Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/9f0e6c78-43ce-36d9-b1d0-fb877a670e03.roa
File: 9f0e6c78-43ce-36d9-b1d0-fb877a670e03.roa (raw, json)
Hash identifier: 83/Bis1rkdzvdmu/zuBrRhuP7oJbfYzN6JAdgDEYIYE=
Subject key identifier: B8:78:2A:CE:A9:C8:16:86:C1:9B:D0:48:4C:F3:51:43:FD:9D:32:29
Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial: 010D0C9F43285846A51E6D40B41573317DFF6680
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/9f0e6c78-43ce-36d9-b1d0-fb877a670e03.roa
Signing time: Wed 24 Jul 2024 14:02:42 +0000
ROA not before: Wed 24 Jul 2024 14:02:42 +0000
ROA not after: Tue 22 Oct 2024 14:02:42 +0000
asID: 33
IP address blocks: 2602:f95c:7a3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:a5:1e:6d:40:b4:15:73:31:7d:ff:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Validity
Not Before: Jul 24 14:02:42 2024 GMT
Not After : Oct 22 14:02:42 2024 GMT
Subject: CN=09b4b654-73d4-4f1e-a540-0ea99059d7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d2:87:02:03:4d:6c:15:ed:29:29:44:01:6b:
a6:80:d9:9a:3b:98:89:ab:1b:d6:60:24:e4:58:68:
fc:46:b2:6a:6b:f2:52:c0:51:99:45:fe:e1:a4:f0:
b5:39:f2:be:0b:b0:ae:f9:7b:6f:1a:6d:ba:6a:ee:
07:5b:9f:5d:16:3e:49:dc:ab:8e:76:d0:6f:15:99:
56:4c:14:28:9a:8d:3f:de:8b:d6:9d:c2:ae:5b:58:
b7:78:35:8f:ce:57:60:77:7d:57:3b:7c:c5:f1:ba:
dc:13:fa:5e:49:b1:62:1d:6a:af:bb:a2:74:67:a4:
b9:35:81:21:a2:09:00:36:d3:53:59:b6:88:53:c0:
85:24:6c:65:82:96:6d:7d:aa:b3:56:e8:0f:53:03:
b6:01:0b:63:61:2c:1f:7d:7a:80:2c:0f:8d:d2:8b:
1f:42:07:65:f6:d2:2d:08:dc:f1:6c:90:5f:50:9c:
79:01:23:95:40:4b:62:36:ff:7c:cb:bf:66:d5:23:
5f:75:ed:d5:b6:1b:f8:6d:21:c3:47:3e:b4:58:0b:
47:29:d3:02:f4:d5:72:c7:34:31:cc:48:6b:4d:db:
fd:57:f0:29:91:ff:64:61:c9:b4:91:92:2b:32:b5:
b8:cf:31:d8:7d:b3:2a:2f:57:2c:f0:54:07:ce:25:
b8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:78:2A:CE:A9:C8:16:86:C1:9B:D0:48:4C:F3:51:43:FD:9D:32:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/9f0e6c78-43ce-36d9-b1d0-fb877a670e03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
X509v3 Authority Key Identifier:
keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f95c:7a3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:33:5e:f6:a7:03:26:d4:d0:18:8e:9e:ec:00:8b:09:0b:4a:
40:d0:e1:fb:25:79:81:ca:b5:1c:02:09:90:8c:78:46:8b:39:
41:0d:8d:1b:4a:fe:6f:5f:f3:8a:1a:1d:e2:f7:01:b4:67:31:
c7:64:66:b9:a1:bd:35:94:42:4f:11:4f:48:30:a9:af:a4:c6:
48:34:0b:83:f0:dc:db:ea:3f:cc:93:a2:19:80:78:08:4d:98:
f5:39:ea:cf:a8:89:70:60:ea:b8:1d:ce:07:d1:d7:85:83:63:
a0:a3:db:2f:2d:8e:0b:ac:88:c0:f2:a8:c1:e9:05:09:37:cd:
c0:3b:29:25:9b:26:3b:54:cd:c3:29:14:07:b2:13:cc:ce:b5:
55:34:f0:7a:d7:bd:91:03:06:d1:1d:ac:ca:19:9f:9c:f2:e5:
41:18:47:d1:08:c8:c3:b6:8c:23:8b:55:55:8e:97:61:d9:76:
91:5f:1f:9d:7e:1f:74:ad:97:64:24:e4:55:ea:8c:b6:2c:fd:
f0:fc:a2:80:b5:58:84:bc:7f:e8:13:b9:3c:21:bc:c5:29:9a:
0b:8d:b6:cc:03:d5:c6:76:0b:05:ad:d5:9b:b4:f2:7d:75:b1:
83:28:07:87:28:b0:3b:51:dd:b5:a3:ec:d3:49:d9:4d:b6:59:
28:24:bf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:20:17 2025 by rpki-client