Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/cd683768-21cc-33de-bf6c-2d73ad55fee3.roa
File: cd683768-21cc-33de-bf6c-2d73ad55fee3.roa (raw, json)
Hash identifier: 5QstnyVqiBIkZK+/gMQu5e71xSNs8jwtjZLgwKlNLp0=
Subject key identifier: 14:45:0C:36:6E:3B:00:08:41:4A:EA:BB:B1:C1:4B:5B:40:64:5D:97
Certificate issuer: /CN=1dc547da-42a0-43ba-8d2f-21375737b95b
Certificate serial: 010D0C9F43285844217EC43329F2452CF75FCC80
Authority key identifier: 3D:D1:56:24:51:80:75:49:07:1A:A3:C1:39:9B:01:4F:04:D1:CF:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/cd683768-21cc-33de-bf6c-2d73ad55fee3.roa
Signing time: Thu 07 Dec 2023 00:56:14 +0000
ROA not before: Thu 07 Dec 2023 00:56:14 +0000
ROA not after: Wed 06 Mar 2024 00:56:14 +0000
asID: 150698
IP address blocks: 2602:f9ca::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:21:7e:c4:33:29:f2:45:2c:f7:5f:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc547da-42a0-43ba-8d2f-21375737b95b
Validity
Not Before: Dec 7 00:56:14 2023 GMT
Not After : Mar 6 00:56:14 2024 GMT
Subject: CN=87755bdd-7f32-4728-9d81-cdb29a05856c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:63:38:e0:1c:c4:91:cd:e7:42:d6:6a:be:ec:
cd:79:e3:36:57:4a:98:e6:97:6d:dc:72:10:fb:02:
05:90:b7:e3:b0:fe:ad:d4:70:81:ae:9a:08:ef:20:
5b:7f:d1:bb:85:f3:4f:64:43:5a:f2:7c:da:63:24:
89:1e:b9:52:3d:3e:35:09:56:fc:41:c4:8e:80:a4:
7a:b4:39:7e:75:f3:31:ca:71:2e:fd:07:b6:aa:48:
da:50:44:e3:1a:65:37:98:09:06:b1:3e:62:51:8b:
ca:cf:74:86:78:b5:92:72:3d:3d:3f:61:25:8d:ae:
60:24:dc:b7:9a:90:77:9d:be:a0:31:2d:7a:dc:22:
49:17:c3:13:01:6a:7d:9e:bf:10:70:f1:ab:ef:d2:
a2:e5:7d:a8:c6:5d:52:e8:6b:a8:84:9d:ec:d0:a8:
cc:71:da:db:36:d2:f3:be:39:ee:fe:97:08:05:6c:
83:ed:34:a2:15:4d:86:30:45:2c:27:61:39:ac:12:
29:60:2f:13:b2:8a:7a:16:ef:74:6e:0d:31:62:ee:
40:56:2d:b5:41:98:07:2c:33:d1:d1:60:40:33:5b:
d7:49:9b:d8:4e:b4:2a:3a:ab:09:a9:a4:e1:8b:c6:
b8:55:17:ce:3b:0c:ed:c6:d1:12:23:b1:1a:7d:59:
61:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:45:0C:36:6E:3B:00:08:41:4A:EA:BB:B1:C1:4B:5B:40:64:5D:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/cd683768-21cc-33de-bf6c-2d73ad55fee3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.crl
X509v3 Authority Key Identifier:
keyid:3D:D1:56:24:51:80:75:49:07:1A:A3:C1:39:9B:01:4F:04:D1:CF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9ca::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:80:b6:21:0a:88:e6:db:64:e4:a6:c4:92:48:e6:b9:4f:1a:
51:dd:db:49:16:39:ff:84:60:2f:8f:f3:ac:40:10:5f:a2:5a:
b2:6d:3f:1a:c8:89:20:64:05:5b:73:ca:82:d9:4f:91:cb:8c:
c6:14:e8:c9:b7:91:6e:79:e2:e1:c9:75:54:ba:00:f3:51:25:
cc:37:43:fd:9f:af:9e:ed:a9:1d:04:94:b3:62:09:eb:39:69:
c9:08:dc:ec:ce:1c:71:43:a0:84:9d:b9:82:11:96:a5:f0:32:
37:a3:74:b5:0e:18:0d:de:77:7a:a6:bb:d0:1b:33:d7:05:19:
82:d7:fb:3f:92:d1:5f:f9:e1:37:40:54:5b:e1:46:ec:c1:66:
60:6b:e9:0a:53:ca:bb:cc:df:23:fc:17:16:1c:d7:6b:f0:95:
74:11:40:13:fb:a1:ce:c1:9a:5f:e6:71:f8:40:76:b9:28:c1:
1a:ee:bb:00:24:4b:a7:d9:dd:be:5f:dd:50:98:70:f1:6e:09:
12:fc:cc:19:9f:09:7f:66:b5:ab:f1:05:34:69:2a:2b:9b:6b:
e5:96:4b:89:f6:ed:e8:0a:91:24:77:6f:92:a8:fd:09:df:37:
12:df:c7:d6:2e:67:a7:fd:80:d4:5f:a5:ac:a4:ff:b6:59:9f:
a5:3e:46:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:14 2024 by rpki-client on console-ams.rpki-client.org