Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1feea8cd-d24a-30c8-8771-051f1345884f.roa
File: 1feea8cd-d24a-30c8-8771-051f1345884f.roa (raw, json)
Hash identifier: iLzf3fR5z1lBAQElE6apUhJS16CVj3h9lLrP7Xh6TB4=
Subject key identifier: 5E:A6:59:8D:E4:84:E8:FE:DC:FC:1A:EE:33:4F:2B:D7:7C:66:09:84
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BFDA62AC1BB500414DF142E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1feea8cd-d24a-30c8-8771-051f1345884f.roa
Signing time: Sat 20 Nov 2021 05:00:00 +0000
ROA not before: Sat 20 Nov 2021 05:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 18865
IP address blocks: 65.19.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fd:a6:2a:c1:bb:50:04:14:df:14:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 20 05:00:00 2021 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=458b5ca8-d7fa-4d92-977a-eb7f60e57d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:9b:11:4d:00:a5:e3:69:37:be:59:d3:69:
ab:09:33:21:6e:86:b2:8f:c1:b5:df:9c:29:43:2e:
5d:94:f7:d9:e2:bb:63:4e:db:b0:11:7f:01:9f:e4:
e3:73:39:92:30:fc:f5:7c:1e:4f:42:d3:7d:6a:4d:
f2:ac:ab:1f:ad:f6:56:f5:e0:3d:ee:5e:6e:90:24:
aa:1c:e9:a0:c6:b0:66:4e:98:d3:b0:40:50:1f:60:
ac:ef:b1:9b:63:e9:fc:22:49:b2:b6:4f:d1:00:d1:
17:12:93:64:f7:15:27:0f:03:f4:8d:6a:9f:fe:e4:
71:ee:05:33:68:24:c0:8e:f1:c9:9d:69:6f:d1:5c:
d5:25:06:6f:c7:10:54:f2:74:98:85:47:25:06:28:
e6:3d:46:4b:5c:17:5f:ff:9b:39:af:8e:76:61:8b:
a3:47:af:be:cf:34:e2:6b:ff:61:a2:08:28:91:ae:
de:42:c7:63:77:41:ae:4c:81:51:95:0f:dd:f7:a1:
ca:d6:87:f0:31:d2:57:11:8d:5f:b5:70:75:2d:cf:
f6:5b:e7:39:a3:48:d3:40:6a:e5:81:a1:4b:60:1e:
49:e8:09:2c:a9:d7:db:ae:f3:20:10:96:0c:21:ee:
c3:0e:97:3d:5b:76:e2:bf:5f:16:b9:8e:58:4c:cf:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A6:59:8D:E4:84:E8:FE:DC:FC:1A:EE:33:4F:2B:D7:7C:66:09:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1feea8cd-d24a-30c8-8771-051f1345884f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.19.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:e5:3a:fb:24:2d:98:c7:8b:aa:2f:fc:ef:a6:60:2e:69:20:
cc:d1:d8:87:28:3d:5a:e5:ec:6c:f0:28:d0:f7:8a:50:13:f7:
18:b8:6d:60:9d:98:47:e5:5f:2d:58:1f:06:54:1c:7a:0f:75:
9a:1d:94:68:41:e7:2b:a5:13:83:2f:14:8f:fd:13:bf:97:c2:
a0:d1:90:ce:a8:c5:28:58:52:c4:7d:8d:f5:e3:08:4a:95:e4:
79:34:1d:f3:19:e3:24:57:3f:ba:77:c3:13:e7:0d:a9:03:ff:
c7:58:5c:7a:a9:9d:15:bc:2f:a6:30:66:62:cc:70:e2:b3:d5:
47:41:74:a1:83:28:89:82:ae:97:28:1b:3f:08:b1:d4:c2:6d:
a5:b0:14:b1:13:75:36:4e:8c:be:0f:95:62:10:47:a7:94:8a:
7a:ed:19:ec:4a:eb:ef:4a:a4:9a:68:77:de:f3:b5:5e:50:63:
6b:27:f3:14:99:47:e8:5e:21:86:78:85:9b:85:33:3d:f3:ed:
2d:05:4a:62:9d:cc:0d:f9:c0:58:e5:10:ff:6f:99:70:2e:84:
f0:d4:52:5f:1e:ce:27:22:20:4e:10:88:c9:93:16:8a:ce:78:
ff:d4:c3:8c:9e:c4:8b:bc:a0:28:79:ab:d3:a1:5a:20:29:34:
b5:d4:09:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:31 2023 by rpki-client on console-ams.rpki-client.org