Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/cc9b4696-7123-3bcb-bfdc-f1b966b208d4.roa
File: cc9b4696-7123-3bcb-bfdc-f1b966b208d4.roa (raw, json)
Hash identifier: QEKOMZuUyz2q8FDie/sifNDasdfQDOCENh1tfJ8hbO8=
Subject key identifier: 49:8C:98:CA:E9:AE:FB:16:E6:E8:1E:3D:42:65:BF:33:14:1F:4B:F4
Certificate issuer: /CN=d6fb0d47-7125-4b91-9b01-2e308dad0d25
Certificate serial: 010D0C9F432858430A45C98EC736D46DB924BB00
Authority key identifier: F1:51:5C:12:74:E1:80:0B:3C:F8:ED:38:A6:09:04:6B:0C:6B:8E:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/cc9b4696-7123-3bcb-bfdc-f1b966b208d4.roa
Signing time: Tue 29 Aug 2023 00:30:54 +0000
ROA not before: Tue 29 Aug 2023 00:30:54 +0000
ROA not after: Mon 27 Nov 2023 01:30:54 +0000
asID: 14618
IP address blocks: 2601:1700:e100::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:45:c9:8e:c7:36:d4:6d:b9:24:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fb0d47-7125-4b91-9b01-2e308dad0d25
Validity
Not Before: Aug 29 00:30:54 2023 GMT
Not After : Nov 27 01:30:54 2023 GMT
Subject: CN=e2b106a4-6355-4e31-817c-3c564572c20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:d2:d4:94:02:d4:49:6a:d1:51:21:1d:86:
0c:b4:c3:04:b6:d0:01:24:06:db:12:3f:ac:d4:d3:
d3:5c:96:68:b7:8f:7e:d2:ef:b9:6e:ce:9d:ab:10:
f9:55:41:c1:55:8f:39:0b:1f:67:89:ef:cc:f7:a5:
75:e0:6d:79:db:66:2e:28:a7:4e:8d:48:15:0a:3a:
74:05:e3:d9:b7:2d:f9:b0:c4:6e:f8:7a:dc:45:2e:
3d:fd:47:35:43:66:ec:b0:24:dc:1a:85:3b:e4:ba:
c0:43:43:f2:bf:25:5e:7a:16:2c:94:a1:17:44:0a:
c8:20:9a:4b:8e:8e:d6:a7:a6:b0:4c:5b:1f:6b:a9:
c0:a9:b7:97:f8:77:31:3c:c8:72:96:05:f0:69:9a:
5c:1e:65:63:80:8e:4f:85:a2:02:7a:1b:28:fd:6b:
96:9a:ff:78:1c:ce:e6:0c:de:87:e5:5b:fb:41:12:
ba:08:90:b8:96:11:13:68:0e:13:09:27:ab:cf:64:
1e:b2:3f:5d:10:28:bf:ae:23:9b:ed:a0:27:b1:68:
eb:e2:ff:bb:37:78:1c:3b:c4:89:63:f6:36:93:ec:
47:f5:81:6c:64:47:02:8c:b0:9f:12:4b:06:62:60:
b8:28:12:18:e6:8f:b5:ee:7b:48:53:b7:9e:8d:d1:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8C:98:CA:E9:AE:FB:16:E6:E8:1E:3D:42:65:BF:33:14:1F:4B:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/cc9b4696-7123-3bcb-bfdc-f1b966b208d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.crl
X509v3 Authority Key Identifier:
keyid:F1:51:5C:12:74:E1:80:0B:3C:F8:ED:38:A6:09:04:6B:0C:6B:8E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:1700:e100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:e9:4c:4d:64:87:4c:da:72:32:5b:a8:47:c4:b3:23:87:66:
b0:f3:7b:88:cf:66:19:23:c2:92:c8:f3:cf:bd:30:f7:20:4e:
9e:14:41:1b:fd:bb:ac:1d:35:ae:a1:3e:c4:0e:79:bc:8a:3b:
65:2c:83:b5:12:c0:59:52:9a:de:c8:22:83:26:c5:0d:8b:d1:
97:46:e8:9b:a3:a0:6d:d0:9a:13:b9:c4:3f:cd:b5:ba:00:f1:
76:35:2f:91:50:80:2d:7c:7a:2a:cb:7f:6b:14:4d:d9:f9:39:
ce:7c:58:ed:8e:68:56:41:33:af:47:04:d5:bb:ab:96:03:f8:
bc:4f:1f:67:1f:ee:fa:a7:4e:b0:a4:a8:9b:67:00:a6:08:a9:
85:e9:db:c0:cd:0e:7f:a3:bf:5f:af:37:da:05:6f:bb:cf:81:
ff:1e:10:ed:15:94:af:b7:a2:2e:3f:61:c3:a0:e3:72:74:e5:
55:7b:f1:ed:48:44:69:cc:17:ed:a0:db:c0:7d:93:53:d9:26:
9d:40:5e:77:df:ec:e6:03:89:1b:cd:79:a2:c1:28:a7:46:ae:
c6:fd:5f:3d:b8:00:be:38:80:0d:7a:aa:bf:e7:39:02:b8:e3:
a6:2b:a3:cf:0b:03:62:38:c5:ae:34:85:72:3d:f8:08:21:40:
8e:3c:f4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:15:09 2025 by rpki-client