Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/f8201bbf-2b1d-3c28-898c-d8978d1c2a40.roa
File: f8201bbf-2b1d-3c28-898c-d8978d1c2a40.roa (raw, json)
Hash identifier: CZ5YMH7YJDQXGkU7O7VwmI1z3GETU8Rwyl7G1I5ewjk=
Subject key identifier: C7:42:E8:60:A3:53:F1:20:59:61:00:44:C0:D2:77:A8:1A:69:C4:30
Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial: 010D0C9F432858481AB9012ECE771A86E5DDF660
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/f8201bbf-2b1d-3c28-898c-d8978d1c2a40.roa
Signing time: Thu 05 Dec 2024 09:50:40 +0000
ROA not before: Thu 05 Dec 2024 09:50:40 +0000
ROA not after: Wed 05 Mar 2025 09:50:40 +0000
asID: 0
IP address blocks: 2602:f9df:200::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1a:b9:01:2e:ce:77:1a:86:e5:dd:f6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Validity
Not Before: Dec 5 09:50:40 2024 GMT
Not After : Mar 5 09:50:40 2025 GMT
Subject: CN=d43cdc2c-fb71-42bb-bdf5-70625a20e87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:de:12:9c:2f:f8:b1:b8:c4:94:29:d8:f7:
37:c0:cc:a4:c1:99:e0:e4:8e:05:5c:a5:48:7e:18:
83:49:44:6b:b3:73:93:f9:60:ba:73:6c:1f:f5:1f:
13:fc:b4:80:80:94:31:fc:44:30:b9:fa:b9:c8:7a:
74:fc:27:dc:55:72:b8:e6:83:2e:bb:68:d5:94:b2:
bd:24:c9:ea:4d:f9:22:9a:49:9a:89:1d:96:e9:0d:
9e:01:d0:96:dc:f6:6b:f4:19:77:b4:bf:cd:bc:cd:
46:eb:f4:de:ce:2c:b4:72:0b:b4:06:29:0e:89:3f:
36:26:c8:38:2e:1b:a9:23:5d:34:ba:68:69:91:22:
74:58:9d:b9:aa:63:83:c6:23:1a:7f:d8:84:b9:cb:
75:71:71:a9:99:49:54:fb:c5:92:cb:40:d4:f9:c7:
35:6d:de:45:01:ef:62:1d:f4:08:94:8a:91:1c:ef:
e3:d0:7b:71:ba:74:b3:54:94:30:77:3b:92:76:2f:
85:46:43:6a:45:35:20:c4:79:5b:89:cb:d6:26:a6:
a2:8a:73:12:5a:08:04:0d:c8:d3:c3:fe:94:74:d5:
78:a7:5b:77:a6:59:2d:93:46:f6:98:b8:d3:df:ae:
9c:94:d5:3d:5e:53:0e:4b:85:59:7e:b8:10:f7:22:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:42:E8:60:A3:53:F1:20:59:61:00:44:C0:D2:77:A8:1A:69:C4:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/f8201bbf-2b1d-3c28-898c-d8978d1c2a40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
X509v3 Authority Key Identifier:
keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9df:200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:e3:1e:e6:07:32:24:e5:7d:4a:86:5a:64:ee:e6:26:c4:58:
38:f3:5a:6c:2f:2a:6c:af:47:40:87:bb:14:2d:59:9e:df:a6:
59:8c:7e:b4:9b:dd:b5:93:4d:a4:f1:c9:95:72:60:f0:55:28:
99:af:99:a3:f6:b1:75:55:6c:6b:ac:b9:10:9b:4c:5c:be:43:
9a:3c:a4:93:ff:7c:35:88:0a:87:83:42:81:fd:dd:7c:ca:0d:
3e:63:3e:6b:54:81:6b:00:fb:e1:f0:a4:23:13:11:4e:f6:af:
fa:4e:19:fb:b8:3d:2f:a0:69:6c:2b:5c:bd:d9:ef:28:64:24:
53:c6:bb:1a:fd:f7:72:fd:a9:94:7f:79:1d:5e:a8:1c:8e:53:
79:15:b0:10:2d:21:94:f4:2e:4e:1b:dc:ca:98:53:0b:bc:0c:
32:08:69:53:34:fe:6b:c3:bd:a2:32:f3:6d:db:2c:70:da:0a:
9c:e6:52:5c:9b:ba:d8:77:56:28:8d:10:ab:db:e6:d2:71:b2:
ea:68:cc:31:af:e9:3d:28:a6:86:46:78:e1:f1:c3:64:f5:98:
e2:75:76:a5:79:c9:85:9b:57:76:f2:ca:13:4a:23:f0:a8:7b:
dc:2d:41:c2:d0:35:63:79:41:f9:2c:c5:73:05:84:56:a8:b8:
cd:12:19:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:03:29 2025 by rpki-client