Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cf54fd9-540a-30f2-96d2-0deb0dcef728.roa
File: 3cf54fd9-540a-30f2-96d2-0deb0dcef728.roa (raw, json)
Hash identifier: ybU7tGlA9X0iu04icWpUSo52M0NWLDvH4j+YOwMvrbY=
Subject key identifier: CF:22:96:FB:2F:D0:EB:C7:C5:F5:F5:07:3A:42:CC:31:B9:19:5E:8E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285841182DD5AF74B9CC22E8A28500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cf54fd9-540a-30f2-96d2-0deb0dcef728.roa
Signing time: Thu 02 Mar 2023 12:00:00 +0000
ROA not before: Thu 02 Mar 2023 12:00:00 +0000
ROA not after: Sun 03 Sep 2023 04:00:00 +0000
asID: 397165
IP address blocks: 2001:470:15b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:18:2d:d5:af:74:b9:cc:22:e8:a2:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 2 12:00:00 2023 GMT
Not After : Sep 3 04:00:00 2023 GMT
Subject: CN=8516b751-4f08-4981-941b-e16cb217f940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:97:86:2c:17:1b:00:cb:c7:87:46:df:a1:
97:92:24:5f:41:fc:f9:38:d4:6a:c5:ea:a3:53:b2:
23:1c:f7:9c:53:94:f6:b7:a6:47:54:53:cc:63:70:
27:b0:ea:58:ea:f4:98:74:50:d5:6d:9c:eb:82:8e:
71:43:71:6d:59:f9:f9:6c:99:b9:d1:ab:44:e5:ee:
2f:a0:51:73:41:d0:b2:d4:46:35:23:ec:43:2b:d1:
db:66:7c:dd:76:0b:bf:9b:36:76:ce:ec:56:8a:61:
60:78:16:84:07:39:60:46:21:76:75:2d:6c:b5:48:
fd:79:50:ae:c3:c6:50:08:d6:39:40:d1:2b:37:5d:
29:c0:03:f2:f4:f6:23:14:0f:23:e4:2a:9c:8d:34:
96:17:f8:07:70:12:64:b1:5a:55:df:3b:45:0d:7a:
3b:2d:c3:1b:33:b4:fd:55:be:de:2b:c9:c5:24:f0:
71:ec:4e:df:49:3f:bf:ef:e8:c0:26:c3:f5:3c:53:
4b:9f:fa:ca:9a:d7:d7:fb:14:de:ec:8f:d5:d9:97:
96:98:b4:f1:9d:55:46:4b:c9:7c:e8:0a:64:e1:df:
1e:cd:e9:a8:1c:66:e3:d9:d3:99:2d:8d:4e:a5:61:
af:92:ff:32:2b:a5:7e:be:d4:a2:b8:b2:3f:61:01:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:22:96:FB:2F:D0:EB:C7:C5:F5:F5:07:3A:42:CC:31:B9:19:5E:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cf54fd9-540a-30f2-96d2-0deb0dcef728.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:15b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:4a:48:5c:74:0b:85:14:13:14:f0:ac:81:b4:45:fe:ce:e5:
35:42:58:ef:a3:c0:18:68:3f:b1:a2:ba:b3:b4:1c:79:af:b9:
fb:41:d0:e5:83:bd:d1:69:41:3d:71:f0:aa:0c:c6:71:a6:39:
58:a7:5d:8e:f9:bd:69:51:18:a1:8f:26:a2:19:a2:3d:8a:98:
0c:68:9c:17:1c:95:b8:92:b8:69:77:1c:64:a1:9a:f0:6e:86:
8d:c6:27:1a:8f:b7:72:79:aa:7e:b9:57:24:f7:2e:67:bd:ce:
63:ea:b2:6a:8c:9b:a4:cd:b2:7b:93:9c:b0:45:05:f5:12:83:
86:11:9f:10:df:3c:ea:f8:ad:4c:a5:6d:c7:fa:a6:cc:d1:9e:
89:18:b9:2b:7c:27:a1:c1:19:fc:ec:42:aa:e9:c9:f5:46:45:
05:eb:b3:ea:c3:6f:44:3a:26:ad:7b:cf:68:aa:16:0c:cf:01:
f0:45:46:bc:9b:d7:6d:8c:87:f6:91:eb:2d:97:72:05:26:c3:
df:20:73:a2:33:19:85:48:70:b2:09:1a:44:0d:3b:9d:31:ca:
5e:99:7d:7b:0d:ef:e0:5f:86:47:d6:4c:0c:ca:41:6f:ae:9a:
10:4b:c8:ba:4b:d9:eb:0b:0d:dd:cd:8b:13:a6:cd:32:81:1f:
92:bb:b3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 3 04:22:11 2023 by rpki-client on console-fra.rpki-client.org