Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca108ef1-7e34-3ad1-9f26-63cc28a624dd.roa
File: ca108ef1-7e34-3ad1-9f26-63cc28a624dd.roa (raw, json)
Hash identifier: 2nG35h9ljl9Thc++mhyHD2hnNLWWEDm5SGZihU58DPw=
Subject key identifier: EC:D0:32:BA:9E:34:B3:E7:0F:EC:24:E1:26:F3:01:CF:A5:4C:8D:5E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449316D29EA583A23396747980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca108ef1-7e34-3ad1-9f26-63cc28a624dd.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 2001:4958:1808::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:d2:9e:a5:83:a2:33:96:74:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=ca9e7c06-85fd-4925-bbba-4b76c1c7476f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e0:6e:ac:d0:09:14:6e:f5:b8:06:89:d7:69:
8c:04:02:2b:1b:c9:b0:fe:99:1d:f0:fd:de:7f:18:
ac:df:d4:f6:6b:f1:28:98:d9:67:63:60:21:35:f4:
6b:0c:4a:39:75:a4:78:cd:fe:c7:53:3c:ca:05:39:
c1:18:37:f8:64:57:21:90:25:b6:77:5c:72:49:46:
c7:9c:23:cd:a1:6f:23:d5:b1:4a:9d:da:e5:04:34:
11:95:bf:17:b7:99:3e:cb:ce:5d:9e:37:cf:0d:e6:
a7:21:1d:ec:ee:d4:4a:0a:40:d5:ba:3d:45:1a:16:
69:9f:65:61:96:dc:39:ec:f3:e0:76:93:6e:04:f4:
8f:e2:9d:5e:d7:13:e0:00:43:3d:e8:86:f4:ce:82:
26:1f:f4:26:ab:67:99:e2:2c:bd:58:1c:ea:06:8b:
1a:de:da:0c:ad:0d:a2:29:e8:7f:99:0e:73:f8:33:
81:7e:6f:d9:43:ce:3b:7a:8a:fe:2c:58:56:4a:e1:
70:a0:86:e7:3e:6d:97:cf:38:a4:51:48:0a:46:c7:
d2:62:be:be:32:67:a5:de:75:f8:32:f4:3b:d4:88:
a5:e3:1c:21:a8:bd:64:bc:70:da:9e:52:cf:00:1f:
1c:87:8d:d9:3f:cf:2d:15:2e:19:6f:d9:1a:19:28:
16:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D0:32:BA:9E:34:B3:E7:0F:EC:24:E1:26:F3:01:CF:A5:4C:8D:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca108ef1-7e34-3ad1-9f26-63cc28a624dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4958:1808::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:f0:66:49:f5:06:00:a9:6c:24:a1:47:c6:ba:a1:0b:aa:38:
64:c2:00:92:af:b9:af:09:f5:e4:af:a1:58:1e:ff:fe:e6:dd:
49:39:ec:25:1a:c6:4f:a3:14:e4:f3:d8:e2:ff:d9:87:ff:22:
a8:da:b3:fb:f8:3a:f5:54:7d:93:85:25:e1:f5:58:3a:35:ad:
b0:f8:f5:64:0a:26:d2:93:a9:04:08:8a:85:25:d8:0c:be:08:
da:cb:69:49:71:e5:29:80:46:3d:41:e5:64:5f:bf:ac:2d:05:
72:45:79:94:b4:2a:23:54:1b:fb:9b:88:22:ee:ad:ca:f3:3a:
cb:95:5f:02:c3:c8:f0:ac:72:34:3b:4d:78:23:68:4c:6d:de:
b9:16:d3:ba:ae:2f:2c:59:48:49:dc:28:90:a7:01:ae:9a:8d:
c5:04:97:d4:72:e3:b9:1f:22:04:e0:90:01:02:05:84:a9:cc:
ed:e2:8c:b2:2f:a9:48:23:62:ff:d1:1d:7d:04:60:d8:09:26:
da:76:56:23:32:d7:d0:49:c8:9f:a7:e8:f1:9a:b4:9f:71:61:
b8:14:12:c3:10:34:da:c7:9e:a6:be:be:ed:3e:19:3f:55:d3:
cb:78:97:54:a7:ee:bc:80:08:ae:27:fc:00:d0:9a:cf:a4:5f:
ee:03:1e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org