Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/07c27d83-f81d-312f-95fb-f90e1c6c4b55.roa
File: 07c27d83-f81d-312f-95fb-f90e1c6c4b55.roa (raw, json)
Hash identifier: sRsWasG3kZuywtDI4jIkvGTbtIdzXN30YIfyKx/9qxQ=
Subject key identifier: 40:BB:28:BE:28:EA:3F:E7:61:3F:0D:CA:65:2B:FB:25:D1:D2:BB:CF
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D7935E1FE092B6186EE538280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/07c27d83-f81d-312f-95fb-f90e1c6c4b55.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 36103
IP address blocks: 64.62.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:35:e1:fe:09:2b:61:86:ee:53:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=21a0fa8e-d1c8-46cb-9f3d-fdd285f0814d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:4a:0e:02:0c:f8:99:78:40:4e:fd:65:5b:
1c:06:aa:64:9e:e5:be:bc:b8:d1:de:10:68:4c:f6:
cc:74:2a:d0:0e:54:0a:ee:dc:31:35:34:77:74:c7:
95:03:b4:2a:86:cf:cb:89:09:c6:d2:d7:a4:55:c6:
85:99:2a:26:72:6b:52:50:24:fa:80:66:a9:7c:d9:
a4:80:13:83:9e:48:96:b7:2d:ab:54:61:33:1b:39:
93:11:a6:cd:9b:6f:af:5d:11:16:6a:0d:88:63:4a:
00:0a:20:97:a2:90:c6:53:48:b7:86:92:8d:8c:00:
e0:d3:f7:97:ce:5b:15:bf:ad:57:cb:90:73:91:c8:
65:ac:69:cf:12:f2:e6:b3:35:de:58:f9:24:15:8f:
7c:a6:75:1e:5b:37:18:81:76:34:e0:21:3a:98:29:
37:6d:af:45:8a:de:10:af:ab:b8:e7:73:7d:f4:86:
e5:e7:e8:73:c3:d9:80:0a:6b:d5:b9:fa:d6:3b:33:
7e:63:07:d9:ff:1f:21:7f:f8:2e:7b:9e:96:f7:c9:
90:6c:8a:8b:d2:82:28:cc:10:d6:17:c0:99:b1:90:
9b:7d:5c:fa:02:4f:af:a1:41:65:de:30:02:7b:1d:
cf:5d:68:0d:a2:11:b2:2d:28:71:93:31:2e:4c:66:
5d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BB:28:BE:28:EA:3F:E7:61:3F:0D:CA:65:2B:FB:25:D1:D2:BB:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/07c27d83-f81d-312f-95fb-f90e1c6c4b55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:05:33:6b:19:43:92:e6:f8:14:14:ef:6a:ec:4e:eb:0c:da:
e8:19:96:fb:2f:96:12:84:7d:7b:f8:91:60:b7:fb:06:ae:a0:
2e:b1:db:40:97:5a:f5:bd:68:b3:b1:3e:7b:50:88:60:2a:f2:
58:69:97:87:70:f9:49:e2:ba:b8:38:67:95:32:af:60:35:a3:
4a:d2:5d:f8:4b:00:b5:2a:34:33:6f:1b:6a:f0:f8:68:e8:8b:
5b:59:b5:b1:fe:ee:70:dd:c5:37:b5:72:69:3b:ce:cd:a8:e3:
38:52:ea:2f:67:20:f1:ce:8d:8f:66:3b:b2:32:41:a0:31:3f:
29:ba:8b:87:14:24:cd:fe:f1:43:be:73:18:e7:4f:8d:34:b9:
ca:2d:83:53:09:d1:44:a8:f9:8e:00:26:50:c2:34:08:72:d6:
b7:f7:77:14:33:62:bf:af:3e:b1:24:0e:3a:c9:5c:fb:f3:c2:
78:52:6b:21:b7:52:fc:a2:ce:b4:d7:cf:4d:84:82:74:c1:fb:
e7:cb:91:20:32:9a:4f:e6:fb:f7:a8:0e:58:30:15:34:6d:ae:
09:4e:49:13:6d:7b:8b:b3:fa:e6:6c:36:f7:6a:e6:0e:f7:64:
73:2c:9d:8e:2e:26:7f:33:7e:30:e5:b1:0e:ad:d8:6f:33:c9:
8f:2b:8c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:34 2023 by rpki-client on console-fra.rpki-client.org