Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d3031499-1f98-3fb3-aff5-2900359e305b.roa
File: d3031499-1f98-3fb3-aff5-2900359e305b.roa (raw, json)
Hash identifier: pNZMHlXLUWDooEocwJRzaT92a+AkzLrvU25uJ9SkFHA=
Subject key identifier: F9:B0:37:27:28:D7:E2:B2:4D:54:60:5D:A7:57:D7:6C:96:32:5A:EE
Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial: 010D0C9F432858441C52DDA5E2F53D7A6A0F6500
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d3031499-1f98-3fb3-aff5-2900359e305b.roa
Signing time: Tue 05 Dec 2023 04:28:44 +0000
ROA not before: Tue 05 Dec 2023 04:28:44 +0000
ROA not after: Mon 04 Mar 2024 04:28:44 +0000
asID: 203888
IP address blocks: 2602:f9df:160::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1c:52:dd:a5:e2:f5:3d:7a:6a:0f:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Validity
Not Before: Dec 5 04:28:44 2023 GMT
Not After : Mar 4 04:28:44 2024 GMT
Subject: CN=88cb71d6-0e71-4d7e-b31b-31739a5c49c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:22:39:5b:bc:dd:db:81:ff:8c:1e:ba:ff:77:
24:66:3f:4a:5a:ed:b0:dc:01:ea:a6:e6:99:92:ff:
ed:21:a7:45:ab:dd:be:7b:fc:38:5a:6b:2a:f0:8e:
df:a7:99:b9:a5:ce:2d:a9:58:af:bb:5e:06:27:4f:
a2:6a:88:b0:46:b9:99:e5:49:4b:c5:02:2f:5c:8e:
22:9e:03:f9:41:c3:9b:5f:5c:3d:4f:6e:55:67:98:
ba:c6:c8:9b:91:4e:03:02:8e:a4:f3:4b:b3:ed:dd:
53:88:4f:e5:a4:27:c7:7b:67:36:87:a1:7f:f0:94:
91:b8:d0:aa:c4:b1:ec:ba:27:1b:95:d4:d1:2e:10:
10:b5:27:4c:bc:3c:19:24:22:4e:46:9c:97:e7:da:
60:e6:b4:cd:71:c0:f6:99:88:f0:eb:ac:77:88:b7:
6c:69:31:23:1c:1d:06:05:54:86:7d:db:ba:d5:f1:
d3:82:e4:d7:87:a4:f8:6a:08:9b:d9:13:e9:76:49:
4f:8f:b1:88:f1:5a:f7:98:e0:d3:bb:bf:7d:55:01:
c1:c9:d4:5e:11:e3:1f:3a:11:d7:fb:08:e4:e7:ee:
cd:0c:e9:5e:09:7f:43:dd:46:3e:9d:9e:80:42:26:
b5:cf:85:51:39:cd:b2:26:11:de:40:ea:b5:12:dd:
4f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B0:37:27:28:D7:E2:B2:4D:54:60:5D:A7:57:D7:6C:96:32:5A:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d3031499-1f98-3fb3-aff5-2900359e305b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
X509v3 Authority Key Identifier:
keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9df:160::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:9c:94:2b:96:6b:5d:c5:be:0d:9e:a2:38:8e:a0:88:77:70:
ad:f3:89:1e:ea:ad:4e:e2:74:f0:10:39:a9:7a:38:cf:5b:86:
ff:ac:93:99:97:8e:f1:e4:38:db:ab:7e:3c:9c:89:cc:b3:41:
b4:d3:59:67:dc:39:a1:5f:15:91:b6:d4:9f:de:0d:b3:06:8c:
cb:6a:a2:c8:29:06:3d:56:24:5a:96:03:9e:4d:dc:31:e6:1d:
f1:65:80:af:4b:e8:e2:6b:f7:23:10:0c:cb:d6:46:73:cb:c4:
7b:74:ae:3d:41:d9:ad:39:61:0e:89:81:f8:2e:40:86:21:1b:
00:bb:e3:92:b9:40:92:6c:66:e5:ab:5b:47:a1:b5:d7:6f:cd:
31:bd:b9:35:88:37:8f:10:83:c1:73:1c:a3:ec:51:f3:c0:11:
51:94:e6:c1:75:7c:86:ff:b3:62:ee:dd:a4:cb:50:22:dc:23:
a2:cf:a7:c5:4f:77:c5:3e:46:bb:cf:7e:3b:b5:2a:a3:3d:17:
2d:5c:e2:61:6e:51:b9:39:10:8d:76:f9:39:1d:9a:23:9e:be:
d4:da:4a:3c:a9:0b:28:d9:23:a0:07:dc:cb:e0:fb:cd:a8:9c:
51:13:ac:27:e7:cc:d5:94:66:16:fe:a3:a1:dd:77:0f:32:9d:
b0:a3:db:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org