Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/a06e27d9-b047-3645-b3d6-9f0c2f1ac65b.roa
File: a06e27d9-b047-3645-b3d6-9f0c2f1ac65b.roa (raw, json)
Hash identifier: Ig+fVL0jhJqwujT9Z1CJW9by9wX4i83IKKNs/4LNsOE=
Subject key identifier: D7:09:FB:37:63:50:B4:64:E5:6A:FA:AB:31:A3:1F:21:F5:7A:20:6C
Certificate issuer: /CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
Certificate serial: 010D0C9F43285846F15343CAA446812E0A730480
Authority key identifier: AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/a06e27d9-b047-3645-b3d6-9f0c2f1ac65b.roa
Signing time: Tue 20 Aug 2024 21:10:36 +0000
ROA not before: Tue 20 Aug 2024 21:10:36 +0000
ROA not after: Mon 18 Nov 2024 22:10:36 +0000
asID: 2055
IP address blocks: 2607:f390:1440::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:f1:53:43:ca:a4:46:81:2e:0a:73:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
Validity
Not Before: Aug 20 21:10:36 2024 GMT
Not After : Nov 18 22:10:36 2024 GMT
Subject: CN=6640b4c0-4f75-4b16-bd55-8b5c643d4469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:24:3a:8a:9b:29:ab:22:33:89:82:1b:0e:5e:
b5:29:ef:ae:39:7b:5e:6b:3a:8e:35:53:3d:df:cc:
a7:40:fa:c7:18:b0:f7:81:66:1a:48:9f:6c:89:79:
cf:d3:21:30:7a:af:44:e2:d5:61:01:4d:ba:14:73:
b2:72:5e:32:59:f5:c4:d7:b1:b1:40:87:7b:a4:98:
c4:85:eb:9f:aa:1a:64:22:10:1d:80:cd:75:af:ac:
85:92:fa:3b:91:0d:6b:f5:27:ac:8f:33:7e:2b:29:
cf:61:c7:d3:27:18:6d:f9:0e:b7:11:62:65:d8:8d:
61:59:69:a4:e2:cf:33:f2:bd:e4:ba:2f:53:39:f6:
27:77:2d:dc:97:77:ed:41:18:e4:07:40:d0:53:d6:
cd:2f:ca:e7:6e:b8:56:48:ee:ad:4f:9e:65:36:70:
d1:66:83:e6:a4:3d:06:31:c6:6a:82:21:02:58:b9:
3c:e6:1a:f4:77:ea:1a:63:ce:c8:bf:06:ef:5c:e6:
ff:67:64:7d:e6:19:53:9f:63:dc:65:02:dc:87:77:
1a:31:e7:5a:92:93:ef:93:56:fc:25:3d:b2:db:6b:
21:77:33:87:96:e8:6d:0e:a3:61:a0:34:2a:21:3d:
3c:53:c2:c4:32:35:9a:2c:23:65:16:d8:0d:5a:2f:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:09:FB:37:63:50:B4:64:E5:6A:FA:AB:31:A3:1F:21:F5:7A:20:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/a06e27d9-b047-3645-b3d6-9f0c2f1ac65b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl
X509v3 Authority Key Identifier:
keyid:AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f390:1440::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:af:9a:06:e4:93:96:06:e6:61:6e:41:31:66:fc:55:ff:89:
2d:6c:08:54:9c:31:cf:2f:bf:46:6a:65:64:29:2c:19:4d:52:
73:4e:88:a3:7a:c2:d7:c0:41:4c:4f:2e:cc:a3:24:9c:2b:e3:
41:5a:c3:69:79:05:8c:08:18:77:2f:a5:4f:a3:0c:f9:07:ab:
f5:4c:f6:1c:9e:73:2d:98:12:a9:46:65:d0:06:c2:0d:7c:9b:
35:a6:1e:3b:38:a4:b4:6d:16:62:fb:91:69:6c:24:ce:4d:3a:
df:e1:5c:5b:70:63:10:c5:a7:24:7e:1e:00:bd:ed:1d:ff:49:
20:d9:59:9a:48:03:90:27:23:a3:b5:16:0c:e0:05:b1:12:1d:
f9:da:5a:25:69:a3:7d:74:1b:01:98:01:17:95:d6:d6:3a:9b:
06:9f:af:98:0c:63:6b:5d:12:74:3c:41:31:bd:2c:c6:75:27:
73:c5:e7:83:f6:97:c4:e3:cf:d1:1b:cf:05:e5:62:c0:7c:f9:
da:c7:38:b3:c6:87:10:d6:01:e8:64:f0:67:02:c1:f9:56:ca:
b1:cc:59:63:85:c5:46:c2:3a:36:07:a3:1c:02:48:dd:4b:d3:
b6:98:f9:4d:d0:76:87:ec:f6:90:f3:f6:4c:44:95:90:88:4e:
dc:83:f1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:04:34 2025 by rpki-client