Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f86ae20-283f-3040-bf36-fd0255fd0dcc.roa
File: 6f86ae20-283f-3040-bf36-fd0255fd0dcc.roa (raw, json)
Hash identifier: 838ukwGbtkng6FHlPN+QOIgswIHq+e7DU9K6hXSZtsQ=
Subject key identifier: E7:88:D1:02:C4:03:6F:C9:F5:52:28:C8:EB:22:3F:FF:E7:1F:87:0C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328576D51CC73C042CFC173773386EF
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f86ae20-283f-3040-bf36-fd0255fd0dcc.roa
Signing time: Wed 22 Jul 2020 15:45:32 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Tue 25 Oct 2022 04:00:00 +0000
asID: 22773
IP address blocks: 108.165.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:77:33:86:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Oct 25 04:00:00 2022 GMT
Subject: CN=fa56bd52-ac1c-4a5b-8a83-31615204b42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:56:1d:a9:92:8c:eb:50:39:06:f3:4d:b9:
ba:af:0d:38:b9:ff:ae:a2:e7:73:af:c3:77:c6:5c:
e0:f5:96:d6:a0:9b:ce:2a:af:3e:d6:c1:1a:26:3f:
2d:30:73:f0:4f:2f:ad:9a:94:4c:92:04:cf:20:c9:
57:09:45:10:33:5c:29:42:f9:73:1a:5b:9c:fc:e7:
50:ae:fa:15:f9:11:e0:1b:4f:20:e5:1f:84:08:a9:
36:e7:b7:08:95:70:3e:ff:d7:8e:cc:37:89:53:ba:
5a:db:e1:0c:55:f2:ba:63:df:c1:e4:48:f7:c8:47:
95:a6:36:97:88:23:16:b1:ec:05:0a:34:31:19:91:
8a:e4:66:93:77:76:a8:18:7e:78:48:91:94:c7:1e:
17:b4:ff:d3:b7:3f:12:ec:a0:9f:ea:91:a5:28:ce:
28:00:53:6a:c6:da:3d:20:d2:59:45:7d:f3:6d:e1:
a5:36:02:6b:4d:17:b4:d3:c8:7a:44:4b:53:ca:f6:
4b:1c:28:8b:83:e0:a7:e6:40:59:a9:5e:88:e5:88:
f7:28:19:1e:31:45:28:be:f8:c3:0d:a5:40:0d:d2:
1b:07:f3:96:ad:27:84:80:25:f8:24:e1:cd:fc:90:
be:2f:22:8d:05:a3:09:1f:a9:5f:d3:aa:ed:a5:60:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:88:D1:02:C4:03:6F:C9:F5:52:28:C8:EB:22:3F:FF:E7:1F:87:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f86ae20-283f-3040-bf36-fd0255fd0dcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:ab:3c:e0:d9:e3:26:f0:3d:1a:b0:1f:30:cf:17:b4:24:18:
41:ff:5e:99:87:ac:67:2a:03:4e:48:32:d2:fa:5b:c5:6c:3b:
6a:d7:f0:b6:e6:fc:2a:a3:5d:10:a9:da:08:44:d0:a2:ae:eb:
e3:48:d7:a9:4a:29:00:69:6c:ca:37:21:58:9e:2a:9e:2f:d4:
eb:f0:2c:78:f1:82:87:e8:d9:b3:31:21:1e:35:f3:e6:de:65:
bf:47:ec:d5:01:58:f2:2b:5d:14:9c:b5:d3:6c:f7:b8:3e:e4:
a8:c6:40:85:6d:bf:d7:4a:38:6e:c8:82:88:46:3d:14:d5:07:
c1:44:4f:4d:c7:5c:d7:63:cf:05:2b:dd:e9:af:1c:ee:a2:0b:
75:79:d3:e5:2d:fd:23:34:ca:89:2e:aa:e2:46:55:32:8c:f4:
ea:65:f8:60:6c:b6:56:4f:c0:93:43:07:6c:4f:67:72:e2:16:
1b:8e:cc:83:5b:a9:fb:67:b3:02:fe:f6:23:8f:6a:f5:32:0a:
2c:7a:0d:40:cb:54:09:cc:39:63:a4:ea:e7:c4:88:07:5f:5f:
db:04:f1:31:ff:2c:cb:90:76:48:e9:0b:e0:b8:60:b4:52:f3:
23:cf:80:14:8a:64:d2:33:6b:b8:74:34:b8:4e:c5:f7:ba:3e:
ee:21:6d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:44 2023 by rpki-client on console-fra.rpki-client.org