Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/30009ebe-1bc2-3ca3-b606-0b9e33060bcf.roa
File: 30009ebe-1bc2-3ca3-b606-0b9e33060bcf.roa (raw, json)
Hash identifier: yZBjvjIQcG20FBOAlC4om7hG90TMGMj2VtYSWLPBT1U=
Subject key identifier: 87:99:CF:C7:F1:15:FA:6B:E3:1B:31:58:39:3C:A2:DC:2E:B1:FA:5E
Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial: 010D0C9F4328576D51CC73C042CFC171EBD1584A
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/30009ebe-1bc2-3ca3-b606-0b9e33060bcf.roa
Signing time: Wed 06 May 2020 21:08:17 +0000
ROA not before: Tue 11 Feb 2020 05:00:00 +0000
ROA not after: Tue 09 Aug 2022 04:00:00 +0000
asID: 396501
IP address blocks: 2620:10a:80ac::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:eb:d1:58:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Validity
Not Before: Feb 11 05:00:00 2020 GMT
Not After : Aug 9 04:00:00 2022 GMT
Subject: CN=24d79a2d-4ac1-40a5-9bcb-8b557e51cb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:77:a8:ac:7d:70:50:fa:e8:9e:d4:ef:77:5b:
a9:53:5d:d6:1a:28:08:ce:78:94:cd:89:32:89:f9:
a1:7c:ee:f9:e6:ff:2d:b5:52:b8:a2:7d:46:7b:1f:
fc:cb:8b:b3:b9:04:02:1e:ee:59:9f:69:ae:27:fb:
09:ca:de:4b:7a:61:6a:f2:87:40:49:93:82:e9:ea:
ee:79:93:5a:ea:6d:81:f3:5b:20:b7:4b:5e:1a:87:
e9:cd:6e:00:df:72:24:c2:f3:a5:08:0d:76:ab:c0:
40:de:f8:15:2b:4d:81:0a:2e:e0:42:b1:75:52:5d:
43:bc:1d:27:35:37:ea:a0:20:0a:2c:53:53:1f:d5:
44:68:14:86:13:1e:22:88:ee:d1:83:e0:80:9f:12:
81:eb:7e:9d:37:cb:66:3b:ca:bc:3c:9a:34:f8:a2:
90:07:96:37:05:0b:93:bb:93:ad:84:a7:ed:3b:02:
d3:aa:7a:bb:bd:ab:3e:72:c6:0f:40:15:41:32:dd:
7e:07:58:99:ee:44:04:b9:87:42:b7:10:a4:ae:ee:
08:cb:9d:5a:13:1f:8c:a4:e5:b4:92:d5:15:16:19:
d2:87:05:83:1b:b3:1b:e9:63:ed:ae:23:cf:c0:20:
25:42:ab:71:02:5f:f1:e5:57:c8:b5:af:fb:80:6a:
6e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:99:CF:C7:F1:15:FA:6B:E3:1B:31:58:39:3C:A2:DC:2E:B1:FA:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/30009ebe-1bc2-3ca3-b606-0b9e33060bcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
X509v3 Authority Key Identifier:
keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10a:80ac::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:46:cb:c9:1c:68:55:cc:b6:af:51:20:1a:9e:d7:fa:8f:3b:
92:ad:93:c5:f0:ce:1c:4c:8b:d5:8d:88:25:b0:00:aa:0f:d9:
1f:c7:ed:98:68:87:e2:b9:24:7f:b3:b1:13:02:6d:b9:04:ab:
36:f0:db:b9:a7:5d:16:c2:a6:f5:50:aa:28:7c:9a:7a:87:35:
16:ac:8b:6e:fb:6a:b0:6c:e2:82:a4:86:34:a8:3e:dd:0f:75:
c9:5c:f7:2d:cc:fe:0d:93:63:71:86:79:35:ef:40:5f:a8:34:
23:97:6a:c9:5a:b1:52:43:38:c1:89:d1:0d:e7:1a:1b:6a:88:
45:84:2d:44:5d:c1:0c:c6:c7:aa:fd:80:c9:be:03:dd:14:6a:
ea:6d:11:14:1a:85:ee:b8:91:41:23:f1:89:67:7d:25:99:b6:
9d:2b:c5:c1:29:2c:60:3f:c7:5e:99:13:60:93:ab:d3:fd:6f:
ce:74:57:1c:d1:ae:ee:0d:61:c6:5b:89:00:ac:b3:1f:70:36:
ce:cc:70:9e:33:87:ca:f2:6c:c5:e3:61:51:d2:13:36:30:67:
8d:ed:f8:37:22:6f:4f:57:cb:1f:2c:41:35:8f:ef:08:47:91:
91:5b:ff:0c:6e:e3:35:41:23:3b:76:01:04:ee:8e:ea:fb:a3:
c0:49:60:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:10:52 2025 by rpki-client