Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d5c260e5-c8a5-34f4-bf90-ad1e24b1a611.roa
File: d5c260e5-c8a5-34f4-bf90-ad1e24b1a611.roa (raw, json)
Hash identifier: 8VE6Zy6UXnElzzObXQD2eApbJ0JASjTqnisu/fiWkmw=
Subject key identifier: B3:D3:65:1D:6F:17:53:CB:AB:B2:5C:99:73:AF:82:2F:4A:33:E1:B6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328576D51CC73C042CFC1738EA2F8BD
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d5c260e5-c8a5-34f4-bf90-ad1e24b1a611.roa
Signing time: Mon 27 Jul 2020 04:58:32 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 60721
IP address blocks: 108.165.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:8e:a2:f8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=d412d4c4-db9f-492d-9fdc-b146bd446582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:d2:b8:6a:08:da:67:42:0f:77:5a:70:ac:
b3:52:2d:96:53:a3:d5:2e:66:e4:5b:90:77:4b:b6:
73:58:4c:b1:74:48:45:9f:3d:71:c6:f3:2a:c2:68:
4a:42:91:87:f3:bc:a7:bc:7a:44:ba:0f:ed:da:a6:
df:5a:70:a0:c1:c9:a3:64:53:07:19:8a:2a:19:61:
02:f1:92:5c:c7:b4:a9:59:01:b1:cb:34:5a:95:c3:
9d:fe:a5:94:31:ca:32:9e:a0:87:3d:fe:ac:d6:91:
b4:64:0f:7a:ad:ed:72:2c:57:c5:be:a3:ef:db:dc:
ce:d1:32:af:98:29:2a:7a:54:3c:67:9d:0f:14:1e:
20:38:6d:d1:d7:ed:7e:ab:e7:1a:04:2d:19:98:c6:
71:7e:68:19:52:ea:71:1e:69:40:53:f0:89:67:3c:
4b:76:bd:58:26:7f:9b:83:68:24:c7:2a:af:7a:bd:
86:9c:80:92:a5:b2:d4:93:29:fc:82:aa:86:22:ca:
e1:ac:86:90:ef:ff:c1:ac:15:07:ef:fb:7e:0e:68:
67:20:c8:ab:16:89:3b:af:51:2a:08:f1:54:1d:a3:
c8:70:46:03:d3:e8:4e:33:a0:49:2e:0c:b2:8d:b8:
6b:d0:9b:6e:4c:b7:e3:14:48:48:9f:8f:78:61:ee:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D3:65:1D:6F:17:53:CB:AB:B2:5C:99:73:AF:82:2F:4A:33:E1:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d5c260e5-c8a5-34f4-bf90-ad1e24b1a611.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:94:74:33:9f:6e:24:a3:1d:85:3f:87:e7:33:ff:f3:c8:98:
28:bb:68:ae:32:5c:17:6d:39:d4:d5:b5:e4:94:84:54:44:a0:
a7:a9:c6:0e:e0:3d:5f:1e:f8:21:a4:e8:96:9b:84:95:c6:8a:
b7:4f:91:ac:b0:a7:0a:a9:36:08:5f:80:94:93:48:d9:14:b9:
45:9d:0e:34:ce:c5:a8:84:9b:cd:51:49:96:ba:7c:f3:fb:fc:
07:71:53:4d:ce:57:45:41:08:55:8a:21:99:6d:1e:46:08:35:
e5:55:22:0e:9a:90:8f:01:d4:12:3a:03:61:39:8b:eb:fc:c7:
1b:3e:b7:99:90:43:e9:01:38:50:90:1a:c9:f9:27:6b:ce:77:
25:fa:8d:29:a1:db:b0:56:38:a8:9a:bd:ba:26:d9:65:cf:25:
bf:4a:43:2c:b4:94:fb:9c:4f:f9:af:e2:c7:f3:a5:53:99:da:
5b:93:38:25:e3:5a:26:70:53:64:b6:31:05:d4:68:92:30:7a:
21:78:8c:a6:de:fb:d1:ba:b8:5f:98:d6:34:6a:ad:2d:3b:80:
1c:50:f6:05:6c:61:b0:66:53:a7:e3:50:df:bb:5f:3f:8f:eb:
e7:c7:ca:68:bb:9b:dd:88:53:e5:58:fc:ea:ab:6a:28:8e:15:
03:92:aa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:01 2023 by rpki-client on console-ams.rpki-client.org