:
5a:7d:b6:26:dc:7d:e7:fa:c7:03:f3:cb:48:69:c0:f9:eb:67:
dd:5f:b5:85:a8:74:1a:25:a7:70:ca:17:ff:43:94:a5:c4:1f:
e9:9f:7c:b6:3f:5a:45:f5:a6:09:f5:f0:30:35:af:cb:f1:c8:
f4:a4:ee:e2:b6:b8:3a:c6:0c:50:d3:8b:f3:90:6f:dd:13:d2:
fb:5c:e8:86:a1:30:82:7a:0f:42:96:ce:7c:70:d3:4f:84:87:
5d:4f:ba:cd:a7:55:a6:d2:10:66:06:a0:4d:f9:23:6c:27:55:
5b:e7:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:16:19 2025 by rpki-client