Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0eade40e-d32a-382d-b2bb-95baf7c396c6.roa
File: 0eade40e-d32a-382d-b2bb-95baf7c396c6.roa (raw, json)
Hash identifier: wPuI1uFm7nDS2FdkeYebHFV2ZglFP4Cr1qCUEJka7aI=
Subject key identifier: 9F:FA:62:C1:BB:97:32:F6:CB:03:46:48:A5:32:68:8E:9C:A1:61:E1
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50DE4A41089943AB2A3F30
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0eade40e-d32a-382d-b2bb-95baf7c396c6.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 33309
IP address blocks: 2001:470:60::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:de:4a:41:08:99:43:ab:2a:3f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=2d5643b0-857c-454e-a2a6-8483aaa40697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a0:22:d6:ba:5d:8c:dc:50:ff:b1:fc:53:61:
27:40:df:c2:d9:68:a8:51:ff:5d:dd:4f:2b:64:d1:
87:ae:f5:7e:39:65:12:b2:aa:d9:fa:1d:fa:9a:09:
fc:49:cc:54:b5:b2:73:58:12:88:6f:d9:67:24:c4:
ae:69:ca:b9:35:62:81:e5:1c:70:6a:a0:ac:9b:3e:
8f:42:85:f1:ed:79:bd:56:eb:46:2c:00:b1:c2:9a:
b2:17:ed:dd:44:08:67:c6:96:55:4e:ae:5e:ee:8c:
ae:4a:ec:4a:3d:d8:00:ab:f8:4d:87:92:c0:96:39:
05:25:88:1b:2a:dd:d9:f3:a6:79:30:22:46:74:54:
86:46:8d:f4:0e:0d:1b:7b:a6:45:bf:22:b5:05:b7:
61:69:10:e6:fd:8b:ed:87:2f:00:0f:08:14:e7:73:
95:e7:36:2b:6d:7b:f2:99:74:56:e6:b6:c0:03:31:
7a:87:b2:a1:41:44:f2:b5:b7:a4:cd:2b:6d:27:70:
62:83:4e:b0:32:ba:ec:3f:b3:61:fb:3f:68:1f:8b:
4a:bf:eb:8a:29:07:5d:8a:57:e7:35:62:db:14:93:
ae:4c:6f:b7:3a:1e:87:b3:c9:2d:51:aa:ad:bc:ad:
53:97:fb:40:0a:07:34:a5:e9:32:0b:8a:71:a4:74:
83:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FA:62:C1:BB:97:32:F6:CB:03:46:48:A5:32:68:8E:9C:A1:61:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0eade40e-d32a-382d-b2bb-95baf7c396c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:60::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:5e:c5:ea:f0:d9:f0:60:a4:b5:bf:95:c8:5f:9f:62:5e:c3:
22:d5:cd:54:98:72:df:89:cf:bb:2a:8a:56:27:e0:0e:26:12:
18:5b:80:84:04:d8:58:83:18:c2:bc:64:20:bd:5f:ff:4e:db:
ba:95:74:ef:db:14:12:74:3b:52:9f:e7:39:e6:92:f7:25:4a:
e7:67:e4:63:c1:aa:69:1d:8f:31:67:9e:88:28:b4:53:a3:76:
cb:ca:91:28:8f:93:64:f7:32:d2:e7:28:a2:fa:94:00:be:e2:
38:36:05:99:26:29:97:db:a5:99:1f:e9:cb:14:45:07:17:a2:
28:0d:8e:42:31:ee:6a:6c:f7:d5:23:c9:96:c6:be:0d:ea:b1:
b7:c0:19:81:aa:ed:6b:cd:06:70:6f:c5:27:7d:e0:c6:11:89:
ed:98:c7:1c:24:0a:96:b0:ef:d9:09:79:ef:8a:48:80:e0:d2:
19:d0:b6:4b:41:00:28:24:e0:d3:b3:b4:a4:7c:f5:0d:5c:19:
0b:f8:ce:c3:19:c7:c0:25:35:77:4d:79:6f:be:24:d5:f1:24:
d1:4f:25:0c:38:e1:62:0b:5a:ed:ca:2a:d9:d0:82:08:2c:1e:
35:53:16:1b:d2:6d:b1:2e:6e:38:df:5a:f1:b0:eb:3c:ec:68:
e9:f9:27:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:04 2023 by rpki-client on console-fra.rpki-client.org