Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61d8c2f9-acaa-313e-be4b-da22cda68d4a.roa
File: 61d8c2f9-acaa-313e-be4b-da22cda68d4a.roa (raw, json)
Hash identifier: ytiOnvAaGjU4+l36BYTjgCm4ox2YWr5slnONQrZy0+w=
Subject key identifier: E0:29:2A:74:0D:B3:11:8F:59:24:06:15:46:18:63:C3:36:6E:A6:CF
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D7935EF14BCA072C3783847C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61d8c2f9-acaa-313e-be4b-da22cda68d4a.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 36103
IP address blocks: 65.49.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:35:ef:14:bc:a0:72:c3:78:38:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=cfe60e28-96cb-45c8-b371-c8ce7d3501a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5a:d3:2a:de:43:75:07:0c:f9:34:75:92:99:
64:8c:cf:0e:3a:3e:05:72:46:cf:cf:fb:b2:95:c5:
a6:3a:5b:7d:06:f4:ef:71:70:4e:91:38:70:06:e2:
a2:23:b1:09:85:8c:85:e6:fc:ec:e7:6c:d2:27:fe:
ff:03:43:29:f7:de:dc:b4:9d:50:95:63:5b:a8:5b:
10:b5:38:5b:84:d9:8a:30:36:e0:da:95:a9:54:1e:
de:b5:22:00:ac:6b:2d:68:91:48:65:8c:33:79:63:
d5:6b:2d:30:1a:d1:0c:e9:a2:4b:ef:71:e6:86:07:
a7:2a:7e:cd:c3:6b:bf:40:ca:b3:29:0d:0b:63:42:
33:79:7a:9b:40:c1:8d:1a:c8:88:37:82:0b:69:ed:
a4:44:a1:da:0c:d6:b9:62:f6:ca:30:71:e8:73:6b:
27:d9:e5:b0:c2:4f:f6:dc:6d:a5:62:63:82:4c:7d:
2d:41:93:6a:da:94:b5:f2:8b:c6:4a:0a:f1:37:0a:
61:1c:32:e6:af:6f:bf:03:0d:de:c1:f8:49:58:27:
02:45:93:b6:6e:55:29:17:86:05:7c:94:2b:64:38:
b1:02:81:13:03:b8:71:53:89:27:d2:b2:3f:1b:f0:
7b:3e:13:c3:0c:5a:30:02:b5:b2:bc:e8:46:4f:02:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:29:2A:74:0D:B3:11:8F:59:24:06:15:46:18:63:C3:36:6E:A6:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61d8c2f9-acaa-313e-be4b-da22cda68d4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:0c:17:ec:36:2d:86:59:8a:7e:a3:78:95:2a:6e:b1:3b:4d:
ea:9c:d8:84:87:f9:00:f3:ef:1e:f2:52:fc:31:81:11:d7:4a:
02:8e:40:c8:50:7d:da:d5:31:34:7e:6a:b0:ab:b8:90:b5:1f:
76:0a:9c:40:1f:37:77:6a:21:a9:48:47:2f:6a:8e:fa:67:c7:
a5:80:d3:87:0c:6b:d7:6b:38:de:5f:85:83:80:4d:75:6b:94:
40:ac:ce:8d:43:64:f3:63:e4:35:8e:5f:8c:ca:b5:68:fd:32:
d7:bb:1c:95:91:b9:5b:0e:1a:ee:4d:00:37:63:db:7b:64:99:
39:eb:c4:ea:c1:dd:5a:b3:05:90:cd:22:ed:59:df:a4:d1:23:
3b:68:a3:23:0c:3f:50:65:5e:3e:ae:69:2a:af:75:e8:fc:7a:
aa:ee:98:ce:35:d7:8e:37:54:9d:a4:ec:5a:db:6b:46:06:41:
74:4a:23:8f:df:88:57:94:4f:02:2f:a1:47:6d:dc:fb:73:b9:
74:71:d6:5a:31:d5:79:fd:55:d7:82:e2:67:82:d6:03:b7:4c:
20:82:a4:44:f3:d6:2f:b2:dd:c5:89:4b:81:5d:27:c3:49:9a:
9f:74:73:29:30:99:1f:6d:38:9a:81:97:45:da:e7:67:2f:a7:
b8:ba:f8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:42 2023 by rpki-client on console-fra.rpki-client.org