Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/b67aacee-5563-31ce-9c43-19452407c884.roa
File: b67aacee-5563-31ce-9c43-19452407c884.roa (raw, json)
Hash identifier: 6g4r9ywfb7llup30zUqpyen+by2F3wmJ1LXqoJWtFFM=
Subject key identifier: FC:AA:71:79:E0:74:B5:1F:5C:02:E6:53:9E:18:FA:17:9B:6D:D7:58
Certificate issuer: /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59
Certificate serial: 010D0C9F4328576D51CC73C042CFC1718963AAE0
Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/b67aacee-5563-31ce-9c43-19452407c884.roa
Signing time: Fri 17 Apr 2020 18:25:42 +0000
ROA not before: Fri 17 Apr 2020 04:00:00 +0000
ROA not after: Thu 21 Jul 2022 04:00:00 +0000
asID: 36374
IP address blocks: 2604:4200::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:89:63:aa:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59
Validity
Not Before: Apr 17 04:00:00 2020 GMT
Not After : Jul 21 04:00:00 2022 GMT
Subject: CN=7df121ec-9a7f-4ee4-971f-56eff116a421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:4d:ce:91:49:7d:ad:47:bd:68:75:ad:fa:
55:c4:f3:2d:30:c5:99:ad:b7:de:ba:92:1d:43:c8:
8c:12:79:b4:d2:67:12:ec:41:2f:bb:87:9f:31:62:
a9:a3:5a:ed:b6:95:5a:99:ec:76:aa:2d:ef:15:c5:
98:42:6e:f0:07:53:e5:d7:44:ce:df:e6:49:32:b1:
7d:80:2a:dc:eb:77:88:80:1e:9e:cb:7d:07:8e:c9:
a9:cb:df:6d:e9:7f:3b:88:7b:d7:44:d9:ba:d2:58:
79:fe:9b:49:ce:68:11:c4:0c:0e:5c:56:6a:41:6e:
98:f6:fa:14:ae:17:3a:bd:51:2a:20:ea:3e:bf:e2:
dd:bb:14:34:1a:fa:41:73:e7:c1:f6:c3:18:cc:97:
2d:9e:77:38:bd:d9:44:9e:d9:81:81:03:26:a7:fd:
3f:e1:4c:ca:aa:88:70:cf:4f:5d:d9:76:97:d1:c5:
ca:88:8f:df:57:d6:bc:2e:61:10:82:7d:6f:02:e9:
e3:9a:61:b3:14:91:1b:89:30:9e:a5:63:1f:f1:ed:
7d:4d:75:5b:5e:26:42:57:2d:b9:77:42:88:2b:38:
f2:a7:8d:38:7e:f7:4c:28:b4:f4:06:85:9e:18:5b:
fa:df:0e:3c:ff:4f:a5:3e:1e:a8:32:e3:83:a8:6a:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AA:71:79:E0:74:B5:1F:5C:02:E6:53:9E:18:FA:17:9B:6D:D7:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/b67aacee-5563-31ce-9c43-19452407c884.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl
X509v3 Authority Key Identifier:
keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4200::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:b2:c0:31:58:ab:47:71:03:5f:a4:63:99:28:40:0e:86:e5:
27:30:77:dc:f6:e5:ba:81:0d:cb:2e:2d:22:8d:a0:1c:27:14:
36:13:94:06:84:9b:63:c9:f9:b8:78:66:88:aa:e8:5b:e3:af:
96:c7:a0:6c:d7:10:63:aa:2e:fa:56:df:6a:52:e9:c0:75:79:
ca:9a:e9:3a:8c:c4:24:3f:3b:3f:13:9b:75:04:b2:1e:ed:35:
75:ab:be:06:ca:cb:99:84:54:f4:7f:29:d0:ac:ba:b3:00:a5:
08:c9:a7:65:b5:c1:67:76:78:ce:08:a6:79:7a:32:a3:11:df:
83:79:4b:74:61:01:86:3e:13:2a:af:03:cb:55:cb:7d:9c:90:
df:63:38:b9:52:9d:80:cc:0a:dc:1b:45:3d:af:f6:49:ac:83:
59:97:46:58:e6:c5:d4:ac:b4:bb:c7:7f:6d:79:de:ea:f0:f7:
19:d8:6b:90:f3:59:71:14:41:e0:fa:03:68:b7:87:02:05:44:
85:b5:97:57:af:b0:db:8b:0d:19:7e:e0:ba:96:86:f9:22:34:
c8:72:83:b2:91:d3:ce:21:5b:5a:a4:d9:57:3d:da:be:00:e5:
42:52:37:d7:4c:71:5d:72:5e:a7:2b:75:75:48:03:ec:ef:2e:
0c:91:f1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:44 2025 by rpki-client