Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4928a857-2e3c-3102-ab6e-a8e7c5e81673.roa
File: 4928a857-2e3c-3102-ab6e-a8e7c5e81673.roa (raw, json)
Hash identifier: bSB8lrWcFRnuLs/4WmfCp+VP6AwsNSuyWQSE9v6w4ag=
Subject key identifier: 3B:11:8A:4A:EB:89:E9:92:8D:60:80:88:A6:53:EB:F2:D1:EA:9A:B6
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB7CEF92395E212C140880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4928a857-2e3c-3102-ab6e-a8e7c5e81673.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1000:be0a::/47 maxlen: 47
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:7c:ef:92:39:5e:21:2c:14:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=316fe8c1-cf9a-44f9-867c-597089792fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:14:d6:9d:68:a0:19:4d:0b:8e:a4:f9:af:
f8:56:27:be:9e:95:5d:74:dd:d7:4b:47:6f:cb:4f:
c6:00:84:b5:b5:fe:77:89:3c:55:d5:64:9f:f2:9f:
61:41:7f:18:39:29:5e:ed:80:a4:d3:37:e2:9e:98:
a2:1b:d9:e2:d6:3f:c3:c7:d4:ae:5a:85:63:2f:fb:
f8:a4:3d:a7:11:ca:79:5c:ee:68:49:eb:cd:ab:3e:
a1:93:a3:04:d6:ab:1c:52:89:1f:69:df:c9:a8:d0:
17:20:79:aa:71:db:c6:f3:1d:b9:a2:9c:88:6b:03:
77:18:60:9e:39:5b:6e:ff:f2:ff:38:8c:cf:7c:34:
dc:e5:da:97:0a:55:ab:01:55:ba:ec:c3:78:89:8e:
c5:2e:d2:09:fd:6f:66:34:ce:c7:bd:77:f5:8f:56:
c5:3b:fb:00:09:0d:94:e0:42:d3:32:01:97:6b:4f:
00:90:90:79:1c:28:c9:7e:f8:97:59:09:d4:91:d0:
66:94:6f:93:c7:5a:b2:7f:33:1f:d5:ea:90:6a:0e:
96:3b:12:ff:d3:7d:84:b9:4a:18:78:ad:6c:50:13:
fe:88:5d:1b:55:d7:10:b1:26:63:42:65:41:97:f6:
27:16:2b:ec:30:d5:ed:3b:5c:b4:bb:96:1d:c3:cd:
10:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:11:8A:4A:EB:89:E9:92:8D:60:80:88:A6:53:EB:F2:D1:EA:9A:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4928a857-2e3c-3102-ab6e-a8e7c5e81673.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1000:be0a::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:15:ef:32:11:b5:f8:7b:24:6e:2d:49:a4:eb:14:68:af:59:
b7:1c:6e:c6:18:8b:bc:dd:98:c3:1a:ff:46:66:ec:9a:82:1f:
34:42:62:61:9a:b9:42:90:81:0c:8d:0c:2b:ad:3f:d2:3a:a6:
26:7b:e7:e8:18:0b:c6:d1:53:36:d8:34:8c:e2:e5:05:bc:63:
b5:fa:df:28:5a:d0:e1:e6:d0:e4:7b:0f:2b:76:40:63:67:7a:
94:e3:12:a7:3a:70:23:8f:df:46:4c:25:05:ac:15:7b:b9:0e:
cf:a9:d2:a3:4a:81:e5:fe:c2:0f:8d:87:19:1b:41:df:72:35:
0b:2e:5f:5d:41:31:f8:56:e8:f8:f1:30:35:ed:0d:b6:18:2e:
cf:51:b0:0d:d8:3f:30:85:fb:d4:d3:47:7e:2e:9c:96:8c:ac:
7c:32:b9:74:ac:44:f9:a0:85:1b:1f:26:b2:57:00:a4:e7:79:
34:12:76:8e:10:74:0d:14:e9:3c:ec:1c:59:4d:d6:82:46:22:
10:be:6a:2b:49:02:56:4d:12:74:aa:1d:c3:9b:ab:c6:ff:59:
e3:e6:9a:94:ba:59:66:a9:f9:27:f2:ba:fd:d5:db:e2:ca:e5:
69:a8:ae:04:ce:15:df:aa:05:c9:37:00:3c:f5:55:54:87:40:
77:df:c8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:57:35 2025 by rpki-client