Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/5b89fe00-f9c8-30ca-9e86-4528449915ff.roa
File: 5b89fe00-f9c8-30ca-9e86-4528449915ff.roa (raw, json)
Hash identifier: 2dK+camrRvWQUTVAmChuPS7AWg4rfAwxiw6Kj+vB/34=
Subject key identifier: CF:1F:AD:CA:F8:38:9A:AB:FE:0B:0B:E9:D3:D0:B4:D2:8F:C6:91:C6
Certificate issuer: /CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
Certificate serial: 010D0C9F432858436B27DB71FF0BDA173E427858
Authority key identifier: CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/5b89fe00-f9c8-30ca-9e86-4528449915ff.roa
Signing time: Mon 02 Oct 2023 17:24:00 +0000
ROA not before: Mon 02 Oct 2023 17:24:00 +0000
ROA not after: Sun 31 Dec 2023 18:24:00 +0000
asID: 14618
IP address blocks: 2602:fcee:400::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:6b:27:db:71:ff:0b:da:17:3e:42:78:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
Validity
Not Before: Oct 2 17:24:00 2023 GMT
Not After : Dec 31 18:24:00 2023 GMT
Subject: CN=171a3ea1-483e-487e-b635-bae4e8b043b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:04:9a:71:ca:9d:8e:60:b5:14:ea:4e:90:
e8:77:c5:89:a5:d5:75:75:e2:ac:38:76:c5:72:f1:
15:12:ba:8e:4e:ce:5e:7e:61:f7:49:c6:eb:ff:08:
d5:6b:40:a5:c4:12:df:cd:5c:87:e2:b3:a1:ba:09:
6e:6b:6a:ca:50:63:1c:c4:c2:f8:aa:e3:ab:3f:b8:
11:19:1a:13:cf:d6:0f:1e:f9:1b:18:0f:03:26:b5:
64:67:60:a0:69:3c:31:b1:a2:39:d8:7f:0a:54:ab:
e7:ba:82:5c:c0:19:13:60:ca:80:60:29:ee:a6:14:
51:bf:cd:f2:86:9c:c9:30:06:3e:6f:69:7b:27:87:
32:f0:3a:9a:4a:23:91:ba:26:c4:d3:5a:4c:f0:da:
ec:ab:68:03:1b:10:09:8c:56:b7:71:98:2b:57:49:
25:ba:c9:0b:04:5d:db:76:b4:32:c3:78:a6:b3:c0:
65:be:05:18:6b:5a:c6:40:91:e4:c6:b5:ae:19:e2:
d6:8a:38:53:bd:18:5c:d8:34:95:46:3b:7d:ff:75:
fc:bd:f5:34:bd:0f:1f:57:33:4f:52:4a:a8:0d:81:
b1:ac:4c:43:58:dd:23:68:46:bf:24:13:27:77:17:
d7:ad:04:35:38:99:a9:4c:18:9b:c8:4b:28:86:f9:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1F:AD:CA:F8:38:9A:AB:FE:0B:0B:E9:D3:D0:B4:D2:8F:C6:91:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/5b89fe00-f9c8-30ca-9e86-4528449915ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.crl
X509v3 Authority Key Identifier:
keyid:CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fcee:400::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:e4:0a:dd:7e:7c:82:bb:99:3d:18:e4:4b:67:6f:55:ba:ba:
53:e3:8b:ec:a2:1a:e4:5b:e7:69:3b:13:7b:a2:a9:ab:86:e0:
64:86:c1:12:e1:ee:e9:6f:ba:2c:63:1f:31:8c:53:27:c0:44:
8c:7c:6a:db:f0:57:e3:0e:e3:5a:f0:0e:2b:6b:0b:86:8a:36:
1f:ad:49:7e:90:34:1e:dd:8f:85:36:96:73:29:2b:42:4a:4c:
19:1a:03:ef:21:db:d7:85:7f:81:0c:7c:54:e8:ef:73:ec:84:
18:2c:a0:07:4d:d3:3b:dd:47:e2:2b:92:07:d5:c7:02:83:c0:
f5:29:5f:c6:9b:35:c3:4f:76:32:08:af:ec:da:88:9d:01:59:
7f:b8:3e:30:3b:cb:6a:05:82:30:ca:93:39:c7:37:c4:43:7b:
e2:e3:37:da:0f:f5:b2:a4:0d:7b:e6:35:e2:a3:6b:2b:8a:92:
48:74:09:e7:9e:ca:ed:aa:53:c8:46:64:11:14:03:3d:6f:b8:
cd:05:a2:36:4f:f1:2b:d2:ec:c9:41:5a:f7:9d:17:29:0d:90:
b1:d4:63:2a:e2:3f:53:a4:6c:dd:af:c5:3d:4c:9b:fe:e8:3b:
82:60:64:55:ea:47:c9:b6:f2:51:ec:12:05:8f:b4:95:62:0e:
6f:02:63:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:45:39 2025 by rpki-client