Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/88475e2e-1401-3cd8-9205-26a17dc97481.roa
File: 88475e2e-1401-3cd8-9205-26a17dc97481.roa (raw, json)
Hash identifier: qXr7koa8k7J+234OLIIhpRFW5GssE3mcyr/rkBHPwUo=
Subject key identifier: D7:58:B9:5B:1A:81:CC:89:36:C0:BC:56:2F:E2:AD:88:64:EE:A9:D1
Certificate issuer: /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial: 010D0C9F43285839866D123E50B6A3844BD31F00
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/88475e2e-1401-3cd8-9205-26a17dc97481.roa
Signing time: Thu 08 Apr 2021 04:00:00 +0000
ROA not before: Thu 08 Apr 2021 04:00:00 +0000
ROA not after: Tue 12 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 2605:dd40:8ff0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:86:6d:12:3e:50:b6:a3:84:4b:d3:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
Validity
Not Before: Apr 8 04:00:00 2021 GMT
Not After : Jul 12 04:00:00 2022 GMT
Subject: CN=60ea8e16-13bc-4804-bcd4-5ae2bdf15ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:4b:2e:30:71:94:fb:fa:8e:b2:d7:91:f4:
4e:a8:ed:2d:a9:dd:2d:c0:37:2f:04:1e:56:67:cf:
c5:11:b8:11:7a:97:db:fd:26:c3:06:d6:f7:32:73:
e6:06:17:01:39:02:44:4f:6b:51:2c:67:7e:89:75:
1e:01:e8:6e:cf:58:46:57:2f:0c:93:03:b2:ba:27:
ea:f8:64:eb:56:3b:02:12:0a:8f:2a:01:c9:0b:0c:
16:dd:84:03:01:fd:96:e8:38:50:2e:86:27:be:f8:
fa:50:8c:65:d0:30:a0:b6:6d:8d:6a:f8:a6:90:01:
f2:73:80:0b:80:3c:72:4b:7b:63:b1:67:f6:08:63:
f6:0c:4b:a6:8a:22:ed:fd:de:56:e9:5b:66:00:be:
f3:dd:e6:38:4a:01:f8:f0:87:5b:49:ab:75:ea:94:
84:06:f0:a5:d3:be:30:ce:ee:67:34:80:ab:44:e1:
5e:cd:db:00:95:57:69:44:50:ab:3e:5c:8b:e9:af:
eb:cd:5b:6a:e8:f0:ca:a2:33:22:52:82:0e:87:25:
a1:a1:25:06:d9:43:c7:1c:ff:c7:ee:82:47:e1:36:
d2:9b:d4:a4:d3:f2:98:52:03:ee:fe:80:cc:7e:63:
d0:99:2d:23:7c:be:e8:b7:47:6b:61:ae:8c:e0:6c:
72:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:58:B9:5B:1A:81:CC:89:36:C0:BC:56:2F:E2:AD:88:64:EE:A9:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/88475e2e-1401-3cd8-9205-26a17dc97481.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
X509v3 Authority Key Identifier:
keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:dd40:8ff0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:9b:33:c0:e2:94:28:55:b0:48:8b:31:f0:3e:12:2e:0c:6e:
9a:a8:d5:d9:92:91:da:a4:05:6c:7b:d7:0e:54:09:6e:c7:f1:
40:cf:fd:bd:a0:c6:d3:d5:6b:5e:fb:ab:6e:05:e7:ba:f9:63:
f6:dd:79:23:0b:50:52:eb:69:fc:0b:ee:b8:61:01:a2:17:d4:
be:dc:30:ae:9d:1d:fe:9c:2d:8f:dc:16:f7:64:88:be:10:60:
68:84:99:d9:e7:7e:c3:67:5d:7c:b3:e1:4b:fd:71:9c:e5:a7:
44:6d:d8:30:6b:83:5c:9f:90:99:23:d5:d6:b9:85:93:dd:d0:
c3:01:d9:3f:fd:43:92:68:22:38:47:fa:bf:bc:38:6c:a0:90:
4e:28:74:04:64:51:b8:bd:e0:e3:86:09:2d:eb:64:63:96:f0:
dc:2a:81:32:2b:36:df:ae:82:f6:7b:d5:1b:5b:c2:b9:16:e1:
66:1b:95:79:e3:c4:88:a7:73:65:a7:59:9f:c1:9e:c9:4f:56:
c1:ed:0b:3b:f4:2a:d0:b6:21:da:3d:3f:2d:1e:aa:91:e2:0d:
42:f5:f1:a1:07:9b:8e:62:97:ff:6e:87:5f:aa:48:09:3d:35:
59:be:fd:7e:67:be:c7:84:3a:d8:ef:7f:e7:22:87:86:67:65:
40:e4:44:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:14 2024 by rpki-client on console-ams.rpki-client.org