Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/091e3b56-89c1-3c9d-92de-1b8c4b08f847.roa
File: 091e3b56-89c1-3c9d-92de-1b8c4b08f847.roa (raw, json)
Hash identifier: kcSnHgoxcIR1LKZRXxU0TTP4l7W2lUWryO3hcSkRmMA=
Subject key identifier: 79:B1:ED:89:AE:60:17:63:08:70:F3:C9:8D:88:BB:64:6D:2C:19:5C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C58233309960CCA1D1B45900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/091e3b56-89c1-3c9d-92de-1b8c4b08f847.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 396982
IP address blocks: 2600:1900:42d5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:33:30:99:60:cc:a1:d1:b4:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=9a9d03f3-afe8-4c85-8d80-cdfa6b9e632e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:03:e3:c0:41:48:69:8a:2b:50:da:f3:3b:b7:
0c:ad:72:05:db:8a:ab:92:e7:49:33:34:b6:a4:60:
87:23:5e:92:4a:01:e1:ad:8b:c1:df:a5:9d:9d:07:
3f:e7:37:5a:a4:e9:3e:e6:74:c6:22:4c:a5:31:f9:
4e:f7:67:49:c9:b5:e9:23:66:7f:3f:32:55:52:6e:
f5:7c:80:ff:95:9f:be:75:b7:84:8b:51:d3:49:2e:
20:6b:de:9f:cf:3c:6e:d3:ca:ad:55:77:c5:1e:57:
23:4e:70:64:d3:e7:b2:30:c3:69:c3:d9:46:6a:e1:
24:40:c8:3b:a2:f0:6f:23:a7:b1:5f:8a:94:bc:8e:
f8:cd:2e:7b:4d:ba:4f:bb:1a:2b:6a:bd:09:69:68:
b9:a6:91:d0:f1:63:45:1d:b0:b2:40:54:1d:08:e7:
0c:fe:65:ac:9e:d1:a8:a5:0b:c3:c8:26:87:61:3e:
82:22:e4:d6:7e:cc:34:e9:2d:4f:48:c1:ee:c0:60:
14:2d:7d:56:9b:f8:52:ac:96:93:93:4e:17:90:03:
4c:19:e5:2f:86:fb:49:7f:2a:7c:2b:ae:82:e6:48:
ee:2c:11:6f:ff:e4:ce:60:f5:4d:48:93:1b:d8:e1:
00:7d:0c:c6:42:94:9d:62:d4:b6:08:72:13:21:18:
a3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B1:ED:89:AE:60:17:63:08:70:F3:C9:8D:88:BB:64:6D:2C:19:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/091e3b56-89c1-3c9d-92de-1b8c4b08f847.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1900:42d5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:ec:94:fb:36:b4:2e:d5:2b:1f:30:5e:80:8b:8d:ae:7f:25:
dc:bb:6b:87:83:af:19:5c:6e:a0:84:3b:7b:2f:88:e1:e1:3c:
c1:cf:19:9f:aa:53:8b:a3:a1:80:13:ba:62:9b:57:c8:91:50:
47:db:a2:65:a4:84:93:e7:1b:7a:7f:2c:42:70:62:46:b9:a7:
d3:6f:e7:a4:1c:fe:5e:17:e5:81:3f:e0:e3:7f:dc:47:a6:ed:
30:bb:05:08:de:37:bf:ae:c1:28:66:e8:95:44:40:31:64:cd:
b1:3e:9f:53:21:8f:5a:13:be:3a:ee:cb:8e:6a:c9:5a:b3:78:
b6:65:79:84:74:f0:9b:7a:5d:75:e1:1c:7e:73:7d:8a:a2:86:
50:76:09:85:75:d9:14:2b:86:cb:e7:5c:41:3b:07:b7:12:65:
17:34:53:8b:ab:97:b8:12:04:88:75:68:a0:92:2f:1e:41:a3:
fc:56:22:29:5d:bd:89:ce:37:35:56:5c:be:3d:3c:fc:66:80:
16:76:fc:18:60:23:cd:d5:64:66:20:fb:45:f8:d2:59:3f:08:
82:c1:2e:9f:e7:74:fa:7c:04:83:1f:1a:44:32:73:e0:1b:68:
46:dd:5a:3d:3e:3b:54:b7:4b:b2:a0:13:69:3c:df:ac:83:99:
0c:22:73:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:50:03 2025 by rpki-client