Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e5b3a79-a41d-30c0-a72e-a6142cf05124.roa
File: 8e5b3a79-a41d-30c0-a72e-a6142cf05124.roa (raw, json)
Hash identifier: G6MgNR85Wa2ELsVV1M+8IM0AsqONv7PTWf7pmDm/Myo=
Subject key identifier: 69:EB:8E:B5:C5:7A:B0:51:11:E7:82:35:24:60:25:49:1D:38:CA:0D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50F556832BFF84F78EF980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e5b3a79-a41d-30c0-a72e-a6142cf05124.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 57
IP address blocks: 2001:470:22::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:f5:56:83:2b:ff:84:f7:8e:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=80281834-4478-4f56-b8a7-6b5eb69a1b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:f6:a0:35:03:c6:67:09:c4:5a:07:f7:0c:
c9:2b:88:cb:23:fc:08:d2:67:29:6e:ee:9a:d2:88:
2c:4b:8f:9c:33:4a:3e:1b:22:9e:86:54:b1:6f:c6:
ba:dd:90:d2:9e:8f:a8:3f:47:1d:17:ce:d0:60:c9:
5d:b1:2c:8f:cc:92:0d:d9:5a:16:12:aa:63:84:71:
58:1f:a1:63:70:e3:7b:79:4b:b7:19:4f:7a:9a:24:
d1:45:a4:52:cb:81:da:94:08:b6:eb:68:30:fc:63:
fb:db:2b:86:6c:92:4e:00:ab:c8:68:e9:08:a6:eb:
78:c0:3a:d0:07:97:01:a0:48:2f:ef:dd:49:30:cf:
42:86:6d:0f:66:07:ac:d4:5a:6c:b7:80:89:7f:86:
62:13:86:30:bf:74:2d:a4:2a:47:0d:53:f4:26:4e:
c6:77:9f:c6:cd:92:4a:73:cc:26:41:31:03:54:c5:
66:4d:d2:56:ec:ef:6b:0c:75:f6:5c:5b:0f:4a:b2:
a8:08:9e:34:01:d5:41:d2:f6:31:cc:98:46:54:f5:
b2:ee:f4:c5:27:f6:4a:6d:68:73:93:ee:59:06:17:
dd:fb:6d:15:fe:07:91:5f:d6:6c:cf:ca:6a:3b:f1:
da:7a:f3:85:a2:5c:c2:70:bd:3c:31:47:27:89:5b:
bd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EB:8E:B5:C5:7A:B0:51:11:E7:82:35:24:60:25:49:1D:38:CA:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e5b3a79-a41d-30c0-a72e-a6142cf05124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:22::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:a1:73:d6:d5:61:37:28:d0:aa:c6:9f:80:f0:5c:0d:83:6b:
f4:a6:a2:8f:b4:ba:d3:6e:0d:6f:d7:db:21:74:96:68:81:8c:
47:fe:f6:a8:1c:2d:7e:b9:57:3a:44:fc:e0:cc:8e:8a:fe:2d:
d0:9d:e2:8e:c1:84:df:7f:12:21:98:56:5b:ad:ec:53:10:cc:
47:71:3e:06:f1:fe:e0:c9:02:4f:07:a0:23:89:40:0f:2b:08:
18:0c:ca:c4:27:cd:57:be:cb:1c:af:86:89:0a:c2:b9:73:ae:
e5:e2:d5:55:7c:34:02:e6:bd:7f:98:65:a3:7c:b9:d4:03:28:
a7:e4:c6:dc:19:0d:06:c5:47:17:2b:0d:11:cf:f7:2d:00:1d:
a5:be:0d:f9:9b:94:33:10:33:cb:2d:0a:c9:54:9d:fc:e2:f2:
9a:9c:9e:0b:1e:26:96:4e:d2:2b:b5:98:e4:09:36:85:f5:14:
cb:e3:a3:96:71:b0:ec:b3:78:b4:2b:35:36:5d:fd:52:12:66:
b9:91:dd:72:4f:fc:c7:a3:86:0e:91:f8:c6:56:b7:36:f2:53:
1b:49:80:f3:aa:69:d4:0e:d1:85:e2:46:35:35:ff:86:e3:46:
a5:f5:82:71:f9:0d:c4:a1:a5:4f:d1:f7:92:bf:b5:bf:c1:4e:
3b:8a:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:05 2023 by rpki-client on console-fra.rpki-client.org