Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/301b0c7c-fbef-3cc0-8cf9-ab8039be6199.roa
File: 301b0c7c-fbef-3cc0-8cf9-ab8039be6199.roa (raw, json)
Hash identifier: z1UMdbRYO/6bm422Ate2BRR9Z8Yaa1oqNSzNpTMO8NM=
Subject key identifier: 44:11:6C:9A:91:77:B6:24:78:9D:38:E6:99:E3:6E:36:4F:C5:C8:51
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D7935A269FBCE49D334331800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/301b0c7c-fbef-3cc0-8cf9-ab8039be6199.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 33941
IP address blocks: 64.62.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:35:a2:69:fb:ce:49:d3:34:33:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=3582a705-2ade-472b-af6d-da38de5f4732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:99:18:39:c4:c8:4e:c9:be:88:11:0e:35:
b3:46:cb:54:e2:ab:ad:d6:2b:c7:c9:16:34:f5:59:
7d:ed:f8:f7:b8:85:43:24:d1:16:22:fb:12:a9:66:
91:69:ca:a9:1a:fa:40:b5:4c:84:d0:95:ff:e4:dd:
ea:76:99:a1:9d:de:00:e8:69:06:33:66:77:eb:ef:
6b:fe:38:bd:77:54:de:9b:44:7d:b7:f1:ee:88:73:
07:38:5a:84:0e:b2:55:83:0d:3e:ec:46:29:f7:8a:
fb:12:c1:72:17:b3:cf:6a:47:e6:5f:c0:d1:50:4e:
80:02:63:8c:5c:eb:b1:6c:1c:97:75:90:4b:42:36:
e8:89:86:3a:58:8f:61:93:31:16:6a:0e:38:81:e6:
02:59:05:dc:0c:35:29:9c:82:a2:8d:35:db:aa:99:
1a:1f:68:ca:c9:28:29:60:13:24:2c:00:02:2e:8a:
9c:a2:25:52:22:4a:99:99:b6:41:36:de:be:7a:b0:
ae:8e:47:51:ff:e0:c0:2b:c9:07:ab:30:59:f4:84:
3a:d9:4a:c8:8d:c2:99:b4:cf:e0:28:29:f3:d1:d2:
f0:10:cd:cd:89:96:89:99:5a:41:d0:5e:85:7b:7e:
16:4e:6a:54:2e:2d:07:7f:45:15:43:04:f1:24:35:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:11:6C:9A:91:77:B6:24:78:9D:38:E6:99:E3:6E:36:4F:C5:C8:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/301b0c7c-fbef-3cc0-8cf9-ab8039be6199.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:2e:6e:77:b2:0c:67:3b:b1:00:66:4e:50:43:0f:7a:80:ca:
de:00:d6:c7:6a:48:9b:53:f5:64:4f:30:6a:14:9f:0d:3a:c6:
03:3b:da:ac:5e:9b:cc:f8:b1:16:03:26:50:5e:46:57:ab:c9:
7b:b0:f2:ed:8d:92:b2:9f:58:e9:95:68:da:c1:bc:fe:49:00:
25:39:c7:60:f8:bb:3a:e5:d9:3e:63:fc:72:70:45:5d:97:79:
4a:ea:c0:8a:2a:80:fd:30:48:44:18:b3:74:81:0c:50:96:0d:
dc:ed:90:02:13:1c:b3:8c:ba:0b:eb:31:15:ba:c2:7e:39:4b:
8c:14:19:25:0c:09:c7:84:63:6e:da:5e:b8:d1:03:b8:22:af:
49:c0:fe:36:64:87:b3:82:55:f5:28:d0:91:e8:b0:3f:f0:7e:
62:71:99:13:d5:47:ca:82:53:ed:cc:cc:27:ec:78:46:fc:0c:
a6:43:d6:61:a7:db:d8:ce:70:03:4a:76:30:e2:09:e5:1b:54:
c0:e5:7f:93:e8:ad:d3:ea:1a:30:0a:42:fc:b1:7a:f2:81:6d:
f0:a4:b9:83:54:de:dc:57:b5:dd:21:88:88:46:91:63:b2:05:
e7:46:f2:7a:49:1f:85:a0:8f:aa:ac:32:aa:29:9f:e0:35:b9:
7f:f0:8a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:36 2023 by rpki-client on console-ams.rpki-client.org