Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89bb050a-2dbc-3e40-bd23-8584ccc1fb97.roa
File: 89bb050a-2dbc-3e40-bd23-8584ccc1fb97.roa (raw, json)
Hash identifier: UP1vS2KhJuS+tEWSNg8qwSZx+q0G8tN3/dNwllksf9o=
Subject key identifier: B7:E0:F9:21:DC:B6:11:2F:CC:27:E2:0C:41:0E:E3:90:1E:D0:67:51
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583CFB0D23E9F6A39EE0EF270D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89bb050a-2dbc-3e40-bd23-8584ccc1fb97.roa
Signing time: Sat 19 Feb 2022 05:00:00 +0000
ROA not before: Sat 19 Feb 2022 05:00:00 +0000
ROA not after: Thu 23 May 2024 04:00:00 +0000
asID: 11344
IP address blocks: 2600:1900:4110:fc0::/60 maxlen: 60
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:fb:0d:23:e9:f6:a3:9e:e0:ef:27:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 19 05:00:00 2022 GMT
Not After : May 23 04:00:00 2024 GMT
Subject: CN=f548663f-d1d1-46b0-b66e-24830613d8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:5d:4e:51:91:fe:85:cd:12:d6:32:63:91:
f9:97:4b:9f:dc:e0:87:58:ff:75:30:cd:3c:eb:02:
04:d8:d9:ee:71:7a:59:53:c5:e2:24:cd:60:4b:65:
1a:9e:b6:6f:3e:71:c6:bb:4b:58:8a:32:35:e8:48:
08:6f:67:2c:8e:e6:38:b9:40:59:31:b5:bc:4f:a4:
5b:b7:b2:13:64:ae:f7:25:55:03:16:f9:44:3c:45:
8b:52:d6:d7:26:ab:00:2f:9e:04:03:f0:32:fa:a8:
39:cf:2d:2e:d9:bb:82:2c:0a:2a:75:a8:22:02:dc:
fc:04:78:f8:74:13:01:2a:b3:92:a7:f9:0a:b1:4b:
3d:95:57:11:ab:ee:01:fa:c2:45:dc:69:57:5f:e9:
d5:e8:41:41:f9:9c:6a:72:39:d5:ed:a4:f4:90:43:
ae:fd:a8:c0:29:ea:4e:dd:40:f7:c3:b7:04:1c:06:
26:f0:38:dc:74:b9:76:d7:69:d4:49:99:86:9a:1b:
0f:b0:9e:2e:f7:49:8e:ec:61:88:23:8d:af:cc:5f:
66:11:88:3d:dc:04:20:03:c5:ac:b6:46:e8:db:6d:
a4:31:a7:1d:70:fc:e7:0d:d1:de:36:43:60:c7:9f:
e1:3e:bd:72:54:25:fb:37:ce:15:34:cb:fe:e4:ff:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E0:F9:21:DC:B6:11:2F:CC:27:E2:0C:41:0E:E3:90:1E:D0:67:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89bb050a-2dbc-3e40-bd23-8584ccc1fb97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1900:4110:fc0::/60
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:5b:69:93:7e:44:a6:5f:f7:cf:f6:9d:08:61:3e:b5:1c:ac:
2b:55:14:0c:7e:a6:9c:d6:09:f4:55:9a:cd:59:49:f2:b7:3e:
b7:dc:b6:f1:0d:f3:1a:ad:43:31:22:7c:91:83:48:06:69:e7:
0d:45:36:b4:08:cf:e4:94:34:c7:f7:35:e0:16:bc:ec:9e:a2:
a9:4c:62:a4:7d:1f:16:82:fb:8f:53:28:01:37:08:a0:d3:b2:
58:7a:71:62:bc:91:8a:58:cc:58:a6:92:eb:61:27:a4:85:bf:
54:30:26:02:ba:93:75:82:6d:e7:f3:f3:d4:6e:f3:29:11:cc:
7b:60:c3:5c:b5:89:f9:27:2c:76:d5:15:80:ac:78:0e:1a:60:
7f:a2:67:7b:f9:f3:70:4a:be:5a:98:39:75:cb:d1:56:90:7e:
86:9a:79:05:68:1b:ec:45:0c:8b:58:1e:59:c1:2e:db:3d:2a:
53:b9:ba:9a:4a:54:9f:c6:65:82:56:53:2c:20:2c:67:36:f6:
06:1f:b5:54:f2:0b:6f:98:de:1d:5f:6f:0a:24:e7:a9:31:a5:
55:c7:40:a2:5a:f0:34:4b:c0:ff:61:73:99:13:e2:dc:54:0f:
2c:be:a1:00:e4:9e:8a:ad:59:7d:49:e5:c9:64:b1:3e:b3:d0:
3c:e8:6b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:08:21 2025 by rpki-client