Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/cad8d91c-f452-3261-830a-9e64b16db0ad.roa
File: cad8d91c-f452-3261-830a-9e64b16db0ad.roa (raw, json)
Hash identifier: mV6zIweMK7xQpZrWVo5o17Sj/SEYUM2nomZ+GjlFZLY=
Subject key identifier: E1:82:1F:94:25:DA:30:04:85:F3:47:2A:F5:44:07:EA:D9:F8:CF:54
Certificate issuer: /CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
Certificate serial: 010D0C9F43285848DCE3DC8495BF2A8D1A080480
Authority key identifier: 5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/cad8d91c-f452-3261-830a-9e64b16db0ad.roa
Signing time: Wed 12 Feb 2025 23:03:50 +0000
ROA not before: Wed 12 Feb 2025 23:03:50 +0000
ROA not after: Tue 13 May 2025 22:03:50 +0000
asID: 0
IP address blocks: 2605:e040::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dc:e3:dc:84:95:bf:2a:8d:1a:08:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
Validity
Not Before: Feb 12 23:03:50 2025 GMT
Not After : May 13 22:03:50 2025 GMT
Subject: CN=d2c82782-1953-4c21-99ff-2f9bf521366d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:f6:f3:bf:2b:80:3a:a9:8e:67:9c:c2:49:
c5:21:73:60:8e:f4:e4:a8:84:20:f9:7d:d5:a2:6a:
f5:4e:d3:29:48:2c:0c:ff:10:a0:4c:94:65:1e:f9:
9c:f7:51:7e:d1:ed:8d:b7:5b:6c:38:5b:b9:8d:93:
2a:76:89:86:e8:03:0f:d5:a1:c0:d6:eb:06:7c:64:
61:33:36:28:a1:be:9f:5a:d8:44:c6:ed:8f:e6:07:
7d:17:a6:ff:71:4f:0b:8d:7b:83:78:d4:fb:b9:03:
3b:b8:c5:5d:8c:02:e9:25:fa:76:75:00:27:94:3e:
b2:7b:ed:18:6d:0b:78:05:49:88:1b:ea:f7:25:24:
47:8a:c9:98:89:7d:cb:7b:c1:71:f5:9f:b0:9e:8f:
cf:28:36:2f:d7:2e:65:62:73:cd:4c:65:31:4b:80:
50:0d:f2:81:7e:ef:07:2e:7a:2c:5e:7c:8c:b0:71:
51:1d:8e:98:c5:ca:2c:a8:9f:2f:06:b1:3d:c7:8b:
86:b6:5d:7f:be:25:70:e6:fc:b2:51:8d:71:84:1d:
0e:47:a0:27:c5:94:65:ed:da:ad:df:7b:ce:d0:ff:
71:91:4e:b1:83:40:6a:7a:ed:16:6a:b6:65:f7:c8:
ef:76:c6:b4:de:12:45:5d:a8:bc:5a:11:50:20:ae:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:82:1F:94:25:DA:30:04:85:F3:47:2A:F5:44:07:EA:D9:F8:CF:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/cad8d91c-f452-3261-830a-9e64b16db0ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl
X509v3 Authority Key Identifier:
keyid:5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:e040::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:92:f3:00:4a:30:4e:7a:8d:23:9c:c8:bc:2c:df:e1:f5:21:
90:fb:4f:86:8c:e0:b3:2b:72:9c:84:62:0e:49:3c:b2:8e:0f:
a9:c0:3f:92:3a:36:ed:98:61:fb:90:6b:1f:2c:12:d1:43:10:
8b:9a:c9:6d:ac:61:57:ab:d5:79:8e:cd:9e:37:18:91:fc:09:
94:85:d0:1c:3e:22:c3:11:38:a1:9e:41:bf:48:ce:72:0a:17:
45:6f:1d:a7:c8:dd:6c:48:ff:86:6a:9a:9d:64:f3:c5:16:c4:
f2:6b:1b:e6:bb:ab:d5:c4:68:a7:4a:53:7b:75:50:fa:f9:cd:
f2:ad:dc:9b:57:1c:2b:03:2c:fd:3e:d7:31:e3:d6:32:c6:eb:
8c:eb:84:9b:d3:8e:ff:6f:d3:90:73:a1:a7:cd:98:25:ee:73:
07:6c:28:41:26:16:77:ea:b2:3e:85:20:55:96:d6:dd:93:a6:
78:97:55:cf:52:9d:42:aa:bf:cb:db:bf:5a:8a:ba:41:f8:9f:
0e:ee:53:c1:9b:f4:c3:44:79:81:82:a4:60:82:cf:f2:32:6e:
b0:c0:33:3b:66:e8:96:81:46:fa:65:16:fc:17:e0:e1:1a:a4:
35:06:f8:2d:fe:15:b4:63:93:cb:62:2f:38:5d:35:b1:9c:e6:
a9:19:cf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:48:11 2025 by rpki-client