Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/d62b4c4e-0498-3810-b9f0-ad1840ebc9d9.roa
File: d62b4c4e-0498-3810-b9f0-ad1840ebc9d9.roa (raw, json)
Hash identifier: b7zH7GPbQPZGXjSUoBYNzxbQ2UhS6+ek1M2MHLjn1dQ=
Subject key identifier: 1A:17:EA:E0:DB:A9:B3:F5:D8:07:3D:44:62:C4:1A:3E:7B:70:7E:FE
Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial: 010D0C9F43285842E6145937B0A6BB147AE1CC70
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/d62b4c4e-0498-3810-b9f0-ad1840ebc9d9.roa
Signing time: Wed 16 Aug 2023 01:22:11 +0000
ROA not before: Wed 16 Aug 2023 01:22:11 +0000
ROA not after: Tue 14 Nov 2023 02:22:11 +0000
asID: 142632
IP address blocks: 2602:fc15:10::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:e6:14:59:37:b0:a6:bb:14:7a:e1:cc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Validity
Not Before: Aug 16 01:22:11 2023 GMT
Not After : Nov 14 02:22:11 2023 GMT
Subject: CN=8fb51b22-9d9e-48b7-ab48-badd16761f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:64:3e:56:6a:6e:09:07:ef:1e:d2:5d:3e:
dc:a4:09:f4:94:a7:42:b5:17:99:ed:b6:08:92:81:
aa:e4:ff:d0:e3:15:f8:14:d4:7c:1e:53:78:40:de:
b4:42:32:67:c0:85:0e:65:59:30:49:a4:e0:62:88:
6b:de:01:87:f5:fd:27:88:bc:7e:5c:7c:5d:a9:cd:
10:aa:85:d7:6f:ff:9c:d1:59:1f:50:aa:5f:d6:d6:
fb:39:51:6c:4a:6a:56:d6:e1:e4:b6:b2:eb:9f:18:
bc:29:af:97:ee:9b:7f:76:8c:c7:18:ee:10:4a:da:
6f:56:42:67:cc:b1:52:d3:de:b8:3b:81:a1:ad:fd:
e4:ad:6f:b5:c4:a6:ef:e5:ee:3c:f4:96:ac:4b:60:
34:67:6b:02:cf:9f:d0:60:df:e4:01:20:13:78:bb:
cd:bf:cd:c6:6c:eb:af:45:41:93:08:7a:5c:7c:26:
5d:12:47:2d:be:3f:6d:f7:99:fc:b3:d6:35:83:3c:
81:ac:9f:c5:c9:32:5d:8b:ed:dc:f4:5c:9f:99:35:
96:d6:25:0f:a5:dd:dc:2e:ed:59:4e:83:39:45:2b:
4a:0d:9d:78:b3:dd:cb:b4:0d:76:47:47:08:fc:b2:
ce:ee:ed:61:76:a4:35:2f:ad:c2:d7:3c:45:0e:cc:
77:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:17:EA:E0:DB:A9:B3:F5:D8:07:3D:44:62:C4:1A:3E:7B:70:7E:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/d62b4c4e-0498-3810-b9f0-ad1840ebc9d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl
X509v3 Authority Key Identifier:
keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc15:10::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:9f:cc:47:1e:21:50:3f:31:7c:61:e1:4f:f7:d2:49:c1:9e:
43:98:14:72:1a:c3:ec:00:46:f1:47:cf:bb:a8:47:06:04:71:
1e:99:07:a4:05:2b:88:2b:7e:fe:e2:11:20:20:e3:b7:c8:fe:
15:ea:09:b9:c4:34:10:f5:96:8d:8b:2a:95:82:a2:e4:7f:7f:
4b:eb:90:9e:39:e8:80:04:b6:b5:6d:c5:0a:3d:f8:df:7b:03:
a3:7c:87:19:dd:92:1b:37:cf:56:bb:6b:e6:a6:cd:bc:b3:7b:
b7:57:72:a1:89:76:3f:f8:d7:a6:6b:50:4f:ab:7b:80:ae:6e:
36:7c:2f:91:1c:3e:1c:98:fd:43:10:fd:de:b9:6d:79:71:95:
30:98:04:b5:e7:b0:b4:74:24:c8:f6:10:ff:ca:32:1c:ac:29:
d4:2c:22:3f:b3:06:e2:10:7b:5a:51:7f:4a:e9:46:12:49:c6:
a4:2f:a4:cf:6a:68:60:9a:1c:39:0d:c6:4e:a8:bc:b9:2b:16:
ad:2e:e7:7c:fb:0e:d7:a9:20:7c:f3:92:7b:b8:da:2f:6b:f9:
48:ca:95:22:c1:9d:a7:11:d4:4c:36:d7:3e:f9:05:89:6e:44:
09:15:d8:62:70:33:e0:56:34:28:4e:58:42:e5:69:f4:1b:01:
b2:47:c4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:09 2024 by rpki-client on console-ams.rpki-client.org