Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40f2366d-898a-3f99-a6b4-923ef2109cc4.roa
File: 40f2366d-898a-3f99-a6b4-923ef2109cc4.roa (raw, json)
Hash identifier: Zm9u5lSOju9gvqlsfoVMdQYszqQy1hG6h3CMZ0tbdMk=
Subject key identifier: D0:9E:F1:CE:83:90:D2:88:E7:97:99:0D:0F:D2:A4:69:C2:44:19:40
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A51152B62131D7E15DB6380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40f2366d-898a-3f99-a6b4-923ef2109cc4.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 36225
IP address blocks: 2001:470:90::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:15:2b:62:13:1d:7e:15:db:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=87ed4b99-b347-4ba8-8e1d-884e7be4a9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5d:fe:2d:2a:e2:33:47:74:57:db:68:b5:d8:
83:6d:fd:94:3b:a1:ea:03:de:be:14:83:9e:eb:f3:
84:8d:22:93:cf:a1:fc:8b:19:d3:d7:7f:08:40:dd:
61:42:b8:8b:68:24:f2:39:31:95:ef:aa:0e:b6:c5:
04:7b:39:2f:e0:53:6e:5e:f8:b1:c8:9b:ce:74:c3:
57:de:06:80:70:c3:8a:8e:ec:1c:c7:80:4b:b6:c4:
ed:45:76:66:40:d5:e3:e4:81:09:1e:ae:ec:9f:d4:
0a:36:e9:28:03:ac:02:f0:7f:47:3c:61:a3:4a:e3:
a9:33:22:81:49:5d:7b:35:9f:e7:fa:73:9d:47:d9:
1b:bb:cc:e2:34:84:b1:0a:cb:2c:ea:d6:1a:be:02:
9a:5a:3c:b8:6a:19:80:1e:bf:e3:1c:b9:15:15:43:
ce:1b:f1:6c:c8:ae:8c:4b:83:22:50:08:53:e9:5c:
f2:93:7c:3a:b9:d0:86:25:aa:d9:b3:5b:19:b4:66:
fd:1a:f5:b4:34:88:5e:6d:50:b7:1d:ea:f3:ad:5d:
86:57:81:79:09:71:1e:ce:ea:91:6f:b8:56:44:2e:
58:c8:4a:b7:76:3b:17:1b:ea:51:0a:2b:d4:95:d5:
a8:30:86:e3:6d:06:b6:2b:51:af:e9:02:50:5f:6a:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9E:F1:CE:83:90:D2:88:E7:97:99:0D:0F:D2:A4:69:C2:44:19:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40f2366d-898a-3f99-a6b4-923ef2109cc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:90::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:6e:8e:70:2e:52:95:6f:86:6f:87:57:cd:99:f5:b6:4f:91:
2d:9c:af:df:a2:45:98:25:fd:03:ce:32:bb:f6:8e:90:8d:0d:
e9:7e:c3:7d:93:d8:c4:95:01:13:c1:30:c8:d8:9d:d7:2c:f1:
cc:57:ab:a0:9f:9d:7a:b2:4c:ff:69:a9:1d:b7:f8:02:27:d0:
45:22:cf:b3:95:7d:73:40:4d:b9:cb:8d:a2:d3:b8:7e:8b:55:
6f:7d:9a:4a:36:c8:3e:64:7e:fd:69:41:23:60:1e:09:10:a4:
b1:49:c2:40:64:52:26:dd:0e:77:95:e0:e8:6f:1c:a5:41:b4:
1e:dd:65:e4:ba:b6:05:81:3e:d1:6c:d7:af:ab:e3:b0:95:6a:
94:d9:52:5f:76:75:1c:d7:ff:39:9d:c3:36:b6:37:61:71:7a:
56:3e:bc:8f:d0:5e:0f:19:43:ff:f5:10:cf:0c:7a:18:7a:64:
75:32:d3:c3:46:d8:1b:e8:b8:92:55:24:01:fa:98:41:95:ed:
96:8e:94:a6:ce:ec:59:f1:33:0c:b3:88:05:12:1d:72:1c:df:
6f:3e:d2:db:86:ff:8e:43:e5:6e:44:af:c7:8c:b9:eb:19:3e:
2b:16:2d:db:03:5e:c0:9b:02:00:fa:70:8f:e2:a3:c1:6a:c2:
aa:13:1c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:04 2023 by rpki-client on console-fra.rpki-client.org