Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a315eb33-08dc-3436-b539-8d782e3e56b7.roa
File: a315eb33-08dc-3436-b539-8d782e3e56b7.roa (raw, json)
Hash identifier: aeEb3knRatPOB8p4/SbtzLysrB3/LiiJ49/2jCIlrDw=
Subject key identifier: 8F:36:BD:82:DC:F0:B5:F3:BB:2F:F9:51:93:64:87:C5:9F:5C:FF:E3
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE67B3C94B251BEDFF04A00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a315eb33-08dc-3436-b539-8d782e3e56b7.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 3848
IP address blocks: 2001:4958:1521::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e6:7b:3c:94:b2:51:be:df:f0:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=edd893b0-5cea-4149-b81b-50c7b04a1d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:af:d6:95:e8:a2:46:bb:7d:3e:a4:62:b5:
65:a2:2a:ca:43:1d:51:12:6d:b9:74:44:1d:48:42:
12:98:11:d3:86:37:a7:4d:a8:30:1b:86:30:52:64:
a0:99:b6:5f:89:af:f6:24:a6:4c:46:71:dc:9c:8b:
5f:31:d0:fb:8c:ed:d7:db:8b:5a:04:bc:03:e3:eb:
e0:fa:ae:85:58:97:b9:7c:fd:ec:33:2c:a6:12:c3:
14:15:32:a6:63:2f:2b:ef:da:e6:c8:9d:ea:f4:b6:
46:08:ba:58:05:78:11:51:54:9c:d3:80:ca:ab:b2:
fd:fc:3a:3f:a1:a9:ef:1d:99:93:bd:23:29:58:c4:
e5:bb:52:c8:54:ad:77:c2:4f:85:73:20:68:21:f9:
c5:88:09:6a:1b:6f:34:1c:9c:f5:1d:57:c9:80:d5:
68:46:61:54:24:0c:11:4c:fb:29:cb:1a:84:44:82:
73:71:e9:a2:f6:14:0a:10:91:1d:16:26:22:29:87:
4b:b8:59:5c:1e:68:e1:ff:89:42:60:a6:4e:54:c6:
d2:91:be:9b:dc:90:91:3d:9c:48:6b:53:33:5f:b2:
af:95:d6:de:c6:8e:91:c1:a5:1e:3e:56:8c:1f:2c:
43:1b:16:4d:7d:bf:52:ea:c4:38:d9:ee:eb:b7:48:
30:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:36:BD:82:DC:F0:B5:F3:BB:2F:F9:51:93:64:87:C5:9F:5C:FF:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a315eb33-08dc-3436-b539-8d782e3e56b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4958:1521::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:98:b2:ae:d3:0e:c2:3a:0a:ef:50:26:8c:b6:b2:ff:37:f2:
c9:91:ca:ab:b3:f5:fd:0c:f3:17:8e:07:0f:d4:30:6c:75:d7:
a5:82:31:0f:01:9d:cf:ba:0b:92:d8:0a:65:60:f8:38:99:9a:
2b:e9:4e:fb:3b:72:91:14:10:2b:c5:ae:ee:56:42:f7:c8:04:
88:da:b0:a6:27:2b:cb:ea:9e:17:8c:df:5b:17:19:b4:05:92:
9a:f9:b2:f4:8b:7b:0a:f4:ac:a6:1d:b3:60:71:a0:1a:d7:af:
29:b7:33:86:39:36:2a:aa:da:6d:a6:a8:ab:63:46:3f:a6:d8:
cc:59:78:34:93:11:c0:3e:9c:4c:68:7b:30:3a:5b:3c:c6:2f:
df:9b:27:52:37:20:7e:a4:9e:c3:06:9c:bc:1b:22:a9:ca:bd:
c5:c6:bc:6f:c9:ca:64:24:31:3d:5b:7e:53:da:98:64:8d:c3:
6e:4a:f2:60:f4:87:f1:a0:56:48:07:45:ca:15:11:d4:5e:b0:
f4:bb:b2:4c:79:ed:5a:44:8a:52:ac:41:ad:d1:f9:9e:82:81:
23:20:4f:d0:32:ea:42:58:01:9d:85:2f:33:50:19:dc:97:22:
35:83:12:a3:97:ff:c8:cc:96:00:a8:b6:e5:fc:93:3d:55:79:
11:fe:08:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org