Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/fc5dc43e-71d4-33ea-9aff-78baf371aa1f.roa
File: fc5dc43e-71d4-33ea-9aff-78baf371aa1f.roa (raw, json)
Hash identifier: 1IB3bx8vD0iNtDpIZG7QswmQ5Yg2MvjlHUgYTqTQUGA=
Subject key identifier: 38:92:1A:44:D9:A1:40:1D:59:4E:B9:87:E9:F8:DA:62:C7:1E:71:DE
Certificate issuer: /CN=2c2fd90f-0e05-4f71-b5cb-8a9269f851b3
Certificate serial: 010D0C9F4328583D5855EF8E9DDE86369A02A400
Authority key identifier: B0:C8:F7:D4:D0:7F:E8:C8:D3:44:83:DB:53:38:B2:65:B1:85:48:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/fc5dc43e-71d4-33ea-9aff-78baf371aa1f.roa
Signing time: Thu 24 Mar 2022 04:00:00 +0000
ROA not before: Thu 24 Mar 2022 04:00:00 +0000
ROA not after: Fri 24 Mar 2023 04:00:00 +0000
asID: 10310
IP address blocks: 2001:4998:f00e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:58:55:ef:8e:9d:de:86:36:9a:02:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c2fd90f-0e05-4f71-b5cb-8a9269f851b3
Validity
Not Before: Mar 24 04:00:00 2022 GMT
Not After : Mar 24 04:00:00 2023 GMT
Subject: CN=c0b5a739-72f3-4482-86f7-0b20ec114bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4a:cf:e0:44:99:30:f9:c7:17:9f:14:7f:16:
62:f1:28:21:ad:59:fa:0f:8f:f0:8d:61:b4:89:23:
a3:c9:35:c3:95:33:49:bc:fe:55:47:29:dc:f5:0b:
0e:8e:15:ab:d5:86:45:46:5c:af:f6:eb:64:b1:9a:
87:ee:0a:2d:b7:98:6b:a7:a5:cc:0f:66:10:ef:2d:
23:8a:f7:c0:a1:39:1f:c3:fd:2c:d5:de:e4:37:ec:
e5:69:72:cf:f6:c7:25:13:80:07:c9:ae:e9:6c:71:
77:2a:47:e9:1a:06:38:70:14:94:bd:1e:9e:04:bf:
1a:67:64:7c:24:56:a9:f5:73:a6:26:c9:cd:fd:d3:
5d:42:cc:91:c6:b5:4f:96:97:31:4b:85:8e:18:6d:
79:91:8c:c3:f3:34:ed:d2:92:f8:8b:e8:e1:71:29:
31:e7:97:89:18:6b:b5:8d:1f:4f:a3:1e:4b:5e:b8:
dd:c1:a7:c1:a4:96:ce:89:6a:6b:79:ea:1c:6e:43:
24:5d:94:2e:fc:3a:4c:f6:7b:d1:37:a0:c6:fe:f7:
7b:97:28:79:71:a3:bd:c3:6d:69:7a:3e:db:c6:3b:
61:5b:2c:e4:2e:0e:d5:d0:83:37:cd:43:f8:e4:b4:
f0:4c:11:0d:67:5c:aa:11:a5:a5:4b:e6:a0:63:4d:
e4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:92:1A:44:D9:A1:40:1D:59:4E:B9:87:E9:F8:DA:62:C7:1E:71:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/fc5dc43e-71d4-33ea-9aff-78baf371aa1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3.crl
X509v3 Authority Key Identifier:
keyid:B0:C8:F7:D4:D0:7F:E8:C8:D3:44:83:DB:53:38:B2:65:B1:85:48:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2c2fd90f-0e05-4f71-b5cb-8a9269f851b3.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4998:f00e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:a5:7e:20:dd:74:85:49:3c:f6:c2:21:05:78:23:4f:6f:2f:
c6:76:d2:15:04:40:f2:58:5b:74:e5:85:75:e1:59:20:8d:d3:
d2:1e:fe:92:38:a4:e2:06:42:55:de:cd:a9:f8:bc:37:71:7d:
ee:3f:48:66:00:a9:83:4c:c8:ac:6a:44:9c:d5:c8:72:fb:96:
00:78:2a:29:f6:cc:62:19:66:d1:97:16:3b:e4:0d:11:b7:21:
8a:2f:d8:7b:d1:78:49:08:72:68:04:02:81:7f:3c:ff:6c:ec:
6c:0e:04:21:65:c3:2e:4d:6a:de:5d:c6:9c:0f:7a:c5:4f:4a:
93:df:48:7c:0a:03:57:ac:d3:07:5e:08:95:68:71:41:3b:b3:
c7:a0:80:b2:c1:a5:7b:5e:cb:3d:c6:18:ef:de:05:b5:21:c7:
86:43:33:08:c3:10:20:19:df:09:f6:ef:d0:ff:e8:c0:e8:73:
e1:b7:76:d9:d5:40:00:23:88:48:31:65:80:45:15:52:9d:75:
6c:be:4c:78:84:76:a1:d9:4a:ea:00:3a:10:0e:17:48:a8:5e:
54:92:12:74:36:fa:39:fa:0c:22:4b:ab:2b:68:c9:33:b4:06:
3e:93:32:4b:71:bf:5c:89:06:73:fd:00:32:8a:10:e4:22:28:
a7:5b:82:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:40 2024 by rpki-client on console-fra.rpki-client.org