Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f3fc696-ee52-3c77-b96e-a0eb09ad2408.roa
File: 7f3fc696-ee52-3c77-b96e-a0eb09ad2408.roa (raw, json)
Hash identifier: hn2gLWLozj8gqevEj9+55MFLO4sG6dY3cQ/52Zs6cr8=
Subject key identifier: E8:B1:8A:CA:06:04:DE:87:E4:2B:6E:BC:03:FF:CD:69:4C:47:FD:9B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285842846281FB14BDB6371FBFC240
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f3fc696-ee52-3c77-b96e-a0eb09ad2408.roa
Signing time: Mon 10 Jul 2023 12:00:00 +0000
ROA not before: Mon 10 Jul 2023 12:00:00 +0000
ROA not after: Thu 11 Jan 2024 05:00:00 +0000
asID: 395301
IP address blocks: 2001:470:f2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:84:62:81:fb:14:bd:b6:37:1f:bf:c2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 10 12:00:00 2023 GMT
Not After : Jan 11 05:00:00 2024 GMT
Subject: CN=d1f8ec67-aa11-48ed-a888-9d81e97f8631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:dc:96:16:ef:25:e8:04:a4:f7:b6:30:1d:
18:08:97:79:2d:b1:b3:17:69:5b:b5:e7:af:07:0e:
95:7a:c1:fc:71:01:61:7a:a1:7e:26:d8:c9:91:b0:
7e:98:ec:39:dd:c3:c5:b5:e1:73:53:c3:11:b2:18:
b1:9b:5f:94:bc:0a:92:b7:8e:49:d3:91:7e:9e:0b:
d8:f1:77:fb:b0:7f:6b:b2:02:94:e5:d7:55:66:a0:
1f:48:e6:77:5e:43:f0:c7:86:02:1d:3e:b1:36:4d:
35:63:72:d9:c3:d0:9d:6c:a2:3a:5f:d4:92:b8:52:
7d:72:49:82:15:cc:15:25:57:98:5d:fd:d0:b6:6d:
54:37:0e:79:6d:ee:5b:92:93:50:a3:5d:d1:f3:95:
0d:d3:86:eb:15:8b:d0:db:24:6a:43:22:47:84:74:
19:dd:b8:bb:5a:16:02:8c:62:43:db:07:3f:fd:bb:
f6:53:4d:5a:29:69:56:2d:5b:91:50:83:f8:8b:68:
be:73:59:17:db:56:86:d2:d8:de:27:e2:1e:7b:a5:
cb:a4:8d:d8:cf:10:aa:7f:ef:e7:70:a1:a9:66:2b:
74:e8:75:ef:4e:52:dd:08:cc:c5:6d:be:ac:d6:31:
93:b7:cd:7d:37:68:96:d6:88:19:09:c2:2a:72:f3:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B1:8A:CA:06:04:DE:87:E4:2B:6E:BC:03:FF:CD:69:4C:47:FD:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f3fc696-ee52-3c77-b96e-a0eb09ad2408.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:f2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:e9:71:bf:cc:19:78:c3:ba:da:4e:ee:6c:b6:d1:e1:59:1c:
20:ea:c6:0e:59:62:a1:5a:a3:10:08:5e:54:1f:aa:34:09:1b:
69:c3:f6:28:eb:53:97:3b:16:7a:98:f0:7d:ed:a0:71:d6:a9:
f8:de:fb:e1:4a:1e:b3:4e:b8:28:da:e7:55:dc:0d:ed:6e:0e:
9f:3c:a5:b0:e0:a8:e9:37:b0:a1:4f:2b:9e:c3:e9:70:f1:d6:
d3:43:41:e7:fb:ac:25:ec:0b:22:ae:90:27:f7:23:2a:c8:c5:
d3:8d:b4:95:90:93:a5:6b:53:67:26:86:90:82:88:cf:1f:ce:
f3:50:e0:ab:b3:5b:e0:81:cc:d6:70:a6:27:bd:42:40:7d:da:
37:62:73:65:32:67:b3:f8:a3:9d:51:0a:3b:78:f2:dd:42:bd:
e8:ce:28:f3:0f:99:15:4b:fd:1f:b3:f6:57:c6:a7:25:eb:15:
94:d4:a1:ff:a2:a7:95:9f:2a:bc:4a:8a:48:2e:8f:66:05:93:
60:cf:b4:97:cd:32:dd:ea:79:2c:e4:10:43:ea:e2:d6:e9:b2:
5d:e7:bb:57:68:8f:40:7e:1b:dd:8c:af:d7:07:be:28:32:8a:
24:91:6a:bf:5c:6a:61:b2:05:13:43:b2:55:73:6f:45:43:1d:
50:03:77:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 06:03:58 2024 by rpki-client on console-fra.rpki-client.org