Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b9bb471-33c7-3370-a51d-b7f697b70f04.roa
File: 3b9bb471-33c7-3370-a51d-b7f697b70f04.roa (raw, json)
Hash identifier: gOss0NMrKGl7JnaMDYgJYGG+HXUJYCiBCOv1UJW6oSs=
Subject key identifier: 25:76:8D:8E:AE:6B:11:B7:9D:65:A4:6C:5E:BE:D8:AC:FE:EA:4C:2F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A506FC237B77CFF284C6540
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b9bb471-33c7-3370-a51d-b7f697b70f04.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 11255
IP address blocks: 64.71.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:6f:c2:37:b7:7c:ff:28:4c:65:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=929ca765-8e76-48fc-8fbe-488f1d63baf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:1d:5b:e9:96:08:a7:e7:6c:89:0d:1f:2b:
6f:af:71:6c:69:4f:85:2f:b0:37:d0:30:ea:b0:af:
59:86:c3:aa:c8:ce:d7:e2:68:1d:74:74:d9:c6:bd:
e6:6d:d0:66:f7:54:79:76:6f:68:52:a5:9c:7e:87:
18:98:d3:a8:38:6d:7d:36:d8:87:47:07:36:ac:97:
dd:27:59:af:b9:4d:50:8a:91:b4:19:e8:7b:c6:fa:
7d:4c:7c:b6:be:99:86:5c:2a:16:f0:6a:d6:c3:02:
06:85:b5:55:8e:c6:d5:50:d2:f1:38:0b:87:52:22:
9e:d2:e7:5a:54:c0:c6:23:97:0e:11:ff:3d:db:2f:
16:ee:ef:c1:1f:5a:02:32:1b:41:43:8a:0e:b4:75:
76:16:61:86:3d:c6:1d:b0:5a:f0:2f:a3:40:d0:7e:
cb:4f:3e:68:58:5b:15:77:70:9e:7f:ed:2e:a1:82:
47:db:5a:76:46:a1:b6:10:0f:54:2a:e0:f9:69:12:
90:c0:2c:b0:70:02:6d:bf:eb:31:a7:1a:d1:9a:e2:
d5:d9:49:17:7a:aa:7c:a2:4f:bc:f3:37:59:4e:9c:
2e:87:b9:5b:c4:b6:7f:b4:a2:0e:12:93:c8:ed:c6:
a2:65:15:1f:fc:6c:d4:de:22:32:d0:2a:60:f2:91:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:76:8D:8E:AE:6B:11:B7:9D:65:A4:6C:5E:BE:D8:AC:FE:EA:4C:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b9bb471-33c7-3370-a51d-b7f697b70f04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.71.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:c6:63:8c:60:3b:bb:2a:10:6a:28:e7:0e:ca:2d:3c:c3:8e:
55:7f:60:09:3e:ef:86:18:da:7e:98:de:d5:4f:30:26:27:1b:
2e:ed:48:85:f8:76:42:19:13:92:6b:70:e4:bd:38:98:9a:02:
5a:22:fc:1e:31:fa:28:bf:6c:72:13:1d:6a:01:96:fb:bb:1f:
53:06:03:fe:a7:78:db:41:37:c5:25:1b:fd:9e:4c:ef:8a:52:
b8:30:60:99:08:50:97:68:6a:e1:81:f5:01:ca:97:20:a1:94:
86:34:77:47:6c:f0:f7:2d:e4:6b:26:a3:f2:f6:5f:b0:32:74:
31:12:85:de:0f:d7:21:91:91:90:9c:25:fe:b4:09:bb:ca:68:
c2:8e:0a:e6:ac:9c:8c:c6:cb:07:04:1d:36:1d:fd:8d:fc:21:
af:73:ef:01:10:4d:d2:b5:60:a0:b4:33:38:51:bf:10:07:99:
33:d6:6f:2a:de:a0:29:b5:60:c4:55:1a:85:e0:17:c1:4d:48:
ee:ee:70:24:97:d0:41:e3:3e:ae:ed:12:91:d9:f5:bb:81:df:
2a:4c:91:e4:0a:c3:6e:f0:1f:c6:35:6c:59:77:36:66:6b:9b:
70:dd:32:3b:f7:88:ba:d0:fd:29:25:ad:bd:be:d7:99:9a:bf:
fd:83:3b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:04 2023 by rpki-client on console-fra.rpki-client.org