Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23b70e25-c99a-3897-a0fe-18568b16a217.roa
File: 23b70e25-c99a-3897-a0fe-18568b16a217.roa (raw, json)
Hash identifier: lu7VfyVY+zPf86Yo3u6a0xaqUz34FRnvdhOCub3lb8Q=
Subject key identifier: 07:43:9B:2E:AC:4E:48:B0:F0:6E:19:C1:13:89:ED:19:A5:C8:AC:60
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285842D6BDB57D695F8EC3564DC4E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23b70e25-c99a-3897-a0fe-18568b16a217.roa
Signing time: Wed 09 Aug 2023 12:00:00 +0000
ROA not before: Wed 09 Aug 2023 12:00:00 +0000
ROA not after: Sat 10 Feb 2024 05:00:00 +0000
asID: 394230
IP address blocks: 216.66.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d6:bd:b5:7d:69:5f:8e:c3:56:4d:c4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 9 12:00:00 2023 GMT
Not After : Feb 10 05:00:00 2024 GMT
Subject: CN=49364744-b405-4fde-ae84-0074db07b7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:f9:c4:28:21:87:6a:b7:92:d4:1f:81:03:
09:47:74:96:b3:7a:d5:67:d8:ce:1a:39:c8:ab:df:
99:9f:de:b7:7d:1e:68:6e:ca:67:8c:a9:1c:1a:ba:
64:c1:47:35:59:16:2b:46:01:8c:c7:83:62:f4:c5:
d9:90:d2:6f:35:81:65:36:c6:d3:71:44:1f:95:62:
bd:df:04:cd:ac:d9:0b:ec:e9:1a:cc:51:b9:ec:f4:
1f:a4:62:65:90:23:ef:19:2f:c5:c3:d7:5d:37:a8:
a8:dd:0d:16:1d:3b:91:69:9d:5f:ed:5d:8b:f5:1a:
09:b0:d7:31:bd:35:4b:49:86:53:95:9e:c0:aa:f5:
b2:57:65:bd:4f:90:f1:9b:fe:db:90:4b:53:67:3c:
5e:ee:93:0a:b5:82:13:52:04:0f:c8:c0:14:88:52:
a4:7b:39:c8:cc:c1:d9:d5:5c:c7:cf:0d:8b:b5:46:
de:d6:61:cc:12:79:e5:d3:a8:c8:85:5e:8a:24:c6:
7a:b8:ff:9f:df:0e:25:29:a4:33:8a:d7:a7:be:b9:
0b:48:84:21:34:4d:03:8f:c6:42:32:0a:d7:75:3d:
64:d8:7d:33:28:e7:40:6d:ba:79:f4:d2:a1:77:59:
15:d1:17:b1:fa:51:0c:b5:c6:b8:f1:42:c9:7e:05:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:43:9B:2E:AC:4E:48:B0:F0:6E:19:C1:13:89:ED:19:A5:C8:AC:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23b70e25-c99a-3897-a0fe-18568b16a217.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:8d:b2:5a:88:be:cc:a6:1a:70:fe:c7:15:32:18:c8:b4:77:
8a:f3:79:7e:db:54:17:c1:34:e6:1b:87:07:c4:36:d9:45:c7:
be:77:b6:c6:2a:cf:54:8b:58:e9:4b:d4:2e:ea:ed:06:c7:40:
49:e8:0a:0d:9f:46:b4:81:1b:84:4d:82:73:81:0d:80:dc:e8:
91:63:0d:3a:48:14:e2:f0:75:90:a5:ce:fc:d9:f5:95:8d:f4:
be:7b:af:ef:04:9f:1f:e9:2e:70:06:f9:f4:6c:23:f6:d2:46:
ab:5a:ff:b1:a2:d9:ac:ee:8f:2b:f2:d2:e8:17:23:b2:8d:3f:
fe:d7:b6:af:51:3e:79:08:ac:76:6f:09:9e:79:1e:fc:81:b3:
e3:17:2d:82:b0:87:0b:0c:81:65:86:c1:5c:07:a7:1d:2d:08:
90:77:2a:e3:d9:17:7f:45:d2:25:80:60:38:81:46:d4:71:ac:
34:72:55:cd:ab:27:a2:73:14:52:5f:65:01:bd:5b:d4:32:c6:
8c:54:c6:4d:64:da:a7:27:05:7a:5f:03:43:5e:ab:8a:6b:cd:
7e:bc:30:8c:20:a4:83:75:fd:3e:81:25:f7:66:78:77:2e:db:
c1:f5:c1:30:58:70:aa:5e:41:f5:04:12:f1:1c:0d:9c:f4:8a:
af:76:14:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 07:37:50 2024 by rpki-client on console-fra.rpki-client.org