Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/300b14c2-a781-3259-b6be-935b7e4b9b74.roa
File: 300b14c2-a781-3259-b6be-935b7e4b9b74.roa (raw, json)
Hash identifier: asbJ5YHnPvqg0o59iXusxIDMXwjx97aSBaTe4jrQzfY=
Subject key identifier: DB:4C:4E:68:47:64:84:3D:C4:33:AE:81:EB:11:81:56:FC:C4:81:4B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A5121EE9A093A3447BB68E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/300b14c2-a781-3259-b6be-935b7e4b9b74.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 393667
IP address blocks: 2001:470:69::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:21:ee:9a:09:3a:34:47:bb:68:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=dd50014e-a867-4ded-868d-9e239970bdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:53:0e:43:aa:46:80:b1:9c:6b:79:98:3d:f4:
22:96:8b:93:ea:31:95:e2:90:34:36:de:af:92:ff:
7f:86:a9:96:52:ac:81:7c:e3:c4:a8:aa:f0:8b:0a:
cb:0a:8a:d4:33:30:53:9b:d5:59:bf:63:ae:ea:98:
62:a1:3c:8a:db:0e:99:72:0a:4c:54:fc:d2:ba:3a:
6e:9a:09:66:0c:15:c6:70:98:08:ed:d5:bd:66:38:
ca:7c:47:da:09:04:ad:b3:f9:ca:29:e5:33:8c:55:
bd:99:9b:b1:74:55:24:c0:8f:13:6f:2c:90:96:bb:
9f:40:fd:9e:1b:b3:b7:02:5f:f8:92:61:bc:94:53:
93:25:4f:7f:77:53:05:98:c2:55:97:0f:ae:27:b3:
3d:b2:83:81:fd:70:5d:91:58:43:a1:15:67:92:e3:
3b:36:76:64:32:b9:fa:db:dd:d0:6e:98:4d:08:11:
ab:d4:d6:d7:0a:98:f2:39:72:b2:b6:79:61:6d:d7:
94:67:8d:ed:95:50:59:4f:36:fa:65:c4:cb:09:c4:
34:f9:80:e3:fd:32:87:3c:95:0c:2e:7b:21:d9:e2:
b3:62:4f:b5:03:b5:2f:90:7f:36:00:29:51:74:59:
d6:19:e8:c6:74:a0:b2:60:cb:df:d5:f1:f7:40:67:
83:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4C:4E:68:47:64:84:3D:C4:33:AE:81:EB:11:81:56:FC:C4:81:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/300b14c2-a781-3259-b6be-935b7e4b9b74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:69::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:63:5d:1f:23:8d:94:ac:52:45:5c:fb:db:49:15:3b:79:4e:
5c:54:b1:85:2e:4d:5c:43:b0:e0:2d:ca:ca:4f:70:a5:8f:bd:
6b:1f:01:c2:73:68:dc:6d:f1:0b:3e:9b:82:c5:90:d9:9f:ad:
a8:ae:97:8a:03:77:44:42:05:9a:f9:e4:e7:e5:c7:81:c6:5e:
e7:ab:23:ee:6b:7f:b4:b1:59:12:41:bc:3a:d8:d1:db:00:32:
36:94:b6:0c:a5:d7:70:b6:6e:9b:d6:69:fb:65:16:b2:ff:7c:
b0:99:42:c4:b7:ab:a5:75:3e:ce:5b:92:66:08:cf:f6:90:b2:
2e:a8:cf:03:e8:e5:97:be:34:46:82:84:5f:0e:88:88:76:ff:
fe:bf:c7:e8:be:e4:98:8b:7e:58:cf:97:fd:f4:b5:83:b5:25:
06:87:a2:b6:48:be:f4:23:89:7f:4e:71:d1:de:19:1e:10:97:
b7:21:d3:7a:36:8c:b1:25:2c:64:64:4d:ef:ea:4f:69:98:0e:
30:44:ab:f7:c7:35:cb:5b:cd:cb:82:f8:88:29:a5:7c:7d:ea:
b2:c0:d5:bd:61:08:40:09:b9:a6:18:26:79:53:d6:94:3b:ed:
8a:04:f8:a3:8f:7e:d9:8e:bf:d6:ce:b2:c2:3a:93:78:2c:db:
f4:18:6b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:04 2023 by rpki-client on console-fra.rpki-client.org