Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/3f51436d-19c3-33a9-9992-ca7356833ecd.roa
File: 3f51436d-19c3-33a9-9992-ca7356833ecd.roa (raw, json)
Hash identifier: cKYxoEtHoiAE132aoIAP00tw3N0CwS3LKFtulq9VNI4=
Subject key identifier: 1A:6A:23:C0:74:4D:7D:52:3C:2D:92:58:82:15:2A:12:8C:32:77:78
Certificate issuer: /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial: 010D0C9F432858445ED3B8ECCB63F1922D0E97C0
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/3f51436d-19c3-33a9-9992-ca7356833ecd.roa
Signing time: Fri 29 Dec 2023 00:11:43 +0000
ROA not before: Fri 29 Dec 2023 00:11:43 +0000
ROA not after: Wed 27 Mar 2024 23:11:43 +0000
asID: 4186
IP address blocks: 2620:10f:b000::/48 maxlen: 48
2620:10f:b070::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:5e:d3:b8:ec:cb:63:f1:92:2d:0e:97:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
Validity
Not Before: Dec 29 00:11:43 2023 GMT
Not After : Mar 27 23:11:43 2024 GMT
Subject: CN=4eb14074-0925-43eb-bb51-7c314e3af149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:67:f0:e8:d1:2c:2c:aa:2e:9a:65:6c:d9:ef:
91:75:45:5a:92:fa:66:69:45:38:23:df:1f:82:b7:
1d:84:7b:49:5e:13:38:09:9e:f9:12:ea:0d:48:63:
52:61:d2:ef:0e:99:9b:e7:f4:a2:36:57:b9:0e:5c:
a5:65:f6:8f:88:e8:3e:e9:48:ee:fe:9c:dc:30:3f:
e5:3a:0f:fe:53:c5:11:33:3a:83:f0:5a:61:26:b4:
eb:fd:85:4c:9a:47:78:f8:6c:23:fe:0b:81:72:83:
4c:58:72:d0:4d:9f:9a:72:6e:08:5a:de:cf:88:ea:
fb:82:b7:94:55:1d:c0:ef:b6:9c:04:3b:26:be:4b:
a4:e8:32:51:5c:31:9e:b8:07:c8:eb:73:fc:5b:ab:
63:6d:f3:e3:fb:47:76:17:7b:17:7f:9a:98:c6:3a:
d0:00:96:e7:8e:2c:6b:01:67:e6:a3:ef:75:64:8e:
80:96:77:e9:24:de:79:bb:6c:44:e6:f0:2a:ea:02:
f7:fd:a8:c9:b8:d4:4b:08:64:be:4a:8a:72:b5:ce:
69:98:68:e6:47:57:da:90:d5:6c:61:ab:30:c8:83:
b7:b0:9f:a5:5f:ae:86:d7:66:b9:a9:7f:38:21:ae:
a2:58:e8:3b:85:b9:fe:1a:1c:e4:d2:fb:fe:91:78:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6A:23:C0:74:4D:7D:52:3C:2D:92:58:82:15:2A:12:8C:32:77:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/3f51436d-19c3-33a9-9992-ca7356833ecd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
X509v3 Authority Key Identifier:
keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10f:b000::/48
2620:10f:b070::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:0b:1b:d4:bc:aa:6e:30:c9:77:48:a2:fb:22:7a:7e:ed:b5:
36:5c:60:87:5c:a4:64:c8:96:a4:a6:a6:dd:b6:fc:7a:b9:41:
3d:ce:ca:4f:6e:ca:ad:84:8c:b3:8b:d3:98:c3:be:02:3b:ae:
cb:d9:54:b7:36:fa:5f:f7:09:d5:49:36:49:dd:6b:bd:9f:bd:
a0:a5:dd:8f:45:eb:99:03:bc:2f:7a:9f:ca:91:80:8a:19:c7:
45:f0:ad:27:aa:94:93:8d:ec:ec:53:98:7e:5c:a6:f6:8c:59:
87:2b:1c:87:92:6d:68:f7:9e:46:31:35:52:5e:88:df:4d:14:
d1:ee:da:2d:b8:79:49:01:40:d5:a8:da:3b:4b:18:f8:74:8f:
e6:cb:0b:ad:05:a5:5b:cc:87:13:e4:f2:91:21:da:f4:bc:dd:
55:6f:48:d3:0c:e5:5c:42:a8:33:ab:a2:ad:4a:87:b7:5a:d3:
a1:c0:70:d6:64:fa:cf:b8:fa:5b:50:a3:65:68:29:08:b4:06:
4d:58:c4:17:de:b0:ae:ac:69:d5:32:a1:14:e3:74:74:d2:33:
c6:b3:bd:7e:fc:81:c9:5b:5e:23:94:59:50:d0:3e:c4:5e:24:
3f:6d:dc:17:56:9a:5a:41:fc:f5:ca:a9:4e:44:06:2d:df:a6:
32:6b:12:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org