Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef99e548-e0fa-3818-a2d9-38f84fe7438e.roa
File: ef99e548-e0fa-3818-a2d9-38f84fe7438e.roa (raw, json)
Hash identifier: EArXXbsBoV/bj8jyUoqmCMAzFdQXpAXESOZivLgg4U8=
Subject key identifier: 2E:AC:AA:BF:64:12:BA:9B:A2:57:DB:DE:E8:46:40:93:A7:F1:57:2D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842BB2026870375F3FBEEDFD940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef99e548-e0fa-3818-a2d9-38f84fe7438e.roa
Signing time: Sun 30 Jul 2023 12:00:00 +0000
ROA not before: Sun 30 Jul 2023 12:00:00 +0000
ROA not after: Thu 29 Aug 2024 04:00:00 +0000
asID: 396982
IP address blocks: 2600:1900:4010::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:bb:20:26:87:03:75:f3:fb:ee:df:d9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 30 12:00:00 2023 GMT
Not After : Aug 29 04:00:00 2024 GMT
Subject: CN=0d5e1512-308e-4fff-8e92-b7a0b2cd78ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:bb:f2:c0:f3:b0:dc:3d:cf:85:d6:ca:ce:
1b:51:ec:ad:56:b4:c3:31:e6:c3:be:2f:81:4a:df:
dc:5f:51:8b:9e:5f:d9:43:0c:93:9c:8e:39:cf:8b:
bd:7d:28:f9:c2:67:46:d1:00:6c:1e:d5:77:17:4b:
b2:ca:d7:f4:25:0b:1c:ec:f3:56:c6:7b:2e:d3:eb:
e8:07:ae:d9:36:e8:58:e8:43:ce:4c:6a:73:13:66:
f1:dd:f9:06:a8:89:19:ac:1d:2d:6e:60:4b:fe:df:
c7:b8:e7:a1:92:bb:09:a7:3f:74:61:da:3e:1b:94:
bc:64:89:0b:a3:07:bd:2d:7a:6a:a8:2d:bf:59:26:
b9:db:5b:07:ce:d7:92:13:b2:78:be:3a:94:b4:b4:
73:4a:dc:1c:fa:ec:87:a1:0e:00:f9:b7:59:7d:b8:
d4:ae:b9:08:1a:0e:38:36:f2:61:93:85:63:c4:8a:
65:f3:38:d1:10:9c:a0:5e:ce:25:14:94:73:6f:82:
b5:cc:26:ec:64:44:6a:3c:84:5d:d9:48:5e:2e:e8:
68:d0:d7:56:9f:a4:52:5f:8a:d2:49:86:b1:bd:47:
4d:31:bd:57:3c:6b:42:bc:08:33:c9:c6:cc:70:e4:
5a:78:3d:64:a2:bc:9a:e9:eb:e6:dd:ec:fb:19:cd:
f6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AC:AA:BF:64:12:BA:9B:A2:57:DB:DE:E8:46:40:93:A7:F1:57:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef99e548-e0fa-3818-a2d9-38f84fe7438e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1900:4010::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:37:65:89:ed:7e:ee:9e:31:d0:be:02:5b:94:6d:ec:a5:3b:
e8:21:a9:79:31:ab:9e:00:7b:d1:be:8b:4d:3f:19:4a:fb:cc:
21:ef:f3:6c:0b:74:2b:0e:74:5f:72:4e:a3:a2:4c:c5:1d:f1:
48:49:36:df:1d:cc:3e:89:a3:bf:95:8a:26:a3:c8:57:e3:a1:
7f:ec:94:4a:b2:ad:60:50:1d:45:47:b6:d7:07:c2:38:59:cc:
2d:07:a2:0f:aa:7a:53:1d:ba:16:a0:7d:38:35:70:75:c0:ee:
e8:fb:0f:5c:5a:9f:b9:28:a9:60:5c:91:a0:99:63:ef:24:0e:
82:3d:fa:ca:d4:bc:d6:6a:95:5d:3f:07:a8:c1:a7:c9:17:fe:
89:3a:b5:9d:d2:e5:01:bc:96:f6:29:66:b0:5a:75:5a:b4:b4:
5c:05:a7:ee:5a:6c:5b:da:ce:19:a1:23:37:eb:66:05:24:56:
f8:f4:72:d7:d8:31:ed:1a:a2:3d:fc:46:28:ab:62:06:59:b8:
b4:14:c2:07:07:98:aa:51:58:ec:9f:7f:f2:6f:c5:d7:48:26:
f4:03:9a:13:b1:cb:05:07:55:05:b9:49:4c:07:a9:08:1d:b0:
c6:88:df:fc:ff:08:cf:f5:f2:e8:1c:10:04:59:cd:66:69:a0:
56:23:73:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:49:54 2025 by rpki-client