Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/fa0a44a8-17fc-3f35-81a6-34137c747e0d.roa
File: fa0a44a8-17fc-3f35-81a6-34137c747e0d.roa (raw, json)
Hash identifier: NeNAHc4661DT0tIr/ekxLxmIoI3ctLSZVHmkAPwnivU=
Subject key identifier: 7A:53:68:98:BF:88:03:BF:89:63:66:32:B7:09:D8:5D:FA:76:BF:9A
Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial: 010D0C9F43285840596D58E9ECFA33D373C44740
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/fa0a44a8-17fc-3f35-81a6-34137c747e0d.roa
Signing time: Fri 23 Dec 2022 12:00:00 +0000
ROA not before: Fri 23 Dec 2022 12:00:00 +0000
ROA not after: Sun 24 Dec 2023 05:00:00 +0000
asID: 54681
IP address blocks: 2602:fd50:1040::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:59:6d:58:e9:ec:fa:33:d3:73:c4:47:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Validity
Not Before: Dec 23 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2023 GMT
Subject: CN=9fb58f21-1240-4ca8-98a1-7a9a5f8af52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7c:48:3e:48:b1:41:11:59:6f:07:70:84:0d:
bd:6b:58:2a:27:df:bc:79:07:f5:09:03:04:ab:5d:
c9:40:0b:76:2f:5e:c0:8e:9b:52:b5:82:18:9d:fb:
0b:f9:0c:6e:7f:16:69:8c:57:c6:71:3a:13:f0:25:
76:2b:b7:f7:6c:cf:07:62:ff:1d:1f:51:bc:49:49:
b1:27:81:e9:5b:4c:7f:14:aa:48:bf:a5:eb:a2:2c:
8f:5d:c9:c0:24:c6:6e:f4:52:89:1e:cd:80:73:d2:
65:9c:f5:09:ea:a1:0f:5c:eb:e8:48:77:e9:14:e8:
33:de:f4:3a:2d:8d:f2:dc:1e:eb:2f:c5:3f:e2:5f:
cf:07:87:d9:62:6b:86:7e:d7:e8:da:a6:27:a5:da:
72:21:3f:e7:c8:74:0c:9a:1a:51:5c:0a:0e:a0:5f:
a2:0e:72:a8:d3:94:b4:6c:f7:9c:ed:54:4a:f6:52:
57:0d:8c:75:6a:9e:64:38:a3:32:33:ce:bb:07:d2:
44:ca:0d:1b:c4:20:ce:4e:a0:6f:96:44:4d:b1:e9:
bf:53:ea:bd:75:a6:d9:c7:a1:10:1c:12:fd:98:89:
f6:88:08:b7:be:77:0d:92:6a:f2:e3:21:b7:29:d6:
63:ef:b8:5d:19:28:b3:82:c4:e0:fe:38:78:53:81:
fe:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:53:68:98:BF:88:03:BF:89:63:66:32:B7:09:D8:5D:FA:76:BF:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/fa0a44a8-17fc-3f35-81a6-34137c747e0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
X509v3 Authority Key Identifier:
keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd50:1040::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:51:f4:86:07:eb:1d:55:63:f7:cb:e6:fd:16:08:d3:30:b6:
af:21:07:89:0e:dc:25:88:2f:37:0d:1b:48:e2:38:80:cc:0a:
91:2c:2f:a2:93:cf:9d:2f:b8:e8:3b:9e:de:f5:d4:85:a2:67:
db:cf:98:58:c6:f9:e8:14:24:e9:e6:65:50:5b:a7:06:4b:b7:
51:c2:55:34:94:44:24:50:2a:08:ae:92:48:4a:78:8f:6c:71:
d5:d2:71:6c:98:9f:29:f6:af:bb:5b:f1:6a:22:f0:1c:23:4f:
2d:f8:dd:1a:5b:b3:c7:f9:93:f6:d4:c5:fc:46:fd:af:42:b3:
5d:06:e6:0b:aa:0e:aa:a0:e8:16:c6:29:6a:49:26:fe:09:b2:
49:84:4b:a8:dd:b3:89:c1:ed:7a:cb:bb:ba:c3:bb:78:2e:82:
db:9a:95:2a:a4:3d:28:4d:a5:7b:c1:37:1e:79:b0:49:6d:b8:
c0:c2:b4:bc:85:c0:df:b2:82:a8:e7:3f:7d:c8:d4:7a:2e:e8:
af:a6:89:61:67:c0:10:86:ea:fb:1b:14:cb:19:f8:61:56:d6:
d5:b6:b2:f7:b1:32:57:1b:fe:bf:12:38:2b:93:02:9f:a3:fc:
70:7c:05:2f:04:4b:10:bb:cc:cc:66:ca:07:8d:75:36:b5:97:
b5:11:dc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 24 05:33:59 2023 by rpki-client on console-fra.rpki-client.org