Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1b7e5e1a-9bfd-3076-9753-2d5c781b4a9a.roa
File: 1b7e5e1a-9bfd-3076-9753-2d5c781b4a9a.roa (raw, json)
Hash identifier: FcoBews0YEZKZYDqpVs+JehyyXivl9ABInKveGeU4Fg=
Subject key identifier: 75:14:FE:05:07:18:D1:26:B4:45:A3:B3:C2:60:BF:D6:13:6E:86:8F
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285840772F88AC45822F7458DFA280
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1b7e5e1a-9bfd-3076-9753-2d5c781b4a9a.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Thu 04 Jan 2024 05:00:00 +0000
asID: 14877
IP address blocks: 2607:3180::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:77:2f:88:ac:45:82:2f:74:58:df:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Jan 4 05:00:00 2024 GMT
Subject: CN=2bdfc9ee-fb3c-4506-bd94-a2dff9bf8d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:1c:a1:eb:f6:39:43:42:f3:2a:09:c6:a6:
d1:15:e1:3a:f7:72:67:bf:76:c9:83:d4:0e:9d:9e:
d5:e4:f9:f0:0b:ba:22:30:22:22:ae:de:ff:cf:f5:
65:2a:01:20:b3:56:90:75:d6:b3:e0:b6:f0:a3:94:
55:c7:47:9b:77:67:ce:58:ab:b5:f6:44:21:d7:ec:
08:39:c9:9e:7a:17:83:8c:79:45:82:47:52:99:54:
65:55:28:12:08:23:ca:67:c7:34:9b:7e:5f:02:17:
b7:6a:50:7d:29:b7:49:60:1a:7a:25:d4:f9:dc:6a:
d3:b8:a6:83:31:82:7d:98:7b:e4:5d:9c:e2:4d:0e:
ef:4f:b2:99:98:22:91:ee:1f:45:96:e0:81:16:7f:
1a:7c:64:3e:f6:4e:bb:b0:a7:05:56:dd:dc:ff:8f:
53:91:6b:59:9c:68:5c:e1:78:4e:e4:09:0b:ad:b7:
ff:cf:f7:c3:08:55:16:aa:b1:75:d7:64:8b:bc:88:
17:e3:aa:d7:96:c2:1f:9a:d5:5b:18:0f:7a:bf:2a:
14:c8:c5:76:24:b6:40:7a:ca:dd:52:2c:bf:21:92:
14:2e:9a:24:de:d3:f4:9f:c7:3d:55:53:28:2d:72:
3d:03:bc:14:1f:7f:7e:e0:12:c5:c3:69:14:fc:fe:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:14:FE:05:07:18:D1:26:B4:45:A3:B3:C2:60:BF:D6:13:6E:86:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1b7e5e1a-9bfd-3076-9753-2d5c781b4a9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:3180::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:a6:da:b4:63:3a:ad:bd:e7:f7:b5:e7:cb:f9:89:40:25:7f:
83:ee:5f:4f:18:6a:95:e1:69:0c:43:6a:ba:4d:3a:ce:65:d7:
72:e7:e5:67:51:3b:31:22:2e:e8:21:ce:ea:51:89:24:3c:b3:
d8:9b:a0:4c:aa:a9:63:80:53:d0:80:46:87:cf:a0:8b:37:62:
69:5f:c8:a0:9e:2a:bf:77:7a:90:d2:27:c8:15:37:d4:ec:8c:
6e:76:1a:09:43:34:6b:02:8c:8f:f1:9e:6c:08:4f:6e:d1:05:
a6:54:6a:99:6e:fe:f9:58:36:94:4c:76:61:0a:49:ab:31:86:
fd:f6:ac:27:89:28:0a:b6:07:4e:57:f3:88:30:e4:3e:5a:be:
41:56:e1:69:b8:6e:b3:22:56:53:36:f8:d3:38:09:1a:42:ec:
02:84:43:c3:38:e8:7a:8f:2a:fa:1d:87:4b:f3:ce:f9:f4:d7:
63:09:b0:49:80:36:8e:3d:37:05:5f:ba:0c:b2:e2:f4:c8:fa:
ac:e1:c4:92:b6:fc:80:aa:c7:c5:f2:63:91:2e:0b:ee:a5:a0:
e3:bf:30:c4:f0:1e:b1:38:c2:2f:8f:a6:9f:c1:d7:dd:f6:eb:
1e:39:f8:9b:e8:f9:1e:47:d4:a2:cf:10:e7:94:ba:8f:f0:39:
82:36:7f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:03 2024 by rpki-client on console-fra.rpki-client.org