Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f28a9f08-70fa-350c-941a-75990bde1043.roa
File: f28a9f08-70fa-350c-941a-75990bde1043.roa (raw, json)
Hash identifier: syqRXZfWrm5ZA+R9+F1mLBkVCxzUixq3N6MV9SXuMkM=
Subject key identifier: C9:38:03:BB:91:30:89:1A:7A:96:00:F0:89:04:35:BA:53:8B:2A:58
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB7CC4C188135DCE433A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f28a9f08-70fa-350c-941a-75990bde1043.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1000:be04::/47 maxlen: 47
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:7c:c4:c1:88:13:5d:ce:43:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=f00668dd-4dfd-4c21-b87b-3afac7782a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:50:cf:5c:38:e6:f3:3d:96:ac:5e:ea:57:
93:09:fa:3f:48:58:d1:d9:53:e1:c0:f5:0e:dd:af:
90:ec:60:d6:a7:c8:a8:74:a8:de:74:ed:f7:f7:0d:
a2:5b:bd:dc:0c:7d:15:cf:9b:d7:08:0b:3e:96:1f:
e1:71:62:6f:18:53:40:55:12:3d:10:fe:c6:65:66:
bc:21:8c:99:40:03:0c:38:ba:65:14:3b:16:d3:a7:
ac:f6:77:ec:77:73:2e:e2:08:47:e3:42:63:6a:29:
90:c9:53:11:28:03:21:5f:f1:df:9d:9a:a4:ca:42:
77:2b:42:31:7e:68:bf:69:71:91:86:43:f0:be:09:
a6:9b:bd:c9:a4:a6:4c:f8:5c:31:57:f1:f4:65:14:
22:57:85:03:ca:49:b1:3b:b1:c4:72:40:49:95:42:
c5:65:b8:c3:56:48:86:0a:62:03:3d:ca:1a:5f:61:
97:9b:e2:fc:dc:68:ec:80:b5:18:df:9a:26:38:ef:
55:62:bd:04:29:a6:02:12:6f:16:e1:41:20:6b:6a:
df:53:ff:e8:0d:17:bd:35:5e:02:af:57:9f:8c:5a:
ff:7d:f9:f6:ce:8f:2a:5f:09:9b:88:4e:2e:0a:b2:
36:bf:e2:38:55:09:f1:fa:26:04:ac:c8:47:b3:e5:
a4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:38:03:BB:91:30:89:1A:7A:96:00:F0:89:04:35:BA:53:8B:2A:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f28a9f08-70fa-350c-941a-75990bde1043.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1000:be04::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:aa:41:6a:70:7c:42:85:e6:35:00:b8:7b:cd:33:43:39:4a:
4d:04:cf:84:96:c3:83:93:ac:fe:bc:48:ea:a6:78:d6:16:39:
d0:54:9d:e3:b0:48:0a:de:18:bf:35:e5:b1:8a:64:70:99:0d:
2a:64:41:1a:b8:0c:ab:7f:aa:dc:87:ec:c7:51:d7:a6:2d:8a:
f5:21:2d:75:c7:62:a3:45:04:3d:15:50:2a:a6:4c:0b:df:6b:
78:92:e4:cb:2b:b0:f9:dd:0f:06:a8:4f:eb:41:69:ab:63:ac:
f1:05:c8:1d:42:42:80:59:80:01:f4:7c:05:d3:9c:ab:3d:5f:
e5:86:06:7c:0d:27:8f:b4:26:06:72:3a:99:ff:a9:37:69:16:
39:db:18:42:58:29:91:3d:f8:a1:14:ab:43:57:84:72:72:d9:
b6:d9:29:1d:b6:59:0a:9b:10:de:9f:4e:80:38:b5:5d:42:b8:
5d:50:9c:ef:45:df:21:86:c9:79:35:1a:99:77:4b:49:ff:9a:
83:be:fb:1d:36:20:14:e6:38:a8:33:bd:ad:66:cf:9d:91:54:
a2:52:45:48:4d:92:3c:89:c3:c1:6c:e0:53:3c:d2:89:fc:d3:
bb:a5:d7:5b:d9:38:d2:06:61:f4:49:50:06:de:2d:86:53:79:
71:84:3b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:12:29 2025 by rpki-client