Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f134b868-7ea0-3a30-9bac-ad6d84d5a0c9.roa
File: f134b868-7ea0-3a30-9bac-ad6d84d5a0c9.roa (raw, json)
Hash identifier: ih7UBygbHMUm8yQa2TNguYWE37RaK2lneeEXz0DMQUA=
Subject key identifier: DF:68:BE:FC:DE:DA:5C:1C:75:9E:FA:F6:74:4F:1B:04:51:34:04:A1
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328583B05BBE9EC111002CC46226680
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f134b868-7ea0-3a30-9bac-ad6d84d5a0c9.roa
Signing time: Tue 10 Apr 2018 04:00:00 +0000
ROA not before: Tue 10 Apr 2018 04:00:00 +0000
ROA not after: Sun 26 Nov 2023 05:00:00 +0000
asID: 20940
IP address blocks: 2001:418:4001:2::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:05:bb:e9:ec:11:10:02:cc:46:22:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Apr 10 04:00:00 2018 GMT
Not After : Nov 26 05:00:00 2023 GMT
Subject: CN=dbde603d-db02-40f1-9fd0-af3c9fc02268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2d:b6:d2:ea:1b:c0:db:d7:f8:70:1e:5f:4a:
db:f9:65:04:43:15:ef:1f:3c:b4:9d:c4:42:e5:dc:
a7:f7:7e:9f:6e:82:7c:50:74:8b:d5:97:27:09:be:
fb:9d:5a:6a:7e:96:2c:a5:68:8a:11:f7:27:e5:5b:
d8:df:c1:60:5d:7a:b9:05:62:a0:5e:80:1a:eb:2a:
b0:c9:10:a4:e5:b0:f4:40:3f:20:ef:52:51:a2:b5:
56:e8:3f:1c:79:05:68:92:87:c0:0e:15:77:4a:e8:
50:fe:1a:07:40:68:4f:c1:ed:d5:21:7e:27:d3:d6:
eb:c9:b7:c0:2b:05:1f:e5:fc:21:8e:1e:3a:d3:e8:
5b:b2:9a:77:6f:02:48:a2:e5:98:a0:6a:2d:eb:e4:
55:ab:e3:d3:e8:cb:1b:cb:0b:94:23:a9:4e:35:19:
8f:95:22:4f:b2:f0:45:6d:91:cd:0b:b9:d7:5e:ec:
fa:33:06:82:38:39:9e:7d:99:fe:f4:e3:03:f6:38:
c2:00:79:6c:d4:45:7d:da:c2:07:43:c8:df:4d:ed:
16:ba:84:fe:c9:ce:41:9d:df:83:2e:03:29:e0:e1:
47:8c:3b:34:00:1d:85:2b:04:c6:0b:f9:0e:a6:98:
ac:91:3c:51:a4:fc:0d:de:b0:6d:15:6e:1a:f0:9b:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:68:BE:FC:DE:DA:5C:1C:75:9E:FA:F6:74:4F:1B:04:51:34:04:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f134b868-7ea0-3a30-9bac-ad6d84d5a0c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:418:4001:2::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:6f:27:1f:45:72:66:6b:cf:ee:a8:38:c0:f7:3d:c9:1e:30:
82:d1:c2:5c:af:ec:32:80:9b:29:34:c5:61:be:d3:41:cc:48:
bd:52:84:80:a6:a2:62:ba:5b:9c:19:ef:a0:53:3e:38:c9:93:
fa:10:98:23:12:e2:ab:0d:41:06:b4:c7:e2:21:34:66:c7:62:
24:63:3e:de:ad:c8:e9:1c:7e:ad:5e:44:19:14:10:b9:ec:f6:
9a:15:52:cc:44:71:03:7e:0d:e8:20:8e:ee:8e:1a:40:90:28:
8d:9d:ac:5b:71:40:58:a2:8c:b5:9b:17:45:15:e4:ac:fa:93:
48:65:80:da:8c:18:14:99:c9:0c:98:79:84:c1:63:ed:b4:5f:
34:0a:e5:b3:93:15:df:a1:c9:82:7b:97:ef:a0:81:d0:45:34:
66:b2:4c:82:bb:09:66:ab:71:46:78:1b:d5:18:62:21:98:eb:
a8:c0:da:79:ce:97:40:32:2c:a4:30:22:69:28:48:e3:61:a4:
ef:cf:27:cc:bd:7c:ca:32:98:72:77:e8:f5:41:22:02:ef:e5:
bc:d7:94:26:b0:cb:f2:b6:26:0e:ed:d6:66:ff:aa:a0:d1:7f:
0c:77:c3:06:7b:b7:9b:be:f7:f5:45:85:38:69:91:f1:b4:7b:
06:1b:25:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:08:22 2024 by rpki-client on console-fra.rpki-client.org