Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/08d2c49d-8fdf-39c4-b322-697c5830c4e1.roa
File: 08d2c49d-8fdf-39c4-b322-697c5830c4e1.roa (raw, json)
Hash identifier: +Z5g0EwnI9AQJoyPqySwtUNTHeAAXK3rr3qcwOsYJZI=
Subject key identifier: 2A:64:97:E2:AE:37:A9:D9:54:24:FD:EA:BD:D7:82:FA:45:5E:8E:84
Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial: 010D0C9F43285837DA9C784A254ADD4A69CB0C40
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/08d2c49d-8fdf-39c4-b322-697c5830c4e1.roa
Signing time: Wed 30 Sep 2020 04:00:00 +0000
ROA not before: Wed 30 Sep 2020 04:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 393841
IP address blocks: 68.65.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:da:9c:78:4a:25:4a:dd:4a:69:cb:0c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Validity
Not Before: Sep 30 04:00:00 2020 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=ffb4c4ba-16cb-48d3-9b92-5cc6133ff68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:5e:3c:1f:9f:a6:60:99:1b:e8:d0:8b:3b:
0e:3a:fd:32:2e:e6:e3:9d:ac:15:5a:5f:ed:97:73:
ae:8c:e9:94:dc:d8:fa:14:0a:c1:fc:e9:d7:d6:52:
ff:e9:65:67:3f:a7:3d:4e:54:97:4a:bb:17:90:51:
3c:a9:f4:1c:51:99:e0:b2:d1:56:31:61:77:70:c7:
3d:65:8f:13:61:8c:05:23:3a:a1:1d:77:a5:cc:39:
62:0c:bb:1b:b2:97:d6:9f:08:b9:07:a5:94:5b:20:
5e:8c:eb:95:1e:01:33:1f:f0:0f:f3:f0:55:cd:ac:
05:e8:24:e2:59:e5:61:47:f2:d3:b8:6a:59:58:7d:
c2:c1:54:9e:dc:ed:04:87:6e:8a:74:66:5c:3b:14:
b9:f1:94:14:8e:2b:38:ec:88:6d:31:75:7a:79:0a:
0f:ad:9c:af:35:1e:5d:b3:de:a7:33:46:79:db:ff:
21:23:91:a7:47:17:2e:7a:ad:14:d4:c0:fe:02:d3:
11:ac:f4:4a:0b:97:99:8d:b1:f3:05:f5:6e:ad:a9:
00:33:f3:9d:69:95:93:36:3b:86:fa:fc:2e:00:9b:
ee:b7:cf:bd:98:b2:05:12:eb:3e:35:5d:5e:50:51:
d7:9a:76:55:56:b9:77:08:3c:52:52:55:c3:94:45:
14:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:64:97:E2:AE:37:A9:D9:54:24:FD:EA:BD:D7:82:FA:45:5E:8E:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/08d2c49d-8fdf-39c4-b322-697c5830c4e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
X509v3 Authority Key Identifier:
keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
sbgp-ipAddrBlock: critical
IPv4:
68.65.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:57:21:05:ce:9e:77:35:7a:98:8d:3d:3d:6b:59:50:34:44:
29:4f:29:b1:51:35:60:33:d2:9c:0e:83:e2:c0:05:c6:d0:98:
9f:32:25:03:4c:68:ad:b6:23:f5:a4:88:73:96:91:de:4a:4d:
d2:63:5f:69:96:0b:96:72:98:12:70:8e:7f:7c:a4:2d:2e:b2:
3c:dd:07:04:d0:f3:4d:0c:65:b7:03:02:fe:1b:22:8b:3a:cc:
a0:ed:f8:46:c9:46:cc:5a:99:25:f3:f0:06:21:96:e7:48:b7:
cb:c7:42:c9:0f:f5:b0:ef:a0:70:6b:aa:38:bf:b1:9a:4e:84:
b5:a0:95:c4:18:24:bd:7b:2c:47:07:97:b4:e9:6b:f8:68:2a:
e8:13:32:17:5a:9b:26:90:16:17:93:11:2d:c6:7d:26:d2:59:
52:f4:ed:eb:24:e4:b5:f4:3d:0e:34:e6:24:6c:b9:b2:ff:fa:
ef:94:99:43:0d:fa:68:fb:63:cf:5a:17:a4:8e:f7:9f:2a:be:
22:65:6f:57:95:cb:e4:e2:3b:14:5b:78:3a:a6:b3:32:22:8d:
6e:e6:0c:74:c2:8c:b1:8f:4b:1b:70:d3:0b:7c:bc:1c:fd:62:
65:3b:8b:8b:47:12:89:a6:f5:b2:02:3c:f0:25:bd:ba:15:09:
10:2f:65:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:20 2023 by rpki-client on console-fra.rpki-client.org