Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7fa8f4ce-7e13-3389-a1fc-492c0184d035.roa
File: 7fa8f4ce-7e13-3389-a1fc-492c0184d035.roa (raw, json)
Hash identifier: P/N5lN4Xm7TOoZKY4JASGWFZX74BPBCJ0PMXCTO55eM=
Subject key identifier: EA:9E:76:0E:5B:D5:A2:9A:8D:94:80:03:A3:FD:19:6F:27:9D:F5:58
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D7935E20A7E8EB632D35E9580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7fa8f4ce-7e13-3389-a1fc-492c0184d035.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 36103
IP address blocks: 66.220.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:35:e2:0a:7e:8e:b6:32:d3:5e:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=d6c20ee4-096a-442e-9ee5-6578f303566f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0d:84:61:20:0c:71:21:52:cc:be:bc:85:a5:
7f:dd:cf:f3:b4:01:94:3d:51:62:7a:2b:ee:a4:66:
2c:ab:da:e2:2b:f1:d1:7f:f4:82:87:ba:21:24:eb:
8f:0b:52:c5:5a:b3:49:94:98:b1:9e:c4:5c:50:58:
f1:8c:f2:a4:fa:f4:87:25:1c:2e:5f:24:d6:24:7b:
e6:28:fc:85:48:3e:1b:0d:1c:00:c7:dc:be:c8:5e:
37:2d:a5:92:0d:61:1e:dc:53:43:9b:87:29:9e:37:
d4:ce:bf:1b:2b:e8:ad:f1:76:85:05:18:9f:9d:79:
0e:47:49:fc:05:c9:a2:d9:d7:f3:91:5b:77:54:c0:
a7:37:bc:33:ab:7e:2d:70:2a:d3:4a:22:88:17:9e:
0a:6e:8d:73:9f:ea:3d:99:42:eb:98:4c:09:d1:fc:
32:88:01:26:35:f4:8e:4c:cf:e1:9a:3d:40:7c:b9:
fd:0b:77:ed:40:d1:42:66:e1:52:a2:1a:40:61:da:
cb:9c:04:21:a8:96:ae:73:e6:ce:be:0e:66:fc:4a:
70:81:a6:21:1f:55:18:3b:f0:2f:85:98:26:7b:ab:
71:be:3f:3b:b6:57:47:d0:7e:22:38:05:77:ba:53:
e8:83:6e:55:f7:2a:d2:81:60:9c:53:bc:81:05:20:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9E:76:0E:5B:D5:A2:9A:8D:94:80:03:A3:FD:19:6F:27:9D:F5:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7fa8f4ce-7e13-3389-a1fc-492c0184d035.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.220.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:c7:6f:e8:3e:84:de:b5:05:d1:d5:16:bc:8e:89:70:1f:1a:
e2:7f:e6:40:f8:9c:cc:ac:0d:c9:dc:89:ba:b1:b8:ab:a4:eb:
76:52:a6:f0:c2:93:cc:37:6d:a9:65:b1:28:a8:78:c8:6a:82:
80:96:f7:7e:ce:77:83:11:28:c5:63:4e:e8:ec:ae:77:8e:63:
7d:61:3d:06:70:9b:5f:19:86:0c:3e:07:62:be:14:ac:18:ee:
f2:a4:79:9b:c3:52:96:7e:6b:a1:2b:8e:f9:46:34:97:78:54:
3a:24:61:0a:2d:8d:57:a6:3e:71:74:e9:23:c9:e5:89:8e:b5:
91:35:17:d0:a6:a8:cc:57:2a:07:69:ad:62:ba:62:87:ea:e0:
c9:61:f9:ff:a4:3d:da:b4:92:e7:76:9a:e6:bf:19:87:22:9a:
01:b5:e5:98:70:70:dd:ad:e4:60:40:98:72:d3:fd:d4:07:54:
40:c9:75:5d:9e:a3:72:81:61:cd:f3:78:d1:6b:8f:8e:ff:76:
92:9b:8e:88:a4:4f:6d:1a:6c:f1:79:8b:6f:28:f5:9d:6e:ae:
2b:b9:69:bd:25:fe:88:d1:14:8f:a1:92:e8:ba:03:d4:78:fa:
d5:84:a0:b0:c1:04:16:9e:ea:a2:16:d1:31:bf:64:fb:84:9f:
9e:6a:df:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-ams.rpki-client.org