Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/11c99d08-0c47-3e17-a50d-bde88f2be2b6.roa
File: 11c99d08-0c47-3e17-a50d-bde88f2be2b6.roa (raw, json)
Hash identifier: FTjhqPNUiNwFf8jJsEcQTF7kt3mRH6n5ibI+CCTS+r8=
Subject key identifier: A3:D9:A8:89:B0:72:91:C8:D3:39:70:67:61:A1:8D:CB:6D:8E:47:1D
Certificate issuer: /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Certificate serial: 010D0C9F43285845FA1C8B34428A07713576F700
Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/11c99d08-0c47-3e17-a50d-bde88f2be2b6.roa
Signing time: Fri 24 May 2024 07:55:40 +0000
ROA not before: Fri 24 May 2024 07:55:40 +0000
ROA not after: Thu 22 Aug 2024 07:55:40 +0000
asID: 14618
IP address blocks: 2602:fc88::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:fa:1c:8b:34:42:8a:07:71:35:76:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Validity
Not Before: May 24 07:55:40 2024 GMT
Not After : Aug 22 07:55:40 2024 GMT
Subject: CN=0f55e570-2017-4761-b196-c61c2faa6635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:12:08:8b:40:93:0c:51:75:d0:9c:a0:67:
11:38:36:f5:b5:48:9a:9f:5c:b0:ee:54:8b:fc:fd:
40:ae:08:a1:53:69:13:bf:dd:5f:de:a2:1b:d0:86:
8d:33:a3:85:ea:e4:f1:fb:08:a8:f0:42:41:2c:45:
07:23:be:8b:60:30:79:ce:42:4f:b1:9c:d1:71:38:
85:6a:6b:69:f2:88:bb:d0:cd:56:c9:be:d3:47:b7:
84:c4:ca:81:fb:bf:15:2e:12:b6:19:d2:ae:12:1a:
0f:96:21:9b:86:84:0f:cb:b3:a8:59:74:d2:74:9a:
a3:f1:99:47:04:4c:ed:49:c5:5d:33:e8:6d:ef:a8:
79:58:1f:dc:c7:2b:83:d0:8f:a7:4f:4f:1f:32:32:
d2:55:e9:bd:d0:05:dc:15:ab:aa:ab:3b:a0:ac:17:
a9:d0:c2:8b:3a:97:4b:4f:18:00:59:7f:69:c7:0d:
94:0d:12:d7:52:54:99:5a:ca:74:87:38:78:c2:68:
87:85:e0:95:68:14:38:f5:0a:c4:1a:aa:21:38:ee:
53:6e:d6:43:08:86:b7:23:f9:2f:1c:a3:be:a8:63:
ed:01:54:0b:61:04:66:88:3e:4f:fb:57:ac:17:8c:
91:0a:3b:66:2f:3f:b4:83:74:f5:30:d7:7b:44:1f:
5f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D9:A8:89:B0:72:91:C8:D3:39:70:67:61:A1:8D:CB:6D:8E:47:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/11c99d08-0c47-3e17-a50d-bde88f2be2b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl
X509v3 Authority Key Identifier:
keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc88::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:92:0a:c2:e1:00:d7:c1:93:05:d3:bf:b9:c8:32:85:56:89:
bd:a2:60:a3:cb:88:5a:58:a3:e0:11:f9:8a:a7:22:85:05:b6:
90:f4:e3:0d:9f:49:2f:65:c0:e1:b8:73:6e:7c:7a:f0:4d:3a:
14:80:aa:75:ce:bf:3b:b7:80:f9:5e:b3:9c:65:17:a9:f4:c7:
70:25:a8:92:26:bd:41:17:2a:b9:ce:af:a2:b4:a3:6f:22:72:
ce:b5:de:92:d0:b3:64:b1:61:b0:50:68:df:2f:43:64:cc:e1:
6e:64:9f:55:b1:7e:16:5f:e7:a8:c3:15:0e:f5:4c:d7:bb:57:
4f:40:12:e4:2c:5d:8a:35:75:b1:d9:ad:7c:0b:8a:99:74:c9:
e6:77:f0:84:36:9e:04:db:6a:c1:a9:92:e8:32:e2:8d:06:a1:
88:48:9f:c3:54:45:94:3e:ee:83:ef:c4:3e:04:2e:bd:6a:f2:
90:33:b7:4b:7e:4e:ae:8b:e7:9d:c1:44:2f:d4:08:e2:ae:dc:
fc:a2:5f:cb:d8:cf:38:46:04:d8:9b:cd:0f:21:b2:71:5a:21:
3e:5b:84:3b:e3:b0:e5:2c:91:94:b6:20:15:1c:d7:cd:34:69:
c0:3f:73:f2:78:bd:26:b0:6b:f5:3f:cb:e3:30:c5:8a:1e:f8:
e8:81:3b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:28:00 2025 by rpki-client