Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9e292fc7-a4ee-33e7-96ad-1e2e1bf02d8e.roa
File: 9e292fc7-a4ee-33e7-96ad-1e2e1bf02d8e.roa (raw, json)
Hash identifier: siDUC11b1FrnlVGuxTfuI4y/a3hvgI0C+xWq3ogg+J0=
Subject key identifier: FA:BF:8A:7F:0F:AE:85:B6:6A:74:5F:27:57:18:99:59:33:EA:3E:38
Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial: 010D0C9F4328583C8FC6A9399678465CF61DE2A0
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9e292fc7-a4ee-33e7-96ad-1e2e1bf02d8e.roa
Signing time: Mon 08 Nov 2021 05:00:00 +0000
ROA not before: Mon 08 Nov 2021 05:00:00 +0000
ROA not after: Mon 15 Apr 2024 04:00:00 +0000
asID: 210734
IP address blocks: 2602:fc09::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:8f:c6:a9:39:96:78:46:5c:f6:1d:e2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Validity
Not Before: Nov 8 05:00:00 2021 GMT
Not After : Apr 15 04:00:00 2024 GMT
Subject: CN=1832337a-e91b-4216-838f-ee3c339b85f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:30:55:00:01:09:4c:75:04:8e:6a:f1:75:1c:
71:c8:2e:0d:f0:f2:47:39:2b:1d:8a:a7:0f:a0:18:
90:28:c3:0d:43:b2:c4:16:99:74:40:06:3d:65:b2:
2e:fb:d2:b6:c7:7f:73:a5:13:5c:d7:e5:7f:aa:45:
6e:96:ba:93:e8:61:6c:d4:57:d0:39:f1:77:d2:7e:
df:7e:72:2c:97:f0:8d:63:27:1e:43:61:fd:93:96:
89:48:c6:78:08:2b:a9:05:f0:c8:85:c8:df:37:4d:
fd:ff:50:0a:f4:89:3d:0d:d3:a9:ff:d2:42:36:48:
89:f4:71:d5:9b:c2:ec:cc:d5:35:13:5e:0c:ef:b0:
0b:8f:e8:1d:07:92:53:e8:8b:68:cc:41:24:0b:2a:
bc:7e:ed:40:14:0c:ba:db:a1:ac:3b:e7:0e:12:4a:
84:5f:1b:77:1a:20:61:ca:4f:3e:25:d8:d4:8a:19:
05:99:78:2e:54:d3:7b:02:99:ec:21:e9:3e:7b:67:
83:9b:15:bf:27:ab:26:7d:71:87:a9:1b:16:d7:18:
0c:5a:47:2f:2d:6a:45:4e:a8:41:7a:32:0a:c0:65:
45:84:6d:59:d5:56:16:5a:90:c0:9d:76:b0:53:18:
bb:bd:78:f1:f2:f9:53:26:95:25:1d:aa:18:be:81:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BF:8A:7F:0F:AE:85:B6:6A:74:5F:27:57:18:99:59:33:EA:3E:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9e292fc7-a4ee-33e7-96ad-1e2e1bf02d8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl
X509v3 Authority Key Identifier:
keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc09::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:8d:ba:b8:a4:6b:73:af:30:e2:78:1b:1e:c5:aa:73:48:42:
14:a5:80:6a:72:24:19:d2:b1:85:1c:51:d5:bd:a0:41:bd:95:
7d:44:b6:63:06:e8:dd:0e:43:aa:89:b2:9a:2d:8c:a5:14:38:
f7:ae:da:a2:a6:ba:4d:bd:32:a8:24:6a:e9:65:60:89:ed:15:
10:95:97:db:dd:26:92:4c:32:8d:dd:7d:ce:f8:98:8f:55:ce:
84:48:4c:66:03:1f:b5:9d:b4:a7:95:9a:4f:fc:ad:fd:a2:75:
d8:e3:72:6f:7c:e0:e6:fe:ae:50:a2:20:b6:43:ad:58:8a:55:
00:1a:88:40:13:96:f6:3f:1c:f6:3a:de:f1:80:a4:48:ef:75:
31:f4:ab:b8:a2:83:76:e6:a4:7b:ce:7d:7d:2f:b3:0b:16:fa:
4c:b4:34:3f:90:98:93:fb:c2:b5:b3:0e:36:c0:97:a8:77:06:
df:85:00:2a:88:be:82:68:75:c2:dd:eb:3d:6c:f1:b1:06:dd:
02:10:7f:c9:af:18:f6:26:5a:74:9d:50:9e:6b:cb:4d:c4:fc:
03:1a:ba:24:ea:7e:0d:56:0b:6c:95:82:f4:a5:32:de:56:f5:
1c:ca:b9:08:ce:64:6a:29:64:44:6f:4f:cc:cc:f1:ec:d6:a5:
35:e8:a9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:57 2024 by rpki-client on console-fra.rpki-client.org