Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/edf43bc9-f2b5-323a-ad10-4a2b29919f2f.roa
File: edf43bc9-f2b5-323a-ad10-4a2b29919f2f.roa (raw, json)
Hash identifier: 8oX9uQPNpnHO5n+4DudP7i6mZ639NsAdixKuWTe+itY=
Subject key identifier: 64:85:FD:9E:E4:2A:26:E1:27:1A:2F:F9:AF:C5:C2:67:A2:BF:14:D9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848696073509075464D0E950700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/edf43bc9-f2b5-323a-ad10-4a2b29919f2f.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1010:b0a2::/47 maxlen: 47
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:73:50:90:75:46:4d:0e:95:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=a4ff87d3-79f2-423a-bc1c-66fad25ea250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:a1:a0:a3:64:13:4d:8f:64:60:1d:bd:0b:
e4:eb:df:1f:1a:26:55:2d:48:11:d6:fa:48:a7:a4:
f2:7f:79:df:f7:55:50:b0:da:33:6a:c1:2a:25:50:
1e:34:14:24:24:46:4d:ce:ca:b0:b6:f5:83:c6:61:
17:dd:f0:e1:57:39:84:b2:cc:96:d6:0a:0d:2b:d6:
42:cb:f4:a9:eb:65:52:be:37:01:a7:f3:af:8a:5d:
ea:39:a5:1b:90:9b:05:00:62:e4:9f:8a:45:ea:a7:
39:19:21:43:40:35:9b:bf:0c:8b:4e:45:de:66:e2:
a5:27:5c:31:ce:af:e2:f2:14:5d:eb:04:c5:a4:9e:
2c:7e:d0:2d:69:ad:54:1b:29:0e:5b:99:24:19:97:
99:e8:03:b6:19:5e:59:78:cd:e6:4b:a5:5b:7e:da:
36:0f:72:c3:1d:51:6b:b6:47:64:c6:1b:8a:bd:ad:
4b:bc:78:82:f6:c6:f0:0c:b2:e8:56:af:a0:95:62:
00:e9:5a:25:f8:a7:fb:b6:a4:0a:cd:1d:49:5d:6d:
47:a4:be:f8:1f:3c:f4:83:6b:7c:7e:71:cb:7f:a9:
4f:ea:00:41:7b:1f:93:df:57:1b:c1:91:51:b4:91:
b8:ba:1b:6a:72:85:f1:50:89:e1:17:b0:58:23:12:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:85:FD:9E:E4:2A:26:E1:27:1A:2F:F9:AF:C5:C2:67:A2:BF:14:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/edf43bc9-f2b5-323a-ad10-4a2b29919f2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1010:b0a2::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:26:2f:e1:43:e5:99:a8:00:f2:58:3f:51:97:d2:b5:58:2f:
f6:94:ac:91:7f:c2:3e:79:aa:b0:cd:1f:53:39:33:f4:36:24:
73:6d:09:ac:ed:a8:34:37:d7:b0:f9:3f:77:74:01:77:f2:43:
84:38:f3:3d:5b:d9:9b:48:a3:3b:b3:6a:89:5f:16:6b:df:d6:
2a:f8:55:8d:41:93:0d:86:e5:82:9a:ee:10:1d:70:16:88:0b:
88:cf:41:34:8d:52:b7:a4:f4:84:88:ac:31:39:55:9f:e0:55:
44:35:a7:2e:d2:a7:9f:55:bd:4a:22:05:2c:4b:c0:16:f5:ef:
09:eb:60:2f:2a:a8:c5:3a:ce:82:af:1d:b8:c1:c1:65:3b:74:
db:04:76:ee:a9:1f:5a:6d:fd:a1:c6:e7:ba:c8:fc:37:c3:f0:
85:e4:1c:1e:25:91:06:26:98:1b:97:07:03:5e:8e:ea:26:03:
46:cf:31:ac:f6:44:e7:79:28:cd:6d:a7:7f:2a:ba:1d:1d:e7:
b3:0f:66:54:8d:e9:cb:a8:c6:9b:a2:e2:d8:31:0b:31:c2:cf:
65:b3:93:39:e6:2b:06:e4:c4:f3:38:46:a1:fe:2f:10:fb:0b:
70:c8:57:14:76:9a:5a:3b:6e:9c:41:a4:70:04:96:8a:db:28:
4f:b1:b9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:58:40 2025 by rpki-client