Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/43840f63-8daa-35e5-8969-b6e0d9ce66b8.roa
File: 43840f63-8daa-35e5-8969-b6e0d9ce66b8.roa (raw, json)
Hash identifier: kBhQ5CV3CCQgYmPeikdh9sDBnj97SUJWJdqlQj4MpVg=
Subject key identifier: D9:4A:99:7F:4D:B3:22:1A:C6:16:25:D3:AA:CD:23:C6:44:1C:D0:4F
Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial: 010D0C9F43285839558C1F1408FF990152809700
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/43840f63-8daa-35e5-8969-b6e0d9ce66b8.roa
Signing time: Fri 14 Feb 2020 05:00:00 +0000
ROA not before: Fri 14 Feb 2020 05:00:00 +0000
ROA not after: Sat 24 Jun 2023 04:00:00 +0000
asID: 399196
IP address blocks: 2604:4d40:7000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:55:8c:1f:14:08:ff:99:01:52:80:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Validity
Not Before: Feb 14 05:00:00 2020 GMT
Not After : Jun 24 04:00:00 2023 GMT
Subject: CN=6d3155cd-64ca-4724-8ba4-1b86dd8ca3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:85:26:4b:f2:08:c8:8f:11:c2:12:66:5b:cc:
c1:8d:1b:c0:9a:3c:d6:c5:71:c5:af:22:3d:bb:96:
93:46:3e:16:19:1a:9e:65:ff:5e:4f:11:f1:01:ff:
db:fd:30:7f:18:31:ae:fe:46:8f:a4:02:f5:c2:82:
1a:e2:c4:dc:de:da:16:38:9d:72:ca:52:dc:6c:f2:
d3:49:c2:80:15:16:53:b0:45:66:72:ea:26:a3:4b:
d6:2e:b6:8b:15:eb:4a:09:48:76:20:0d:6f:0e:db:
64:27:86:15:82:8f:15:ea:20:74:44:b2:dc:dc:00:
56:d3:48:66:54:c0:49:69:7b:04:53:30:4f:31:61:
37:b1:fa:b1:e6:96:01:cc:a3:59:00:04:77:de:ad:
13:98:13:78:26:25:99:e9:1c:bf:2f:47:68:0e:d5:
57:e1:cb:18:0f:1d:34:63:f1:6b:21:aa:58:ec:80:
e7:30:ba:ae:13:3e:5f:54:2f:4b:e0:9e:9b:cb:f8:
69:36:5d:eb:40:8d:cb:57:12:5c:76:e1:d6:33:e3:
de:39:5a:ad:0e:b1:21:f7:08:99:c0:08:3f:b0:23:
97:7f:2b:e8:9a:fc:bb:6c:52:55:61:29:54:0e:31:
47:3b:ae:53:34:de:5a:0e:c3:00:b3:00:75:3c:ec:
9d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4A:99:7F:4D:B3:22:1A:C6:16:25:D3:AA:CD:23:C6:44:1C:D0:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/43840f63-8daa-35e5-8969-b6e0d9ce66b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
X509v3 Authority Key Identifier:
keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4d40:7000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
db:38:36:f8:c8:76:98:cd:ce:9c:b1:12:b1:21:d6:21:f0:1d:
1b:47:91:af:24:a5:8a:5a:4f:1b:09:be:d1:2e:6b:f9:62:5e:
21:53:d2:cb:9c:ba:89:7f:e3:f5:5a:27:74:39:8d:b7:b3:d7:
f3:64:3a:f0:d6:b5:bf:9a:fa:a1:fe:40:a7:16:44:ac:10:2a:
f5:81:5f:65:f2:df:e3:5c:f7:84:11:16:45:a7:7b:a2:3b:1f:
bc:b5:6c:d1:28:e6:2f:8a:19:20:b3:a8:15:f9:4f:ff:27:5d:
f0:86:7f:37:1e:c5:8e:01:ef:4c:01:46:c7:85:0d:63:84:4d:
b1:31:43:c6:3f:30:5f:ce:a6:07:1c:38:15:5f:c8:4b:b4:2a:
a2:8c:13:c4:71:b4:c1:a3:c8:59:48:90:a4:6f:bf:ef:ff:e3:
ab:25:52:04:5e:52:f6:71:8e:b8:05:96:38:0a:d3:67:fc:f3:
f5:c8:0b:7d:86:4b:d1:b4:43:7d:70:6a:6d:68:a5:7f:f0:9c:
31:6a:4a:07:c6:9e:d2:53:51:fd:ed:81:13:21:0c:58:8c:80:
34:6f:1a:59:07:ea:db:fb:ef:7a:61:72:6a:b5:ff:be:91:0e:
eb:f4:7d:5e:e4:07:20:7d:69:82:e9:2f:96:e0:0c:3c:63:1b:
7b:75:d3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:08 2025 by rpki-client