Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4cf3960-692c-3b1f-ab61-46df4c5ce499.roa
File: c4cf3960-692c-3b1f-ab61-46df4c5ce499.roa (raw, json)
Hash identifier: kv4bYkXYvBa1Qp5MElDPUlImzCunysuhKORxpwW+kSM=
Subject key identifier: A5:FF:03:FB:6B:79:08:51:9B:BA:99:6E:66:D2:71:FD:93:82:91:B6
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB7D6390F47BE9303D3800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4cf3960-692c-3b1f-ab61-46df4c5ce499.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1000:bf0c::/47 maxlen: 47
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:7d:63:90:f4:7b:e9:30:3d:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=a42fa530-29e8-44a9-9bb7-23d484e49c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:19:6d:05:da:a9:48:4a:66:2c:48:f5:b9:
9a:20:08:2e:c5:5c:e6:44:1b:db:14:66:03:69:ca:
09:5f:55:66:7d:08:d0:c8:f6:cf:1b:d8:fc:65:ae:
6a:32:d2:36:a8:a1:2f:72:30:cb:d3:57:e4:2f:bc:
d9:d6:50:69:09:1e:5e:0e:72:c3:f5:6d:1b:60:6b:
d6:4f:56:66:34:bb:88:ac:64:1d:91:ce:42:d3:b6:
89:1e:88:78:08:64:b1:bc:a5:81:15:2f:68:b9:ae:
97:b3:5c:92:79:bb:a8:12:8c:45:77:92:bb:9d:00:
c2:7d:a9:7f:d5:67:5e:a1:65:49:f3:f0:19:eb:d4:
40:42:9f:04:80:aa:af:f0:73:56:5b:55:b0:03:63:
fa:82:d6:f7:91:5f:b3:06:1d:34:1a:ab:13:19:a1:
4c:bd:a9:45:12:45:db:0b:29:e0:f1:4f:45:d1:ed:
3f:e3:81:1b:b0:42:5e:ca:e8:52:be:f4:a1:a0:ce:
c1:46:ed:8c:7d:ac:8d:b8:7b:78:6b:ab:53:77:37:
bf:91:2b:44:9d:76:9d:22:12:9f:d6:84:9e:13:f7:
5c:e6:95:79:62:9f:62:ad:f6:d9:8f:a9:c6:b5:4e:
76:8b:36:20:4a:db:af:87:8f:2c:db:51:b1:6e:17:
27:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FF:03:FB:6B:79:08:51:9B:BA:99:6E:66:D2:71:FD:93:82:91:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4cf3960-692c-3b1f-ab61-46df4c5ce499.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1000:bf0c::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:d1:45:05:3f:80:a0:77:eb:75:71:26:56:33:70:83:c7:0a:
93:55:3c:bc:40:8b:4b:6a:08:20:86:2d:58:bb:f3:20:3a:75:
a4:d9:57:b1:b1:e6:30:70:69:38:ac:cb:98:e4:6c:11:6d:b7:
da:cc:47:eb:b1:d7:f1:cd:1a:2f:55:a7:4e:4b:f8:57:df:72:
c3:6c:fe:5d:4c:b9:ba:89:74:21:16:39:41:c1:a2:2d:32:cd:
12:ae:00:3f:f6:f3:16:94:35:1c:21:8a:b9:08:2d:4e:a7:50:
84:25:ff:e0:0c:1b:61:52:e0:42:de:0e:76:cb:5e:4e:c5:b4:
58:2b:63:5d:5d:2f:ae:e7:9e:9a:76:29:81:67:b1:63:96:47:
fc:68:e6:fe:5a:3c:53:d6:d9:06:e7:1b:4e:44:a8:b8:b0:25:
c1:f5:0f:d8:ce:e1:a8:ab:20:5c:35:40:62:48:73:ba:d7:06:
e5:06:d4:bc:bb:82:95:00:55:c9:8c:00:4e:59:b9:a7:b3:84:
a7:ff:3f:80:2f:f7:c9:f9:ad:c9:fb:b7:3a:79:2e:b7:9d:d3:
6d:10:e0:4a:a1:9d:16:b1:6e:ea:6a:d4:45:3a:67:34:12:b9:
76:21:d2:f1:db:a5:41:9f:b1:a3:bf:c4:d6:d0:79:fe:5c:eb:
54:97:2c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:00:41 2025 by rpki-client