Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/a3c58bbb-ad68-392f-a560-ceb6d70bac43.roa
File: a3c58bbb-ad68-392f-a560-ceb6d70bac43.roa (raw, json)
Hash identifier: 7Na4GjLaPebMaXruDu1serI4kZRTbcw5nJ3zKMSGFsg=
Subject key identifier: 23:BA:0D:9B:B0:F7:47:6A:D1:4E:79:CB:D4:68:59:65:DC:6B:6D:08
Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial: 010D0C9F43285844AC1B288F58BCDA27F3709500
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/a3c58bbb-ad68-392f-a560-ceb6d70bac43.roa
Signing time: Thu 25 Jan 2024 16:32:54 +0000
ROA not before: Thu 25 Jan 2024 16:32:54 +0000
ROA not after: Wed 24 Apr 2024 15:32:54 +0000
asID: 203888
IP address blocks: 2602:f9df:600::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:ac:1b:28:8f:58:bc:da:27:f3:70:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Validity
Not Before: Jan 25 16:32:54 2024 GMT
Not After : Apr 24 15:32:54 2024 GMT
Subject: CN=638c3171-e8d7-4eb5-a718-b47d7572f00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:58:ff:cf:d7:ab:e2:44:6b:f5:c7:b9:96:cd:
6f:e7:f2:6c:5c:2d:b6:f5:04:af:4e:2b:26:80:90:
45:dd:a5:ce:95:cf:12:9c:b4:34:86:db:12:3f:87:
06:a0:2b:6b:4c:e9:98:04:84:00:db:de:cb:28:04:
98:8b:e7:ea:06:95:a3:47:cc:3e:d7:ae:d9:15:01:
a9:a8:00:bf:d9:bc:83:51:72:ed:fa:2c:51:b2:32:
3c:ed:b2:43:bc:c7:67:cc:e0:86:b1:21:d4:b6:af:
f2:ce:48:8a:a9:f6:a9:c8:6f:e0:c4:3d:45:10:b8:
25:17:4b:9b:4d:3a:b9:f3:da:32:e4:00:5e:3d:82:
fe:9c:5b:f6:40:2f:ad:60:a9:fb:a9:1b:b0:30:ad:
c4:07:17:90:03:ad:19:02:9b:08:d0:5e:e2:b5:7a:
00:13:f8:e2:06:21:7b:ea:fa:76:6f:a1:92:7b:25:
7e:60:23:17:06:a5:b5:fe:4a:08:68:60:5e:33:f6:
34:90:67:ae:8f:96:91:26:35:0a:7d:ab:0f:68:e0:
24:de:bb:f7:dd:30:90:e3:6b:5c:fc:0e:e0:2b:53:
68:be:3c:02:95:c1:82:d9:1e:2c:33:a2:fe:b3:d8:
3d:2a:76:80:91:73:eb:01:33:b8:9f:2b:54:29:fb:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BA:0D:9B:B0:F7:47:6A:D1:4E:79:CB:D4:68:59:65:DC:6B:6D:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/a3c58bbb-ad68-392f-a560-ceb6d70bac43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
X509v3 Authority Key Identifier:
keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9df:600::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:b0:2b:fc:6f:66:99:6f:32:28:09:ee:05:8a:e9:ee:32:04:
d5:63:e8:4b:ad:56:14:e2:4c:bd:3f:8c:5a:58:29:b9:ed:db:
20:2e:c1:db:ff:5f:3a:97:c4:1e:9a:30:68:97:80:1a:ac:f1:
4d:74:88:55:e4:10:0e:b1:f7:86:bf:be:84:1d:cb:bc:86:f1:
5c:19:59:f1:e4:8f:84:4d:fb:c1:75:53:d1:eb:4d:0c:07:e2:
51:2b:ee:9b:28:7c:c8:81:52:23:c7:ba:ca:89:1a:b1:51:e0:
0a:01:00:2f:fc:95:60:f8:86:d1:fa:31:f4:da:82:f0:32:32:
5f:11:a4:e3:99:14:60:e9:7f:a6:27:2a:16:d8:b8:5c:da:c0:
70:ea:99:15:3c:6e:91:eb:ac:e3:d9:4d:1d:f2:af:41:83:b0:
8c:cb:bf:39:2c:f0:2f:9c:56:97:1f:ed:c7:8b:75:0f:de:e8:
9f:26:dc:7f:76:2d:be:ea:24:2e:26:db:d3:be:b2:7b:ff:1a:
39:20:97:e8:11:1c:a6:1b:ac:3b:f9:05:b2:13:52:cb:c0:90:
2f:b6:5c:8f:e5:85:9a:0e:fd:b3:b9:21:7c:ac:1e:c8:18:40:
14:ef:3f:69:13:10:69:1e:ff:9d:49:ac:9c:31:08:38:9e:51:
e6:1d:9e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org