Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/53f96d92-06af-3710-8d5e-6b8652139939.roa
File: 53f96d92-06af-3710-8d5e-6b8652139939.roa (raw, json)
Hash identifier: 6fzZpSY8diuwtcK4dUfxJPwrruLCoCb66dqdZstu700=
Subject key identifier: 21:7C:8D:7C:75:BA:B3:15:25:8B:1A:B1:EE:20:3D:66:F6:97:FE:51
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F43285847A606D03B5EC891D073685400
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/53f96d92-06af-3710-8d5e-6b8652139939.roa
Signing time: Thu 24 Oct 2024 14:37:52 +0000
ROA not before: Thu 24 Oct 2024 14:37:52 +0000
ROA not after: Wed 22 Jan 2025 15:37:52 +0000
asID: 22781
IP address blocks: 2607:fb50:1200::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:a6:06:d0:3b:5e:c8:91:d0:73:68:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Oct 24 14:37:52 2024 GMT
Not After : Jan 22 15:37:52 2025 GMT
Subject: CN=a3d8bfad-95e0-4dcd-a210-49916e8eb0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:95:d8:ba:e1:82:da:c3:d7:ab:1c:3d:c1:28:
cf:7e:a8:af:a6:27:08:54:c0:29:fe:49:cf:06:26:
56:24:80:dd:21:c0:c8:f6:83:92:5f:d4:98:ad:0b:
d5:fb:83:99:73:ce:89:c9:a7:42:ab:39:ef:a2:eb:
b2:9e:39:4a:4f:9c:43:8d:1e:a8:59:93:93:b3:5f:
99:0e:d0:e6:3b:1a:8e:f8:34:f1:27:03:58:2a:c4:
6c:b6:8b:37:94:c6:12:35:8d:c7:3a:62:cd:80:42:
dd:a1:98:f9:7b:23:31:74:7b:31:de:d9:b5:f0:cb:
14:bf:13:98:ad:d7:cc:b4:5a:7b:49:57:60:68:3b:
10:d3:04:96:bb:c5:e6:72:cf:a4:93:77:b3:34:3b:
59:d1:53:42:17:ee:7f:cf:8a:d3:f8:bb:f3:82:cc:
d0:fe:a7:e7:b4:bf:a2:ee:77:dc:af:f9:59:ce:3a:
6f:58:49:18:e5:c3:36:7e:fc:60:dd:3a:82:3b:cb:
c1:63:72:18:eb:9b:55:ec:0f:61:47:aa:67:67:a0:
08:b7:bc:be:0f:d6:be:65:7e:cd:59:b7:28:bc:bb:
75:e0:29:51:b8:30:fd:8d:56:16:d6:5a:9e:42:89:
04:d5:71:2a:ee:dd:f1:43:c0:2a:6b:27:eb:40:8b:
c6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7C:8D:7C:75:BA:B3:15:25:8B:1A:B1:EE:20:3D:66:F6:97:FE:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/53f96d92-06af-3710-8d5e-6b8652139939.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fb50:1200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:e1:e3:2d:3f:f9:82:1c:57:fe:44:92:54:4c:79:ca:26:d8:
22:98:91:3b:1f:ba:59:0f:16:4c:f2:93:e7:e0:27:b0:d1:60:
c8:21:e1:30:cd:18:17:dd:a2:a1:e2:ed:ca:9b:29:bf:f2:8e:
e0:f3:45:24:37:e6:1d:03:08:f6:70:05:c1:9e:8e:9e:e0:a9:
e2:07:9c:3b:e6:3d:95:dc:ce:74:96:5a:fa:80:31:c9:d2:5f:
72:be:bd:bf:4e:ec:d7:ff:0d:36:10:84:e5:f6:85:55:ed:ce:
f4:06:de:6f:61:75:d0:61:8a:c9:22:46:14:37:e2:8b:8e:18:
14:2b:8d:6c:86:9c:f8:0a:8d:2b:1b:ce:1b:d0:87:2f:fa:9b:
4d:e6:76:f6:9b:49:47:d8:21:be:dd:e2:1e:07:fd:b1:b3:d5:
a1:ba:51:ff:7c:3b:2d:52:ba:83:fd:3d:fa:e3:b0:58:09:8e:
44:ae:db:67:db:b8:fa:e2:5c:d2:cb:9d:e3:d6:62:12:26:ce:
1c:f4:e2:26:3f:19:1e:6b:d8:e0:ba:af:24:ff:26:d3:f4:68:
d8:2d:92:c8:17:2f:60:9b:a0:e9:2d:c6:81:e4:02:55:19:7a:
4c:e3:9f:bb:19:41:b8:93:dd:30:24:cc:58:a1:86:2b:8a:be:
0b:a1:5b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:48:21 2025 by rpki-client