Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21f88008-c3e7-3842-868c-9d3d5e907c7b.roa
File: 21f88008-c3e7-3842-868c-9d3d5e907c7b.roa (raw, json)
Hash identifier: c6q5DxXCDULDmc+w7sIW4ruNlRbAImtBdPk8YbY5R1E=
Subject key identifier: 85:E2:C5:F7:43:AB:BF:A8:E3:47:D5:68:63:20:B7:4B:A1:68:E8:E7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BFDA687EFC4D3BEE241D738E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21f88008-c3e7-3842-868c-9d3d5e907c7b.roa
Signing time: Sat 20 Nov 2021 05:00:00 +0000
ROA not before: Sat 20 Nov 2021 05:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 6165
IP address blocks: 65.49.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fd:a6:87:ef:c4:d3:be:e2:41:d7:38:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 20 05:00:00 2021 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=a14646dc-4cc2-4044-b02b-3ea54d37c9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cb:cd:af:5d:b2:c2:6f:7a:ff:8c:74:55:48:
61:35:5d:ec:b3:a7:bd:d3:db:bb:2c:bb:67:3d:46:
c7:fd:57:f7:5e:f4:39:23:dc:7b:84:e1:4e:c4:53:
8b:40:2f:8c:03:21:6b:3c:e5:be:ed:d0:e4:08:56:
79:d2:2e:e8:7d:f7:16:de:d3:c2:bf:ad:d3:72:f1:
a1:5d:53:44:de:d6:fe:a9:45:e1:2f:ee:b9:01:2f:
39:26:32:1b:01:69:f1:62:82:27:f7:da:6c:96:0e:
d2:fe:aa:1c:bc:a9:85:ad:4f:22:7c:27:68:18:6e:
78:ba:00:07:6e:b6:a7:fc:36:98:3e:81:f9:75:4d:
a6:29:0a:0f:a7:e8:ae:57:98:3a:74:5e:09:74:2d:
a4:18:56:0c:8c:db:b3:ea:62:60:54:f6:d7:7e:7a:
2c:26:f1:ae:e1:15:a1:3e:54:1f:37:b8:04:19:24:
88:1d:cf:68:a5:c7:61:5d:cc:62:5e:ee:4d:71:dc:
3f:b3:da:82:92:d8:fe:a1:97:79:40:57:a4:88:d0:
b0:96:ee:c9:05:f0:ad:17:35:56:f4:a3:6f:4f:63:
8c:67:31:6a:7d:3b:8b:fb:fb:da:62:88:99:92:64:
fd:81:26:f1:d1:89:d7:ae:b6:dd:55:b6:bb:be:4c:
86:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E2:C5:F7:43:AB:BF:A8:E3:47:D5:68:63:20:B7:4B:A1:68:E8:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21f88008-c3e7-3842-868c-9d3d5e907c7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:8d:d1:46:92:bf:e0:23:29:18:17:75:04:f5:bb:1f:74:e3:
db:6f:37:2c:eb:a9:f5:ac:0c:c7:f5:a2:b7:30:88:db:95:a6:
fb:89:c6:7e:9f:c2:0a:21:78:6a:17:10:25:72:48:5d:88:46:
0c:b1:b7:64:29:17:17:de:a4:7a:fb:dc:27:56:24:a5:2c:18:
82:9a:a5:ad:3b:e9:0c:68:73:00:02:bf:db:b0:86:03:8c:7b:
af:82:80:c4:26:f7:9f:d9:ce:99:96:93:0d:e7:bf:85:12:82:
71:91:95:23:66:cc:b3:4d:31:fe:c7:55:c6:81:f8:e5:56:37:
8a:98:24:56:90:4a:6a:e3:0f:6a:f5:89:55:6f:2d:36:9d:d2:
d5:ee:f0:bd:fb:c1:e4:c8:82:f3:36:8c:45:36:73:e5:8a:65:
cf:2c:ed:cd:8a:25:f2:79:0b:4a:c9:34:bc:ac:9e:4b:48:a6:
3d:f8:d5:8f:5c:37:36:35:30:55:da:22:d8:aa:2b:d1:34:1d:
fb:43:c5:83:9d:9e:7f:af:2f:dc:68:e6:a5:43:d1:54:01:31:
60:eb:0f:52:7d:97:ca:e7:a5:43:a6:e2:78:3f:f9:5d:ce:8b:
54:06:90:77:c6:1a:12:85:73:18:f6:36:62:db:59:ec:10:15:
8c:9b:20:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:35 2023 by rpki-client on console-fra.rpki-client.org