Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61b5866a-c878-399e-99a7-c0785f7fcaa8.roa
File: 61b5866a-c878-399e-99a7-c0785f7fcaa8.roa (raw, json)
Hash identifier: LhPpWKK/ZlA8/bo6+5DEoD02E0AdjJ3+fID5OKpPrDI=
Subject key identifier: 00:AC:B0:99:8C:F1:07:F4:20:C1:A8:4A:E0:F2:ED:B5:16:47:C3:1C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858388BF4AFB4599DF634AC40ED00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61b5866a-c878-399e-99a7-c0785f7fcaa8.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Thu 13 Apr 2023 04:00:00 +0000
asID: 213035
IP address blocks: 108.165.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:8b:f4:af:b4:59:9d:f6:34:ac:40:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Apr 13 04:00:00 2023 GMT
Subject: CN=7488ae8d-0c71-4e9d-920e-9c6e075d1c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4f:3d:cf:d1:fd:b1:97:86:75:68:9f:af:ee:
31:5e:b1:73:17:ee:e6:d9:e0:a5:8a:7d:65:8f:b7:
13:b4:d9:7d:13:6e:95:72:de:2d:00:0f:4d:38:be:
55:08:ee:79:2b:3e:ed:d0:04:07:08:cf:db:f3:a4:
c8:35:5f:d7:30:5b:f2:9c:c2:2d:c5:d1:88:de:c7:
02:e7:e7:a5:55:8e:4b:a3:43:f4:2b:2f:b3:ec:ed:
ab:d6:63:ca:2e:5d:fd:6d:15:fc:4b:60:ac:05:c3:
7a:2d:ac:13:15:42:20:74:0d:de:7d:b9:f1:5c:77:
b8:9c:c9:5b:52:4a:63:cc:0b:b3:9d:c4:bc:a4:e6:
49:19:7e:e4:e6:85:9b:a4:d1:9e:ba:10:0f:66:de:
b4:16:46:e6:db:69:aa:da:f4:09:fe:2a:3f:eb:03:
3a:96:74:c7:c3:5a:ba:3b:fc:c3:73:e7:cf:5e:0d:
3a:71:45:a6:d5:a3:d1:ad:c1:ba:d3:0b:a3:77:ca:
09:7c:83:ea:ae:19:bb:9e:7d:15:e8:07:1f:f2:1c:
76:c5:f6:63:89:44:0e:f8:bf:aa:58:49:7e:95:8e:
9b:99:58:49:76:69:c6:9c:b0:fc:17:f1:4a:a8:04:
03:77:6c:90:da:42:b4:d7:59:1c:4c:9a:01:c7:eb:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AC:B0:99:8C:F1:07:F4:20:C1:A8:4A:E0:F2:ED:B5:16:47:C3:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/61b5866a-c878-399e-99a7-c0785f7fcaa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:9f:b5:db:d4:69:bc:25:cf:c2:9c:12:b5:27:ef:35:c5:8c:
ab:a2:f9:6a:aa:f8:3b:a9:4f:81:93:21:09:66:bf:5a:5c:68:
50:9b:45:08:2e:26:67:78:03:53:e2:be:f6:5b:5e:82:90:1a:
02:05:b6:ac:ac:f1:23:4f:90:d0:04:32:66:ad:ae:18:84:89:
2f:67:88:f9:bc:01:7a:08:89:9e:12:d3:ce:8b:8d:7c:3d:db:
9d:b2:bb:38:26:f0:ba:8b:c2:96:0d:69:13:58:b7:65:de:aa:
8c:59:ca:83:2e:16:de:3a:36:29:64:b4:f4:68:6c:f0:0d:8b:
87:e4:64:9f:32:0b:85:ca:59:4c:f7:61:44:7f:6b:ff:f3:87:
54:2c:7a:7f:24:bb:15:ad:74:81:8e:35:c3:0f:d7:e8:36:ca:
3c:8d:f9:e2:dc:b4:c5:05:79:13:11:84:b1:88:d4:af:37:15:
6c:95:80:a2:64:0d:ad:b3:c1:97:f2:ca:09:e7:29:dc:ac:e6:
b2:91:f6:17:0c:9f:b2:8b:73:b4:0c:ec:62:f9:3f:78:d4:ee:
30:b5:cf:0b:41:c3:b4:06:39:df:61:42:5a:f0:fb:43:3c:0e:
77:be:9b:2e:91:04:7f:ee:13:25:b1:f4:d2:cf:fb:f8:06:b0:
c4:77:96:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:39 2023 by rpki-client on console-fra.rpki-client.org