Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/528a6aeb-ddb8-3f74-9bdb-280608927d61.roa
File: 528a6aeb-ddb8-3f74-9bdb-280608927d61.roa (raw, json)
Hash identifier: c/Jfas5yCBAjRORymtE6Y2qGKEjWzF3tTynv471qDBI=
Subject key identifier: FC:2F:5D:EE:8C:3C:BA:C8:9D:D1:31:41:51:06:62:A0:E4:7F:6C:CD
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F432858433B1B5C1BEB4552319AA47E80
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/528a6aeb-ddb8-3f74-9bdb-280608927d61.roa
Signing time: Fri 15 Sep 2023 12:20:01 +0000
ROA not before: Fri 15 Sep 2023 12:20:01 +0000
ROA not after: Thu 14 Dec 2023 13:20:01 +0000
asID: 20473
IP address blocks: 2606:f180:16::/48 maxlen: 48
2606:f180:15::/48 maxlen: 48
2606:f180:14::/48 maxlen: 48
2606:f180:13::/48 maxlen: 48
2606:f180:17::/48 maxlen: 48
2606:f180:12::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:3b:1b:5c:1b:eb:45:52:31:9a:a4:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Sep 15 12:20:01 2023 GMT
Not After : Dec 14 13:20:01 2023 GMT
Subject: CN=c630a6d4-8cd7-4b50-8108-094ff6172231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d9:55:e1:0b:f9:f2:d1:ca:a4:d2:21:4c:fc:
97:38:99:ec:e1:0b:71:2d:99:22:6e:b1:6b:e0:10:
a4:7f:9a:d3:97:d0:5d:60:d0:1b:ee:33:6b:b3:7d:
60:b9:fc:9f:7f:67:ec:4c:a7:52:65:65:9c:ba:f0:
7f:f9:65:90:d7:ae:0b:19:e2:2a:c3:6c:84:4d:57:
1f:28:51:6a:cd:14:49:51:dd:da:ec:16:8c:88:69:
ab:8f:86:0c:17:cb:07:4a:7b:6f:f9:24:dc:f5:2b:
14:52:72:03:fd:1a:67:52:52:44:f5:92:ba:49:64:
14:a5:5e:8b:6c:d3:e8:e4:bb:80:cf:34:a2:84:02:
6e:5d:31:28:63:1f:63:ff:c2:b1:e6:e6:2d:85:43:
c8:21:b2:65:74:ce:d6:af:3b:fb:54:19:b0:35:6e:
e9:12:20:dd:c0:8a:aa:c6:fc:39:6e:79:9d:fc:ec:
ad:a6:1c:92:f5:76:e7:b7:bf:ac:1a:4a:fa:1e:fa:
67:d0:2d:3f:65:32:77:3a:e5:27:40:c4:14:d5:81:
6e:ea:b9:5f:53:d5:aa:81:e7:a1:5a:98:75:bb:fe:
cb:6c:77:ef:35:d7:f9:a2:36:12:55:8d:d3:75:b3:
59:76:c5:39:0e:6a:5b:58:32:37:cb:6b:57:a5:f3:
e0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2F:5D:EE:8C:3C:BA:C8:9D:D1:31:41:51:06:62:A0:E4:7F:6C:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/528a6aeb-ddb8-3f74-9bdb-280608927d61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:f180:12::-2606:f180:17:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:34:a9:d0:b0:ae:50:6e:11:44:cd:0d:bb:60:7e:a6:1a:4d:
e9:bb:5c:5b:0b:82:08:08:1f:a7:68:f8:db:05:d1:90:7c:a2:
e7:9f:e3:8b:65:12:5a:5d:7b:b9:a8:4a:79:63:4b:8c:66:15:
49:d0:f5:a2:2d:e1:c5:26:bf:e0:2f:d8:52:d2:a1:25:a0:79:
cf:34:ba:c7:41:46:ef:0d:d8:eb:5e:d0:a0:24:2d:15:38:73:
30:6f:56:79:8f:95:ce:a4:fe:ca:16:ec:84:96:e5:7c:df:66:
bd:2b:3d:ee:5c:f9:aa:1f:90:f6:cb:f1:95:7e:fe:0d:c3:e7:
e4:dc:0d:06:41:4d:ce:37:eb:93:a2:03:98:80:4e:2e:a0:29:
f1:de:1d:43:cb:fd:1a:03:7e:71:bb:98:e9:49:76:eb:7c:36:
56:f4:46:6d:b4:8d:41:94:7e:d4:7c:0f:68:e6:bc:de:57:5e:
36:63:9b:4f:a3:82:5d:d8:83:b3:5d:f2:9b:4e:e6:e9:49:b1:
f5:3b:55:36:1c:d5:55:58:4b:70:7d:b8:4f:b1:42:87:fd:b8:
9b:8e:1c:25:8b:75:2f:d2:97:d1:9a:b5:6e:db:e0:c3:41:55:
63:ea:c3:fc:28:d6:cd:47:d9:08:f3:86:8b:bc:11:ca:30:75:
ed:5b:dd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:38:28 2024 by rpki-client on console-ams.rpki-client.org