Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a430481-d2f3-3ae0-bfe3-beb000aaeff5.roa
File: 1a430481-d2f3-3ae0-bfe3-beb000aaeff5.roa (raw, json)
Hash identifier: yQRVeD/qfSJ0RLovTf37Jc7K78XIgrbKHX6bHUrwqlI=
Subject key identifier: AB:63:19:03:2B:C1:4B:5E:DE:1B:0C:70:1C:80:77:6C:F9:B8:91:C5
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A510EC37D721FD69CA14A08
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a430481-d2f3-3ae0-bfe3-beb000aaeff5.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 36103
IP address blocks: 65.49.96.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:0e:c3:7d:72:1f:d6:9c:a1:4a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=0bf2a514-2d81-4c4a-a51a-ed590ef355f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:17:cf:fe:90:90:39:ef:e2:55:e0:3f:d1:e0:
42:65:f8:f5:2c:f2:52:72:cc:a9:98:f7:7b:c2:d3:
29:43:81:91:c4:92:51:94:0d:48:32:86:90:cb:8d:
9f:8f:3f:0d:44:5c:cb:20:c5:be:f8:a4:3e:d5:cd:
6b:34:a4:f9:c2:06:9c:52:3c:09:ce:26:f4:83:17:
dc:4b:38:1e:3c:de:08:3f:55:a9:7f:5b:10:a3:0d:
b3:0b:cc:78:7e:b5:bb:03:c8:53:d7:36:25:73:da:
08:07:2b:92:77:ed:56:c7:50:bd:47:07:08:6e:db:
1c:03:3d:14:f3:ea:a0:82:4a:7a:88:f7:c4:61:0f:
50:fa:02:e3:f4:27:81:83:09:b3:40:e7:45:9f:22:
d0:a4:71:88:07:f2:12:17:b7:e5:eb:a9:f3:76:36:
3b:ea:d1:f5:9c:65:ad:91:3b:86:e4:61:e6:bb:d2:
81:59:08:6f:11:ac:27:92:82:7c:11:e2:07:14:b1:
cd:83:fb:b3:92:74:0a:a3:12:6b:1d:4a:94:72:28:
e2:6c:e4:e5:29:74:34:37:a0:22:2d:72:af:0c:b2:
6e:31:f4:58:6f:2b:e2:62:4a:28:6a:b0:0c:19:bd:
92:3c:1f:d1:7c:58:e7:f6:94:78:ca:38:e2:62:72:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:63:19:03:2B:C1:4B:5E:DE:1B:0C:70:1C:80:77:6C:F9:B8:91:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a430481-d2f3-3ae0-bfe3-beb000aaeff5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:4c:fa:c5:55:06:6f:16:b9:2a:d8:e5:9a:64:92:09:85:28:
97:9a:23:56:9b:aa:a0:43:3d:a1:c0:0e:76:b4:c6:cb:91:5a:
85:99:a4:25:63:6c:d0:ce:d8:be:7a:11:32:5c:3b:35:bf:2a:
43:dc:cd:ae:4b:0e:e6:53:ce:d7:9e:e8:b1:c2:41:1d:7c:38:
e8:b0:82:2c:62:da:e3:03:22:4d:7f:ee:23:71:1d:07:69:1e:
f3:67:49:0b:8c:34:11:d2:b0:2c:3f:f0:d4:28:13:a7:31:2d:
05:8c:2b:94:77:78:59:3a:03:d9:d9:e0:41:ae:82:70:f7:05:
85:f3:c2:ae:32:32:0f:ba:03:4f:5b:a4:df:ad:b2:dd:50:c7:
66:44:0a:a6:c1:24:7d:a6:9c:6c:67:45:79:70:4a:af:50:76:
66:5d:4b:a4:5e:01:56:b5:27:d1:0a:80:1a:1e:61:49:92:06:
8e:01:22:30:2d:05:1a:bf:be:55:f0:2f:1e:b2:15:f5:fb:3f:
21:9d:7b:13:52:61:06:92:2d:8c:57:73:08:88:92:47:30:fa:
9c:2f:d1:c5:01:3a:f1:9c:e0:ff:51:4c:b3:4e:01:45:7f:26:
f2:ad:ae:73:01:f3:bd:e5:16:b5:b1:d0:89:6e:78:5e:1d:b8:
1f:16:11:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:04 2023 by rpki-client on console-fra.rpki-client.org