Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/d836e535-11e6-321e-a76d-ac2303f461d7.roa
File: d836e535-11e6-321e-a76d-ac2303f461d7.roa (raw, json)
Hash identifier: ENWuT2LpCl4sKe7x5lDd77Cczv+Sk3y1Vx8Vab4v4ko=
Subject key identifier: BE:63:EF:7E:D7:07:63:84:CF:EE:FE:9A:9A:DE:69:24:F4:41:04:2D
Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial: 010D0C9F4328576D51CC73C042CFC17371B76F1A
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/d836e535-11e6-321e-a76d-ac2303f461d7.roa
Signing time: Tue 21 Jul 2020 14:11:53 +0000
ROA not before: Fri 14 Feb 2020 05:00:00 +0000
ROA not after: Mon 24 Oct 2022 04:00:00 +0000
asID: 39967
IP address blocks: 2604:4d40:5000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:71:b7:6f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Validity
Not Before: Feb 14 05:00:00 2020 GMT
Not After : Oct 24 04:00:00 2022 GMT
Subject: CN=470c7ab5-8d93-4102-8023-72da92e61219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:c0:3f:78:84:06:06:d8:26:fb:a9:fe:9c:
8c:93:59:4a:89:5d:c4:3d:ab:0d:24:52:7e:0b:37:
58:d5:94:3c:8c:17:f3:7e:68:c1:77:59:b1:16:bc:
9a:a6:b7:ae:ff:11:48:89:97:63:a3:3f:2f:9f:c1:
0f:37:55:bc:11:5c:63:fa:ed:04:ea:1d:1c:e3:97:
0e:d7:d7:a2:ea:04:1c:eb:c4:0c:16:88:3d:c2:c3:
f6:56:d6:69:ea:30:ce:8f:44:9c:2b:37:00:7c:41:
8c:cc:e6:bd:31:79:4d:50:e3:96:4c:ee:8c:9e:35:
1e:34:ee:ad:97:3b:a0:57:21:04:b8:7b:4e:29:e3:
8e:c3:90:5c:e7:b4:66:cc:f6:8f:c7:79:a4:5d:e2:
75:dd:2e:0b:cb:ef:27:38:7e:f6:c1:d8:a8:3f:c1:
29:11:c4:38:74:5e:a4:78:2f:11:bf:0b:ce:41:16:
a0:0e:1c:d7:ee:ac:fb:98:db:f2:56:b3:2a:8e:01:
56:af:8d:19:ef:bc:e3:54:c1:3e:6c:68:c6:86:80:
ff:60:e6:cc:46:c5:00:86:1d:4c:ec:c1:a5:c9:21:
3f:92:a3:0c:1d:d5:39:d6:2d:ff:a8:a2:49:fb:9f:
d5:d3:b4:7c:65:96:e3:35:27:ae:fc:02:52:d8:8f:
35:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:63:EF:7E:D7:07:63:84:CF:EE:FE:9A:9A:DE:69:24:F4:41:04:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/d836e535-11e6-321e-a76d-ac2303f461d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
X509v3 Authority Key Identifier:
keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:4d40:5000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:da:77:9a:6b:0e:b8:a0:34:3f:ac:60:99:fc:12:2a:1e:52:
04:41:a9:e3:ca:ef:a5:20:22:9a:7c:e9:8a:86:5a:9c:43:ef:
20:05:b8:70:d0:7d:5d:e3:61:46:96:e9:e3:3a:1d:62:af:fd:
1a:46:a9:51:d9:98:b0:b9:09:df:bf:bc:14:ca:f0:b8:f9:71:
c0:56:a9:b8:ea:6f:21:ce:0c:1d:32:29:21:37:a9:c2:af:97:
c0:3f:8c:8a:7c:d8:6b:88:71:17:a2:35:dc:3d:48:42:99:76:
61:8b:60:41:32:cc:a9:d5:f3:0d:75:ac:f4:1b:c5:04:07:67:
e1:8b:37:5f:31:a9:9a:1f:fd:7b:60:57:91:31:7c:43:e6:dd:
aa:d9:78:12:9c:20:2f:de:91:3d:43:dc:d8:fe:ba:12:ed:ff:
5b:28:91:8a:52:09:ae:3b:aa:06:d1:08:52:d6:b2:1a:ae:a3:
5a:dd:84:08:ba:13:96:8c:5c:3c:c7:78:15:14:1b:57:e0:a3:
14:5b:48:ec:c9:fb:99:9d:2a:7e:e5:75:f2:46:9a:38:fc:f3:
f7:3a:0d:b2:63:a2:6c:d1:52:f8:e0:7e:11:fd:96:39:f4:d9:
e2:f3:0e:2d:45:44:74:aa:a0:d5:de:94:37:58:c9:92:00:74:
9b:43:54:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:54 2025 by rpki-client