Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/cce71dc9-3e5f-3459-a3bd-1117a2c2bd73.roa
File: cce71dc9-3e5f-3459-a3bd-1117a2c2bd73.roa (raw, json)
Hash identifier: sCZcIAF4qyzf/0SS0fo8dIQn+z1DVW8QRo2k7MkOQfQ=
Subject key identifier: E0:C9:A4:37:00:B8:8C:04:1F:D4:C3:16:7F:68:A7:13:34:54:FD:33
Certificate issuer: /CN=3fd37bf6-6955-4ed5-8347-2896767afab0
Certificate serial: 010D0C9F43285845107622C9761D038D12C178A0
Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/cce71dc9-3e5f-3459-a3bd-1117a2c2bd73.roa
Signing time: Fri 01 Mar 2024 15:17:02 +0000
ROA not before: Fri 01 Mar 2024 15:17:02 +0000
ROA not after: Thu 30 May 2024 14:17:02 +0000
asID: 40545
IP address blocks: 2606:380::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:10:76:22:c9:76:1d:03:8d:12:c1:78:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0
Validity
Not Before: Mar 1 15:17:02 2024 GMT
Not After : May 30 14:17:02 2024 GMT
Subject: CN=a656e5a5-48bb-4350-bfce-bf20931bd9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:fb:17:9c:e0:41:b6:41:e3:85:68:f8:d4:
2f:f1:d2:1c:f2:c1:4f:68:c2:44:19:c2:74:83:67:
99:52:d5:e4:64:1c:54:a3:9a:44:77:c8:91:fa:a4:
23:d9:0b:12:51:e0:50:bc:25:4e:28:d8:12:40:c4:
80:06:e8:ad:e9:62:c9:1f:3b:a0:fe:f8:2b:5a:f5:
f9:e1:b8:31:38:fd:80:50:b4:45:52:ef:bf:3e:80:
b0:a3:07:6b:f4:88:8e:eb:b7:c8:1b:e8:d8:f8:b2:
e1:2b:39:2a:8c:7e:a8:a2:c5:38:e3:16:9c:f6:5a:
6d:18:c3:95:78:c5:40:55:c5:a3:1b:47:23:3b:79:
98:eb:7d:5c:6b:31:00:67:23:02:00:2b:26:41:9b:
97:a6:9d:b5:9b:ae:4e:6e:4d:18:2c:c1:05:86:99:
2c:2d:d3:06:8a:0b:53:db:28:25:83:db:4c:40:60:
00:e8:6f:5f:59:a2:6e:7b:6e:eb:f6:02:93:06:eb:
3d:c1:6f:3a:86:8d:f7:df:86:b3:bc:cc:b4:fa:9b:
0c:d8:14:29:ec:c5:c4:04:89:20:ac:69:b9:4f:cb:
e6:83:e3:e7:8d:9c:fb:25:ff:10:40:1b:db:0b:d7:
da:aa:0a:bd:5d:61:47:d0:44:66:ed:92:b9:34:11:
10:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C9:A4:37:00:B8:8C:04:1F:D4:C3:16:7F:68:A7:13:34:54:FD:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/cce71dc9-3e5f-3459-a3bd-1117a2c2bd73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl
X509v3 Authority Key Identifier:
keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:380::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:cf:14:26:d1:9e:f8:cc:de:2a:70:57:8a:59:0c:06:90:b2:
06:a7:d1:de:e0:d7:87:a6:a8:46:7c:1f:db:00:ea:5e:67:29:
d4:2e:3f:02:29:27:2d:92:51:0e:5d:d3:5a:e7:f8:e1:a2:17:
bc:8b:44:4f:15:aa:61:f7:a4:d0:32:c7:84:bc:60:6c:6b:2a:
2e:68:d1:ff:92:31:cb:ef:bb:c1:8d:f6:0e:92:37:0c:ed:b0:
bf:88:e6:a2:2d:ea:54:6d:9e:1f:ae:2a:08:cb:71:e0:f6:d3:
a3:d1:ee:e7:38:a5:0f:98:92:aa:fe:46:22:b0:cd:14:41:d0:
16:af:d6:b3:a8:3e:7b:7c:c3:29:8e:07:6a:68:06:64:41:46:
d4:f3:d0:a7:95:67:89:d0:89:93:a7:e7:e4:4a:a7:62:d0:ba:
15:8e:92:18:5c:60:a1:e2:40:05:c3:cb:6e:6b:b2:95:21:f3:
f9:29:cc:30:58:c2:ff:8b:f9:93:16:52:6d:b0:58:3e:49:6e:
a0:e7:e8:61:a4:f9:9b:d4:cc:03:b4:c6:a2:bd:71:6a:24:24:
4e:e9:ad:44:4f:b5:29:4c:be:81:a7:84:83:ed:8d:87:87:e3:
8c:77:1c:c4:bb:1a:f3:c3:b6:23:95:f8:65:f7:68:41:d0:5e:
5f:34:3e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:28 2025 by rpki-client