Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/67a7a274-c501-3648-9a4b-f5e9e95ba099.roa
File: 67a7a274-c501-3648-9a4b-f5e9e95ba099.roa (raw, json)
Hash identifier: Ip0KMkzGUH2g+sPOmo9dtWUaPBGRRYpoBH9TvJtcFYY=
Subject key identifier: 38:AB:45:D8:83:66:BB:E7:12:5A:0F:29:9B:CC:81:B9:37:B4:C8:A1
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583E2BE0CFD555646E62839BBB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/67a7a274-c501-3648-9a4b-f5e9e95ba099.roa
Signing time: Tue 07 Jun 2022 12:00:00 +0000
ROA not before: Tue 07 Jun 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 36103
IP address blocks: 65.49.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:2b:e0:cf:d5:55:64:6e:62:83:9b:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 7 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=69ccd3cf-5966-4f50-be20-665365ed4cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:43:04:4c:54:c1:dd:7e:1b:9c:6c:44:b8:
1a:3b:3b:c5:c5:f4:bc:93:6e:6d:f7:24:f1:99:32:
3f:cc:15:3f:c1:8b:73:f4:5f:4d:6f:02:ae:b3:04:
19:e1:a3:3e:07:d0:6e:09:60:11:87:92:0a:10:87:
ac:bf:3f:8b:e3:e9:54:76:12:15:41:74:e2:08:f5:
17:1e:1b:64:6a:b2:f5:f5:6b:f1:bd:35:a7:b9:c0:
f5:c4:5f:78:48:f0:c2:de:07:bc:10:2c:7b:a9:aa:
e5:7d:9a:f8:b1:af:c0:3d:8f:59:e6:f6:9f:69:d8:
4b:2c:09:86:06:cb:d3:41:64:f0:29:47:d8:e9:df:
31:2d:18:16:ff:26:d4:17:27:4a:1b:96:6b:6e:c5:
64:7c:64:11:7e:f6:11:21:a2:60:43:29:3c:4c:cc:
97:d9:34:ec:c6:97:b3:8b:be:d3:ac:6e:20:a4:53:
50:8a:1a:bd:12:77:65:6d:cd:48:29:75:4e:1d:d0:
2a:1f:01:c2:d8:1e:67:7c:cd:3f:95:80:0a:c0:99:
48:d4:68:20:d7:34:d4:57:c0:ee:50:be:21:9e:dc:
5b:33:d5:d4:8d:12:6b:d4:9d:e8:ea:30:36:e7:f3:
e8:b7:b0:11:49:72:d1:c0:e6:4b:3d:9d:aa:74:81:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AB:45:D8:83:66:BB:E7:12:5A:0F:29:9B:CC:81:B9:37:B4:C8:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/67a7a274-c501-3648-9a4b-f5e9e95ba099.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:f4:10:4d:a7:b5:c4:db:21:f2:de:4d:8a:6a:b2:29:9d:be:
c6:91:a9:61:ac:2b:89:af:65:1d:a7:24:4f:43:03:72:c0:75:
51:da:00:a8:d2:4e:67:5d:47:46:f3:0b:f2:c8:7b:a6:26:3f:
38:7c:5d:29:d2:00:9d:c0:ef:e0:36:00:8e:2c:02:96:85:bd:
6d:f6:08:50:8c:89:50:e1:1c:e2:fb:df:11:8e:95:ef:66:99:
fe:bc:61:34:45:06:46:85:58:de:ee:d5:28:7c:e9:14:d9:ce:
d8:0c:15:74:a3:28:b2:5f:ac:d9:2b:9d:2f:ee:f6:23:13:fb:
94:a4:af:72:b3:96:68:c8:a6:7a:da:38:a7:b2:23:43:28:50:
d0:31:cb:b9:e8:dd:27:f6:07:48:3d:63:b9:3b:b8:95:dc:5d:
0d:c8:74:e6:1f:15:a7:f9:98:87:9f:02:8d:85:dd:fa:8f:2e:
5f:fd:b2:44:90:11:9f:ec:ba:65:10:6a:33:3e:ea:ec:3c:c6:
be:56:7a:19:1f:7d:76:d7:4e:ad:47:f8:c9:c2:b6:65:33:7b:
8d:a2:1b:4a:27:6e:67:4f:3a:af:cf:c7:4a:b8:ef:47:19:f4:
aa:72:7c:0f:79:61:d7:b9:ff:1f:af:7b:24:df:4b:0c:29:2b:
5e:9b:63:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:43 2023 by rpki-client on console-fra.rpki-client.org