Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44c089bc-964b-38ea-a73e-8ba0a6b63b1b.roa
File: 44c089bc-964b-38ea-a73e-8ba0a6b63b1b.roa (raw, json)
Hash identifier: DwdOMFFaCLwP/0Pz3d0CFIWtR7C3PKPQLmAmrKsXJrU=
Subject key identifier: 92:A2:09:9C:99:CE:BE:83:62:13:00:7F:A6:B1:F9:7E:80:7D:C8:58
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285841A3A6415837B3D07C7A5D4600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44c089bc-964b-38ea-a73e-8ba0a6b63b1b.roa
Signing time: Fri 21 Apr 2023 12:00:00 +0000
ROA not before: Fri 21 Apr 2023 12:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 19256
IP address blocks: 2001:470:b6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:a3:a6:41:58:37:b3:d0:7c:7a:5d:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 21 12:00:00 2023 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=7b32814a-27af-4e3d-a038-37f4eae02aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:32:b5:7b:95:85:d9:d9:7b:0a:07:c4:8e:21:
5c:2b:8f:5e:95:7b:4e:d6:ea:2c:10:84:7a:93:45:
88:a7:6f:ad:91:0b:e1:e4:02:2e:c2:ab:94:d6:8e:
7d:0d:6f:a6:ed:88:5f:88:0b:0a:0f:e1:49:7d:a8:
61:8b:e1:98:bb:53:5f:73:4a:7a:20:ad:26:c7:8b:
63:97:b6:71:65:ae:8b:fa:bd:35:45:39:3b:8c:50:
19:e2:c7:5b:79:8e:20:7e:e0:54:30:7e:a5:3b:dc:
28:85:6d:18:56:0c:66:63:65:cb:ba:36:e6:90:51:
42:46:33:c8:dc:ca:30:89:ff:92:a0:f1:f5:21:28:
cf:55:e5:14:bd:b7:e8:ba:18:4e:07:5f:da:a5:d2:
33:89:8f:41:ae:79:dd:6a:8f:ea:e1:f8:1c:17:63:
53:a5:42:4f:a4:eb:a0:de:ac:77:b7:eb:4d:03:c2:
74:17:53:44:eb:1b:04:ea:8d:24:e1:a5:b2:a2:43:
1a:33:e5:ac:ad:b2:78:7a:7b:81:3a:16:db:79:4d:
49:d6:ab:28:a5:0b:e7:d7:f2:e8:cc:1d:ae:53:4f:
7e:6c:df:3d:db:6e:b9:8d:fc:e2:b9:f6:8d:2e:97:
12:93:01:8c:a8:6e:bf:d2:00:6e:36:95:e0:db:5c:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A2:09:9C:99:CE:BE:83:62:13:00:7F:A6:B1:F9:7E:80:7D:C8:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44c089bc-964b-38ea-a73e-8ba0a6b63b1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:b6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:c5:75:9d:94:42:af:05:46:bc:8d:8f:19:35:a0:e3:15:00:
3f:b0:d6:de:85:56:72:bd:a5:46:95:6c:34:23:90:3a:41:3b:
0c:f1:c8:ea:05:b4:3e:27:27:ee:5f:bf:f6:20:76:9a:18:10:
a2:14:9d:b1:5e:e4:4e:a9:fd:1b:71:46:b5:d0:c4:16:ae:7d:
69:dd:83:65:65:b1:54:17:1c:2b:58:58:e3:b3:93:e9:4c:53:
62:8d:43:60:66:a8:73:ee:1f:f9:3b:39:ea:b8:61:47:d2:de:
f6:d2:90:b4:6b:79:8c:d3:d4:1b:78:72:f0:a4:b9:d8:f3:95:
9a:50:2b:ed:ed:c8:83:6e:2a:bf:99:d2:75:1d:ab:5d:03:a5:
13:f2:77:2a:a6:5a:23:e8:1a:11:8c:cc:38:c6:d0:82:35:03:
f4:37:b0:69:e5:54:49:e6:2d:f7:e1:d9:a5:d1:8b:5f:2e:08:
45:66:4a:22:20:99:0b:61:77:6b:83:79:dc:e1:ff:dc:8b:c9:
0a:ee:3e:3e:62:5e:f1:a7:5b:c9:93:84:f3:e0:6d:a7:22:88:
ef:b4:62:f4:2e:a3:b7:1a:b6:4f:e6:78:02:10:31:3b:46:75:
54:ac:14:15:d1:c3:99:e0:b0:51:a0:02:1f:f6:82:d4:17:e1:
62:63:e5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org