Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c029bbbb-dbaf-3bb8-a746-3a38db7c2e5b.roa
File: c029bbbb-dbaf-3bb8-a746-3a38db7c2e5b.roa (raw, json)
Hash identifier: UTLvYbVvIFldF3mqPueQ6F+GCZu8dDLBqp8DgmoUAvo=
Subject key identifier: 67:8C:AB:78:AB:81:6B:A9:2C:01:C9:43:04:2A:F5:AF:84:F5:62:D9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB7DAD4630E64E4820E0F0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c029bbbb-dbaf-3bb8-a746-3a38db7c2e5b.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1000:ff00::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:7d:ad:46:30:e6:4e:48:20:e0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=e674432b-0a99-4991-97f1-590d67f3cdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:75:75:7e:3d:17:75:51:7e:5e:a6:4d:5c:08:
5c:ad:14:ad:03:95:97:2a:f7:cd:40:e9:93:fd:fa:
b5:9e:1a:35:94:56:62:5a:cb:41:17:6d:c7:e0:fa:
89:d5:60:fc:4e:20:59:d4:f1:48:6c:22:e7:3f:58:
bc:92:4c:8a:74:00:05:6c:82:41:b3:19:eb:a2:de:
3d:4b:5f:86:dd:6e:0b:c8:9a:54:76:7b:68:3e:1a:
37:db:b1:55:20:23:dc:1d:b2:88:4f:64:7b:de:7a:
a2:a4:df:32:50:c1:48:a3:7a:ab:a0:98:bf:91:47:
09:59:71:20:ba:9e:39:87:f6:6d:00:94:e3:07:2f:
5d:ea:3c:70:7f:9d:04:58:7f:40:d1:97:c8:6c:4e:
aa:57:d6:d6:29:32:1c:4f:c1:f4:f8:76:42:af:d3:
ee:ab:a8:fb:a5:01:e3:49:21:dc:f8:f6:22:e9:54:
21:24:22:06:1f:cd:0c:7b:7d:32:57:07:d2:a0:f3:
ef:32:c3:6a:7f:6a:47:73:47:0f:9d:75:d1:b7:a0:
6c:0c:76:fe:98:ca:77:7c:2e:10:9f:4b:ab:0b:41:
3a:42:de:1c:7c:ee:8a:a0:75:3f:84:f2:17:41:f2:
d3:82:72:6d:64:90:b8:e2:75:69:09:d5:3b:6f:85:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8C:AB:78:AB:81:6B:A9:2C:01:C9:43:04:2A:F5:AF:84:F5:62:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c029bbbb-dbaf-3bb8-a746-3a38db7c2e5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1000:ff00::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:74:3e:ea:4a:a6:ae:80:19:10:29:0f:8c:86:4e:47:c4:ae:
5f:40:57:6b:f4:ab:8b:fd:c5:85:d9:db:86:01:cf:54:a5:6e:
61:99:37:bb:1f:f5:8d:99:d9:78:73:66:03:e1:e8:5c:19:51:
ac:9b:fb:da:2e:6d:dc:d7:dd:7b:f0:40:c4:15:04:2b:1a:e8:
59:91:4c:c4:1f:79:60:15:b8:b5:e5:3d:4e:a6:66:e1:27:ab:
ab:f8:5e:1e:bb:d4:57:ae:83:b4:96:dd:d6:af:91:96:8b:09:
8b:47:c0:99:fb:7a:81:4a:84:e1:46:5b:84:96:60:99:1e:ee:
cb:6f:bb:ca:95:d1:ce:d4:9c:ee:d0:c6:05:f9:ac:d3:54:c7:
14:6c:24:80:f4:38:4b:77:91:07:18:c1:4d:c8:cf:fa:3e:5c:
05:ff:6f:5f:86:5e:6a:fc:e0:d6:33:4e:96:ef:48:91:35:7d:
25:f3:a7:3b:a8:13:d4:f7:da:a9:fb:cd:4d:14:49:b3:61:4c:
51:96:19:89:8f:ee:97:4e:2e:aa:eb:ab:5c:c2:be:28:43:f6:
37:dd:94:ae:0c:13:85:98:73:ce:93:cd:2b:e5:86:e1:15:3d:
ed:34:07:6a:6c:33:5d:ff:8b:9d:3c:04:14:c7:06:6d:8b:a3:
82:2e:1e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:46:46 2025 by rpki-client