Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8540a9be-a774-3a28-8d50-0114cc827a1c.roa
File: 8540a9be-a774-3a28-8d50-0114cc827a1c.roa (raw, json)
Hash identifier: DF8Ci86+CBqzeCkr5M0HJ4CuePhEHxAV+qwdK4v6RSo=
Subject key identifier: DF:AC:2E:CA:44:D8:3E:74:4D:13:8E:84:11:DE:FC:09:19:A8:79:21
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F432858432361F683281BDF6D60C5AA80
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8540a9be-a774-3a28-8d50-0114cc827a1c.roa
Signing time: Thu 07 Sep 2023 00:22:52 +0000
ROA not before: Thu 07 Sep 2023 00:22:52 +0000
ROA not after: Wed 06 Dec 2023 01:22:52 +0000
asID: 17378
IP address blocks: 2607:fc38::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:23:61:f6:83:28:1b:df:6d:60:c5:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Sep 7 00:22:52 2023 GMT
Not After : Dec 6 01:22:52 2023 GMT
Subject: CN=b1c84bcb-4835-4d8d-92b4-85b2c129bd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0b:6d:0d:9a:30:69:1e:0f:18:eb:92:d1:cb:
00:98:49:1d:30:83:2e:5d:90:a5:29:a4:af:38:d9:
54:42:a3:c4:84:bd:80:62:e4:0c:40:6e:53:eb:34:
a7:3d:a0:4b:ea:79:40:6a:da:51:23:f6:c2:5f:27:
03:4a:33:33:fd:16:b6:40:e3:78:a0:b0:e7:08:42:
16:a1:21:83:6c:ea:94:b6:40:fc:c0:a5:5c:44:93:
2e:aa:d7:33:5e:12:18:f1:6f:33:2b:f1:8f:52:bd:
0b:96:85:6b:cc:03:26:61:24:c3:49:38:07:8a:2a:
0b:32:15:d8:12:f9:96:d9:aa:85:36:ac:1e:ac:6f:
1f:66:7d:64:9c:5a:9f:82:05:c7:90:db:9f:d4:67:
f5:70:01:36:fa:24:8c:f9:10:75:d6:28:ef:d3:48:
c8:d8:37:62:be:5f:33:d5:9f:55:ec:40:08:69:7f:
18:0c:3c:25:da:61:ae:6d:f7:b6:f2:9a:dc:01:12:
4a:2c:4a:5a:93:00:4f:19:c9:c2:b4:76:b2:44:5d:
93:54:fc:33:c5:60:ef:26:55:bc:80:7c:b7:06:0d:
70:1b:0f:47:6e:35:04:c6:16:68:70:92:c2:3c:cf:
cc:8f:cb:04:23:a0:11:bb:02:47:2b:fd:96:a2:16:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AC:2E:CA:44:D8:3E:74:4D:13:8E:84:11:DE:FC:09:19:A8:79:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8540a9be-a774-3a28-8d50-0114cc827a1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fc38::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:bb:d5:49:9b:3b:86:4c:31:15:ee:7b:9b:49:0a:ec:d4:8a:
45:db:33:46:f1:f6:aa:f1:2c:81:6e:2e:c2:d4:cf:5d:15:ab:
51:f3:e0:a7:87:a7:59:35:17:c8:fa:64:8c:97:d5:fd:c5:f6:
64:f7:82:47:75:e4:61:3b:f2:2f:80:bf:2b:5a:e9:2b:87:7c:
51:f0:d6:45:f7:de:b8:bf:51:a0:31:fb:28:a2:f0:f1:7d:72:
a5:cd:26:67:f6:eb:be:41:fc:ca:f6:61:2d:be:a3:ba:32:1a:
64:68:bf:71:8c:9e:79:19:dc:3f:d0:df:49:66:17:e4:35:60:
e8:3e:8c:3a:d7:f4:1b:8e:b4:bf:6f:7d:d4:2b:62:ea:d5:ff:
47:54:2b:81:79:14:08:4e:90:16:96:c7:28:bf:a7:75:b6:2a:
20:2c:97:49:74:7b:2b:86:f0:5a:60:be:f7:8c:b0:0a:ca:78:
8f:a3:d3:20:71:62:07:b7:b9:3b:b5:46:c1:2a:a5:ae:a0:d1:
67:68:35:1b:04:a4:bb:df:1c:99:9d:6c:fb:a3:84:b5:fb:18:
53:22:a9:fa:ac:7a:fa:43:52:df:04:48:42:88:db:36:60:3d:
d8:d7:aa:43:83:2c:e2:49:99:e1:49:0b:96:bf:f0:9d:d3:78:
35:9b:37:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:55 2024 by rpki-client on console-ams.rpki-client.org