Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1eb49251-6d62-391e-8ce3-3c7f17dd5735.roa
File: 1eb49251-6d62-391e-8ce3-3c7f17dd5735.roa (raw, json)
Hash identifier: c0PrvB0v1rU7wSAef3kDgSvyU3cZDP3Ku2ehKdCJWDs=
Subject key identifier: C8:C7:4E:93:91:22:38:7D:67:24:F1:15:FE:67:0B:CF:F4:66:09:08
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D79359BF748384B97B463C000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1eb49251-6d62-391e-8ce3-3c7f17dd5735.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 19330
IP address blocks: 64.62.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:35:9b:f7:48:38:4b:97:b4:63:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=44070232-0287-43bd-8671-1c558b1a135c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:b4:94:95:c3:dd:7b:6c:b5:46:bd:90:ee:
77:e6:fa:88:85:51:32:d3:f2:46:c6:5c:2c:4b:4a:
b5:25:fb:36:50:59:46:3a:72:5d:0c:24:0d:b5:09:
34:90:da:0a:12:6f:9c:fe:65:4d:eb:23:99:35:2c:
f2:49:26:57:85:c8:5f:18:e2:9a:fc:29:9d:d6:40:
ec:72:d0:1c:fe:7e:da:bc:44:64:ff:84:b1:2b:90:
bf:a9:1b:e4:27:e5:6e:49:0d:43:74:79:5d:22:63:
60:a1:51:27:2e:5c:32:68:42:86:0f:5d:10:78:70:
2b:fb:6f:f1:bc:bf:f9:d8:0a:10:c0:11:c3:97:af:
6e:34:08:89:7b:1b:2d:05:c4:a7:b8:f1:f7:76:88:
34:ae:35:00:d1:d0:e0:e5:0c:cb:ee:2e:d4:01:5a:
ef:a3:16:43:66:e4:93:f2:94:1b:eb:a0:ae:c3:43:
b0:3f:72:dd:03:5f:29:29:4a:bf:d2:58:da:81:4c:
f8:53:1d:31:a6:fb:0d:6f:0a:ca:ba:c7:ea:00:9d:
0d:6b:5c:06:c9:d1:3b:74:a2:73:1d:f8:64:fb:63:
1e:99:4d:3b:90:79:a8:62:eb:5f:47:19:9d:ff:dd:
11:6a:86:9d:12:e1:45:a5:83:25:db:65:06:d4:38:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C7:4E:93:91:22:38:7D:67:24:F1:15:FE:67:0B:CF:F4:66:09:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1eb49251-6d62-391e-8ce3-3c7f17dd5735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:12:53:29:0d:c9:fa:e3:cb:68:18:af:ad:7a:d7:15:51:ee:
22:57:6e:1d:aa:58:a7:8e:11:0e:c8:87:8b:e0:fa:cb:12:fc:
b1:85:cf:89:8d:d1:75:2b:e5:5b:48:1f:db:eb:d0:51:37:bd:
31:50:87:ad:47:0a:ee:4a:51:fa:3e:92:5b:df:4b:d9:ff:6a:
28:0e:ca:19:25:c1:c3:d8:c6:2f:70:82:52:b4:3d:7e:02:d5:
4a:e2:d4:6f:f9:b5:6e:5e:5e:2e:67:71:01:42:5e:0f:32:3e:
51:50:7d:34:0b:b3:38:5e:02:67:e7:88:80:e1:49:7d:8a:93:
42:4c:59:1e:db:07:19:2e:4e:4f:34:95:d1:da:8a:69:2b:c2:
e3:22:b9:35:9d:ab:0e:40:e2:21:74:22:e0:08:0d:50:b9:f8:
9e:66:6b:34:d6:d2:1b:18:bd:5a:fc:1e:00:eb:19:7a:77:9f:
f5:ad:d9:12:94:1f:0b:74:57:ea:68:8d:11:c3:ed:6f:4f:d5:
44:3a:50:ac:50:75:ff:ab:a3:ca:95:dd:04:fe:9b:61:2a:da:
4e:9a:d9:19:97:0c:d2:60:40:c1:00:da:3a:be:9a:7b:b3:70:
fc:4e:91:a0:31:8b:01:a2:80:08:c8:e1:1f:8e:2a:49:aa:46:
94:93:47:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:35 2023 by rpki-client on console-fra.rpki-client.org