Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/54eb1a12-0530-3d40-a76e-1cfcdf9abd42.roa
File: 54eb1a12-0530-3d40-a76e-1cfcdf9abd42.roa (raw, json)
Hash identifier: AWgc2+Lhit6Nt38ZCAFI3wR0bhFgOSjseHbamU0Qbz8=
Subject key identifier: 28:0C:0C:3A:10:88:FC:8E:7B:C3:25:CF:8C:B1:E1:43:17:23:52:78
Certificate issuer: /CN=76dfbdf8-6f9c-4702-8da7-c6d5598c1126
Certificate serial: 010D0C9F432858487FE87D05B3509677E303DA80
Authority key identifier: 4E:7B:A2:59:20:66:94:5A:86:EA:37:F8:59:4A:86:3F:58:1A:D6:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/54eb1a12-0530-3d40-a76e-1cfcdf9abd42.roa
Signing time: Fri 10 Jan 2025 15:42:59 +0000
ROA not before: Fri 10 Jan 2025 15:42:59 +0000
ROA not after: Thu 10 Apr 2025 14:42:59 +0000
asID: 20473
IP address blocks: 2602:f73c::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:e8:7d:05:b3:50:96:77:e3:03:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76dfbdf8-6f9c-4702-8da7-c6d5598c1126
Validity
Not Before: Jan 10 15:42:59 2025 GMT
Not After : Apr 10 14:42:59 2025 GMT
Subject: CN=f72290dd-08bc-4e09-a938-3435bc9687c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:c4:ef:2e:08:9a:2f:ab:91:ee:44:9f:7f:
7e:82:9c:72:b1:5d:08:6c:64:cc:9a:40:75:87:88:
b5:4c:9c:dd:d2:7d:a0:50:90:4a:50:a3:d5:dd:a9:
23:5a:35:ca:d5:34:da:53:f6:e4:50:6f:bd:57:b5:
b6:90:c1:28:cf:86:e4:24:de:b3:76:9e:cb:c4:82:
c3:d7:44:29:4e:d4:dc:31:5c:73:ba:59:f8:87:f4:
f5:c7:68:67:be:6d:8e:fb:61:d9:38:9e:4a:89:92:
c1:0a:1d:43:e9:78:98:17:94:9c:a8:71:2f:0d:06:
e1:79:75:45:e4:02:35:5a:5d:5e:71:2d:87:95:cb:
50:d6:b5:58:af:90:90:53:c4:cd:71:a0:c5:22:3d:
8d:eb:d7:50:e8:8f:37:6c:ca:c1:af:47:6f:4d:c2:
d9:d7:c6:ef:c2:2f:08:94:30:7e:86:52:e8:67:42:
30:57:65:9c:37:c1:aa:31:fe:45:cf:25:b8:32:4a:
de:b1:53:08:5f:7f:8a:ae:ad:dc:9d:93:bb:eb:73:
7c:3c:26:11:6d:50:bf:ce:41:61:9b:7d:a9:73:b3:
43:82:8c:eb:f7:8d:f3:a4:c7:66:a4:45:37:66:9a:
bb:ae:e9:fe:5a:81:2e:46:7c:81:68:64:ad:22:73:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0C:0C:3A:10:88:FC:8E:7B:C3:25:CF:8C:B1:E1:43:17:23:52:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/54eb1a12-0530-3d40-a76e-1cfcdf9abd42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.crl
X509v3 Authority Key Identifier:
keyid:4E:7B:A2:59:20:66:94:5A:86:EA:37:F8:59:4A:86:3F:58:1A:D6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f73c::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:2c:80:b7:7f:ad:70:d8:76:d6:c4:d1:1e:7d:23:6c:df:d0:
16:78:18:19:e8:ca:4b:37:a2:94:35:85:f9:95:2f:6f:6e:fb:
e9:3b:a5:44:df:0c:10:46:7a:1d:8e:85:c9:47:6b:6f:1a:47:
f4:04:78:48:b1:bd:93:3b:c7:7f:ef:8a:cf:59:96:7b:b8:a5:
98:43:6c:63:e1:c1:84:63:21:5c:e4:ce:ba:f9:a5:72:5a:81:
a4:54:23:69:f6:59:7a:f7:fa:21:01:3e:f6:ce:74:08:98:cd:
4b:78:be:15:c4:fb:af:75:f9:18:17:9b:97:0d:11:92:ad:bc:
fe:ad:4e:e1:f5:d0:9e:1a:a6:23:ff:3c:ba:70:1c:ad:1d:c4:
ac:48:81:dd:b2:c6:c6:de:8e:17:e1:f7:a3:2c:48:f2:d5:e4:
13:ba:9b:8f:94:b8:27:ec:2f:09:fa:e9:42:4a:42:c4:52:62:
3d:10:06:cf:3f:7a:a6:e2:01:6a:53:52:78:36:54:dc:f8:2b:
88:8e:08:65:55:61:5a:23:11:9e:db:31:e0:74:e5:17:94:07:
5e:c7:7b:34:6b:9d:49:c1:eb:fb:43:a5:18:d5:99:c0:00:8c:
93:3b:96:e8:5e:a1:ee:5e:ed:3c:f2:7f:ab:9d:ac:cf:d2:a1:
0b:16:0a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:04:25 2025 by rpki-client