Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/ca8023f5-ca97-3380-96b0-0a7e302e0149.roa
File: ca8023f5-ca97-3380-96b0-0a7e302e0149.roa (raw, json)
Hash identifier: T/YTPFWCjZbnfORKXOhznSpqmATA/NXW3WcQ47uYyqo=
Subject key identifier: BD:06:F3:0B:A1:A6:2E:C8:DF:CA:97:DF:35:84:0B:25:D8:32:B2:55
Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial: 010D0C9F432858441C530AFAA5301C6DC0EA8880
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/ca8023f5-ca97-3380-96b0-0a7e302e0149.roa
Signing time: Tue 05 Dec 2023 04:29:06 +0000
ROA not before: Tue 05 Dec 2023 04:29:06 +0000
ROA not after: Mon 04 Mar 2024 04:29:06 +0000
asID: 203888
IP address blocks: 2602:f9df:300::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1c:53:0a:fa:a5:30:1c:6d:c0:ea:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Validity
Not Before: Dec 5 04:29:06 2023 GMT
Not After : Mar 4 04:29:06 2024 GMT
Subject: CN=a9fd6996-8cba-44a7-bbef-d67db00e2066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:25:8e:bd:54:07:e8:fa:61:f4:aa:f6:a4:
d4:ea:a4:fa:27:0a:e0:40:f1:9f:8d:57:51:b5:f0:
0e:8b:fa:97:9b:82:08:fa:73:7f:36:57:17:5a:e2:
13:98:52:72:0a:57:a4:bd:5e:50:da:cc:54:4d:03:
0a:70:dd:13:38:fa:9c:b7:b2:10:9f:88:74:39:20:
64:81:73:6b:f2:ac:7e:0d:54:3c:07:79:ad:89:fd:
71:41:7d:47:9e:0e:e6:21:02:a3:ee:1e:e8:d7:25:
2f:cc:9d:2b:a8:e5:22:4a:71:f0:43:6c:8b:d7:dd:
44:e8:8e:d1:8e:e9:f1:9b:dd:40:5a:0c:52:d2:8d:
8a:42:81:cb:e0:a5:c9:50:cf:2f:5d:66:61:87:37:
7a:eb:ff:51:47:72:8c:b2:ba:e3:bb:15:dc:95:3d:
27:f2:57:d6:b9:77:4c:17:ff:97:a7:17:fe:77:23:
68:1c:6a:8a:6f:76:aa:55:e8:30:50:fa:73:66:6d:
b3:0e:29:ce:92:b5:6d:6b:eb:6b:e5:cd:5b:e0:55:
51:f7:1f:a2:94:82:24:2c:aa:5c:18:e1:38:c8:1d:
57:e3:89:56:14:6c:5f:26:e8:c0:b4:ba:65:9b:fe:
56:1e:9e:14:0f:be:7e:75:33:a1:b9:69:34:8b:97:
e8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:06:F3:0B:A1:A6:2E:C8:DF:CA:97:DF:35:84:0B:25:D8:32:B2:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/ca8023f5-ca97-3380-96b0-0a7e302e0149.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
X509v3 Authority Key Identifier:
keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9df:300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:49:e1:be:a6:8d:bc:7b:82:8c:7b:d1:ef:c8:63:3b:dc:ec:
56:0f:f4:b0:ce:8b:84:33:7e:0f:bd:af:26:62:8f:38:65:24:
0c:02:0e:ba:5d:32:16:7e:a2:35:47:9c:4d:2d:53:40:fa:4f:
d2:2c:8d:1c:ce:0e:01:42:fa:88:83:f3:3c:cb:8a:bd:d1:da:
8f:82:3f:99:9a:54:1f:dd:c3:a0:c8:1e:b7:ef:e1:a6:fc:ed:
3f:3a:c2:91:cc:7f:73:42:b5:25:eb:55:8d:bc:bc:42:2e:e4:
43:a7:fa:c4:9d:02:93:41:29:9e:d8:de:dd:ca:79:9c:40:91:
f5:ab:39:b0:37:27:9f:34:32:5f:eb:64:fb:ab:7c:25:71:92:
2a:f4:22:db:8c:9f:6c:c9:32:21:e3:71:f9:85:73:14:77:d2:
9f:06:0e:60:c5:ff:f9:91:ab:7d:8a:23:9b:a0:59:5c:52:1a:
72:44:a7:63:7f:a5:dd:06:f2:e0:1d:e0:69:71:64:81:ae:b9:
12:fd:5d:7c:81:93:90:8a:40:f2:76:56:f5:50:a5:7c:b4:55:
6a:e9:f1:e4:ad:68:2b:8d:ad:60:98:1d:ad:da:90:75:0f:eb:
0a:0d:d6:e7:38:19:21:b5:61:46:81:61:f3:9b:f8:dc:a6:41:
46:a1:21:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org