Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd500593-c968-383f-8170-7aef33ab2496.roa
File: bd500593-c968-383f-8170-7aef33ab2496.roa (raw, json)
Hash identifier: q7/uN8x2w681Ke3Y1ZteXYhgGDnIJup+wVX555VsWFo=
Subject key identifier: 9E:A1:51:D5:C9:A5:E8:2A:10:10:41:6F:06:1C:09:FA:82:71:27:AA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE67FDAE36ABDA24643FBC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd500593-c968-383f-8170-7aef33ab2496.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 2001:4958:1828::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e6:7f:da:e3:6a:bd:a2:46:43:fb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=e2c0ff5b-aa66-4bef-99f1-9a174d4c9f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d8:48:96:1f:20:1e:fe:17:19:fc:77:33:79:
2c:32:03:7f:47:40:5f:c3:63:0f:33:a7:5e:39:0c:
60:57:91:30:ec:1b:d5:6d:ad:b0:86:1a:90:3f:98:
dc:b5:8c:26:6c:bb:bb:f9:72:5d:ae:c5:17:0a:66:
17:60:4b:2d:1d:46:b0:d0:0a:6a:83:be:1f:96:c8:
34:78:21:96:5a:9e:59:3c:d8:3b:fe:09:97:41:a6:
54:d7:7d:a0:4b:56:8f:59:59:00:8e:86:4b:64:3e:
0e:d6:36:fe:ec:03:2e:3f:d2:60:d9:32:06:31:a7:
7d:06:32:58:b8:2a:e2:f6:c7:78:c7:9a:61:58:30:
a8:a9:b4:12:e4:50:8f:5f:c8:cf:74:4f:12:c1:b4:
5c:d6:ab:b4:17:5b:cc:62:2c:7d:a0:b3:48:4b:02:
62:18:00:8d:fe:87:92:36:91:41:ab:64:9b:cf:dd:
57:f8:d6:ca:21:df:f4:d0:5d:d5:7d:13:36:06:90:
5f:71:f0:94:61:bb:8d:83:79:bb:f2:1b:c4:e2:7a:
64:cb:3f:81:3c:47:e8:af:00:bb:be:dd:de:e1:bf:
6e:d4:85:8d:94:80:62:16:16:f5:92:7e:e6:82:c7:
da:77:37:b5:df:11:49:23:13:f9:af:39:c0:c5:c2:
d9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A1:51:D5:C9:A5:E8:2A:10:10:41:6F:06:1C:09:FA:82:71:27:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd500593-c968-383f-8170-7aef33ab2496.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4958:1828::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:70:68:b4:75:2a:ad:9c:8e:79:b0:0f:87:4e:6b:2a:1f:10:
98:dd:a7:0c:85:1b:ee:52:3a:4b:b4:b0:9d:54:d6:b6:86:2a:
29:fe:0d:6d:33:cd:0e:bf:21:94:95:b1:f3:05:2d:e5:94:cf:
7c:e5:e2:4d:76:16:d6:0a:6b:79:ad:e7:29:9a:14:cc:03:53:
1a:7d:bb:5a:e8:df:07:5c:ea:48:77:55:0a:e0:54:a9:62:64:
6a:81:2a:5a:9b:f3:84:10:8c:3c:e8:aa:c3:ec:19:f4:3f:62:
74:36:3a:7d:00:b6:54:57:21:41:5b:ca:5f:27:b0:ae:f6:79:
ce:d4:46:40:cd:2f:bf:4c:7c:0c:55:17:9d:f1:68:8f:fa:76:
6c:39:8c:e2:a8:32:53:1f:26:c7:12:f0:f9:3f:44:ec:a0:ad:
ca:e8:12:b0:8d:c0:51:b4:1f:0e:2f:b4:99:a4:08:3f:6f:cc:
a4:86:7e:ad:3d:5f:de:6c:cd:ca:66:a5:4a:ce:28:0d:09:df:
2b:4d:0e:55:4d:e0:1e:68:76:78:d4:eb:a8:bb:34:94:88:8c:
e6:88:43:dd:15:65:00:cf:6e:d4:05:60:d2:80:7b:0d:0f:45:
df:27:ae:d8:79:63:38:47:d3:eb:32:0c:bf:8c:ae:34:75:c8:
dd:fd:2e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org