Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5caa7d8f-6e29-38b1-82bd-77d0e27926e8.roa
File: 5caa7d8f-6e29-38b1-82bd-77d0e27926e8.roa (raw, json)
Hash identifier: do2BGWlPEblfONnQ83xyZpx1m343Muq4/s3eIGPue1g=
Subject key identifier: 9A:18:2B:A8:EE:06:E4:37:38:2A:91:2B:3A:ED:4E:F5:F6:0D:A2:82
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50E892B30833BED8F9DBB0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5caa7d8f-6e29-38b1-82bd-77d0e27926e8.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 25943
IP address blocks: 2001:470:e5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:e8:92:b3:08:33:be:d8:f9:db:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=6aed5bd7-36ce-4549-8b88-ce69574c3555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:1b:18:28:b1:25:52:07:d2:98:d3:bf:fe:
aa:69:6d:d9:b6:14:66:d7:ad:e3:af:13:e3:07:8a:
08:6b:46:a5:cf:f0:2e:af:2b:f8:42:c7:1f:74:6d:
03:e9:7e:9d:d8:23:fa:8e:7e:86:b8:1b:00:07:ad:
fe:fc:d3:c6:5f:e1:92:bd:58:e7:10:1c:95:9d:b4:
5f:24:2e:32:3a:cb:1a:71:b8:7c:4d:70:41:bc:9e:
e0:56:9d:a6:0c:df:e5:d9:ab:42:70:a9:12:fa:4e:
9f:c1:31:4f:0b:a1:f9:03:bf:e2:ef:8e:9c:4b:b3:
12:0d:2f:04:93:5e:e3:58:fc:7d:05:f2:43:14:e0:
8b:ab:c0:9c:f5:1a:45:53:0f:8d:7f:e3:4d:28:c2:
86:2c:69:9b:73:69:86:2a:cd:2e:93:a3:c8:99:fe:
63:e4:f6:2b:ba:e1:c0:09:65:0e:81:01:14:53:3a:
52:55:89:01:fc:93:35:c7:9c:2e:e6:46:cf:b3:9b:
bb:aa:7a:e1:c4:a5:24:98:f5:bf:f3:3f:cb:c0:54:
c6:14:e3:34:3a:7b:80:3d:60:83:22:4b:28:5c:7f:
e0:5e:3b:29:f7:ae:5f:3b:56:df:7f:6a:84:f0:a3:
5e:d4:c3:1f:a2:4f:8c:0d:4d:13:80:8a:65:d1:c5:
19:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:18:2B:A8:EE:06:E4:37:38:2A:91:2B:3A:ED:4E:F5:F6:0D:A2:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5caa7d8f-6e29-38b1-82bd-77d0e27926e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:e5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:1b:c4:09:ae:18:73:71:a6:29:f1:29:a8:1b:8e:a0:b5:ce:
16:fd:30:e0:48:12:4e:30:06:bb:f0:81:37:52:81:68:86:83:
56:ff:1b:67:ad:dd:01:8a:6a:c6:81:b0:2f:d0:3b:86:ae:d3:
f7:af:f9:34:f2:af:2f:a5:71:77:38:37:4c:17:dc:cf:f8:16:
8c:ac:60:82:52:bf:e0:05:68:6c:ed:a4:5b:bd:32:75:ea:2b:
f7:98:42:07:00:67:bd:8a:df:62:f4:ad:a4:57:1d:08:38:08:
88:bd:4d:b7:60:0f:7c:df:dc:9c:2e:68:7f:7d:13:03:86:04:
f6:a6:54:b4:e5:8e:79:03:b0:bf:0e:5e:67:d5:42:48:f8:ff:
d3:5e:5a:2e:60:f8:07:74:ad:7c:e3:04:f2:19:db:b7:ba:76:
d5:2b:b8:10:32:d2:a4:29:ad:d3:c5:97:b0:53:66:30:88:dc:
41:b8:d4:4a:02:95:90:b4:24:8c:13:b3:60:94:8a:07:0a:2c:
dc:57:50:ec:02:0a:e2:c5:ff:e1:93:ea:90:29:0f:1d:3d:d6:
27:1f:77:b9:de:54:c1:27:35:c1:37:30:c0:b1:f9:06:db:e7:
ec:15:bf:ff:65:c7:9b:f1:a2:37:57:17:a2:b9:56:96:7e:09:
71:b8:ce:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:04 2023 by rpki-client on console-fra.rpki-client.org