Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/aae3c755-d935-319d-bd7c-d288d7ee7dd9.roa
File: aae3c755-d935-319d-bd7c-d288d7ee7dd9.roa (raw, json)
Hash identifier: hME7Yi1yb0v7EoPuGTpP+/ADtQVXyfuaN7ch/N73l3A=
Subject key identifier: A0:43:BD:E2:55:A8:D7:71:8D:F4:D5:F3:35:B7:EB:24:0D:B2:E6:1E
Certificate issuer: /CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Certificate serial: 010D0C9F4328584848FA0D92A17FE6F8DF5284C0
Authority key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/aae3c755-d935-319d-bd7c-d288d7ee7dd9.roa
Signing time: Sat 21 Dec 2024 23:28:55 +0000
ROA not before: Sat 21 Dec 2024 23:28:55 +0000
ROA not after: Fri 21 Mar 2025 22:28:55 +0000
asID: 40124
IP address blocks: 2602:299::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:48:fa:0d:92:a1:7f:e6:f8:df:52:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Validity
Not Before: Dec 21 23:28:55 2024 GMT
Not After : Mar 21 22:28:55 2025 GMT
Subject: CN=be0e8a41-3fa5-46e2-a8ec-5c7d079b266c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:a6:5c:19:7b:de:0c:c3:d0:3b:5a:a3:c4:
b0:66:c4:29:fa:aa:6e:81:f0:5f:1c:9c:f2:a5:bc:
51:7a:13:0f:c4:5c:32:d6:e2:8f:3c:c8:cd:17:5b:
11:d1:6b:af:69:40:89:57:35:d9:28:29:e2:66:55:
3a:8c:01:b0:ca:e3:d2:64:27:48:67:1f:0e:c8:cb:
c5:a4:78:fd:0d:dd:54:dc:3a:0c:a6:11:21:ad:1a:
2d:8f:85:b7:3c:5e:c0:ef:bf:4e:d5:cb:86:5a:bf:
b5:e2:cf:b5:b8:cf:f7:db:b9:ae:f2:0a:d4:75:84:
8c:4a:a2:07:2d:0b:ac:07:d4:81:4c:42:32:4b:ab:
4a:a1:08:9b:75:7a:36:f9:20:5c:64:86:52:13:6f:
56:b9:46:a2:ba:89:ea:70:a8:be:dc:40:dd:dd:5a:
03:7e:d9:45:6b:83:1f:fc:23:8e:09:55:99:26:4e:
70:ba:96:60:c1:4c:90:5b:be:df:79:d1:da:66:98:
e4:96:86:11:0f:6c:ac:62:fd:5f:de:1b:a4:43:22:
22:85:4d:23:0a:54:4c:aa:37:ed:cd:bc:0d:72:12:
eb:ef:a4:8b:31:25:fd:cd:6c:56:dd:f2:4c:ae:96:
76:50:5b:82:68:da:7d:5f:d6:ab:2f:31:2c:09:e7:
54:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:43:BD:E2:55:A8:D7:71:8D:F4:D5:F3:35:B7:EB:24:0D:B2:E6:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/aae3c755-d935-319d-bd7c-d288d7ee7dd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl
X509v3 Authority Key Identifier:
keyid:8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:299::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:f8:16:2c:af:aa:23:c8:e0:a7:3a:87:d0:20:1e:18:44:53:
3a:87:04:c1:26:a2:f2:b1:ab:63:11:59:80:e3:02:b0:69:c5:
f6:7c:52:5f:8b:3f:e6:21:ff:5c:a7:58:e5:bb:53:87:37:c6:
1e:db:81:4b:48:38:cd:0a:31:5e:df:06:a7:0c:69:bc:b2:f2:
0d:bb:cb:5a:bb:f5:99:47:97:5f:65:01:03:8a:ed:b6:34:cd:
d4:04:a8:03:5a:52:8b:fa:ae:74:81:87:fe:d1:51:76:24:e0:
16:aa:c3:84:0d:d1:2f:b2:db:a6:e3:65:dd:f2:c3:ec:1b:7e:
42:be:29:93:5e:8e:93:c2:69:73:cf:06:30:26:80:fe:a5:f6:
16:70:d1:ca:b9:7f:41:85:6e:a6:52:65:bb:0d:5d:7e:65:2f:
4b:57:9d:e3:83:3c:b4:86:73:7a:6d:9c:99:78:e8:54:35:40:
e5:a7:10:74:3e:20:1f:c7:78:bf:13:64:64:4e:42:54:99:d8:
ec:80:0f:0f:69:af:41:37:9b:94:81:14:b3:37:28:e8:ad:fb:
5b:57:85:97:b2:f6:64:13:de:a0:a5:38:ab:e0:2c:48:43:d3:
60:a9:1f:cb:b8:61:36:b0:61:b7:21:dd:4e:e8:8b:75:71:3c:
22:b5:dc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:25:49 2025 by rpki-client