Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2066eea7-cc11-32a0-9b20-ca3a495775e8.roa
File: 2066eea7-cc11-32a0-9b20-ca3a495775e8.roa (raw, json)
Hash identifier: WKNEZ1S93AcoAudW3hS0h1Obr0tc/gZyO1A3Gw4R0J4=
Subject key identifier: 89:96:D8:48:D9:01:47:39:49:B8:2C:75:71:4E:E2:AB:B5:49:4E:0A
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837D4183438AC8CB37DF0D9C040
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2066eea7-cc11-32a0-9b20-ca3a495775e8.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Mon 06 Feb 2023 05:00:00 +0000
asID: 852
IP address blocks: 2001:56b:5ff0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:d4:18:34:38:ac:8c:b3:7d:f0:d9:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 6 05:00:00 2023 GMT
Subject: CN=25ded8ed-77fa-40c1-84f6-cc5b512b632c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:89:54:ae:b7:a8:40:8a:67:de:0c:a2:5d:
51:cf:fc:98:64:1d:3c:bb:0b:61:92:41:44:6d:db:
bd:67:a3:ca:90:08:e8:b9:48:6b:2f:36:82:8f:ab:
e8:91:89:2e:d1:aa:b1:e3:9f:2d:43:ca:4e:72:41:
5e:ef:21:f7:07:47:bd:9e:50:ca:ad:dd:cd:fc:a0:
da:3d:fd:3f:10:f3:fc:64:b3:9b:ad:f0:a2:33:80:
84:15:3d:df:93:95:81:60:da:b0:ae:22:0a:36:c1:
5d:c5:1b:cb:e7:f8:32:2b:8e:63:6f:9c:54:6c:7f:
85:ee:d6:35:27:3a:6d:ed:5c:9b:06:14:84:7d:32:
60:bd:26:3f:64:aa:e3:c5:4c:86:21:14:92:15:9b:
42:2a:28:d1:c8:42:02:55:da:bb:c1:5a:dc:43:71:
b0:54:b3:2c:54:3e:7c:c0:39:c8:88:28:ba:df:33:
a8:bb:95:57:9c:b4:19:09:75:e1:d2:b0:ef:16:d6:
03:05:47:ad:a9:a9:a9:e3:30:c8:da:cc:ae:ed:79:
0f:00:e3:0a:ff:1b:f6:2b:41:a3:01:eb:43:79:c3:
59:c8:4a:51:c1:af:45:60:8b:31:89:ab:8a:90:a9:
d4:58:80:bd:9e:ee:61:57:05:37:17:e9:9b:d2:ea:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:96:D8:48:D9:01:47:39:49:B8:2C:75:71:4E:E2:AB:B5:49:4E:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2066eea7-cc11-32a0-9b20-ca3a495775e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:56b:5ff0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:61:5f:39:fd:c1:35:74:a5:9b:bb:4a:54:29:7c:c0:fb:a5:
da:99:23:94:52:2d:cf:cb:17:a9:1c:43:08:bb:ae:52:d7:53:
42:35:f5:e3:a0:c4:7a:96:5e:45:c5:2b:10:ed:68:87:40:35:
99:37:62:de:ec:a6:be:6e:70:8f:c2:46:fe:c5:66:32:16:a3:
8c:3a:f5:57:c8:65:bb:6f:0b:74:5a:5a:6b:7b:82:e7:e3:48:
0f:8e:92:1a:5a:ea:c3:fb:7a:e9:df:02:fd:4c:07:1a:e8:b8:
d2:d2:37:51:22:e7:5d:67:93:74:80:e5:0f:7c:e1:b5:c8:21:
75:f0:f3:0d:66:cd:99:53:bb:fc:1e:85:9b:ee:d5:1a:34:70:
9c:c2:b2:6e:0c:68:d4:90:d1:52:04:3b:6c:ff:a3:9d:43:0d:
bd:85:f1:ef:32:ca:b2:7c:40:5e:2b:3f:92:b8:a0:01:e4:cb:
78:c2:9d:90:e6:aa:78:ac:11:a8:58:a2:c8:dc:c0:37:d3:2f:
36:f5:e1:5f:d3:24:fc:e8:24:79:b8:24:2f:1f:cf:7e:6d:2c:
71:df:3d:c7:e4:fe:cc:ed:06:a4:a2:ae:6f:86:cc:8d:4f:8e:
e0:6d:8d:80:ea:3a:32:d0:73:46:57:46:58:e4:d6:00:78:91:
d5:1a:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:55 2023 by rpki-client on console-ams.rpki-client.org