Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f93e318-fd5c-33cd-a3e1-dc03ee643938.roa
File: 8f93e318-fd5c-33cd-a3e1-dc03ee643938.roa (raw, json)
Hash identifier: OzGvFHRVnvqmnwA/ehMPrsGhZUqq9InyoLH2na/8H1A=
Subject key identifier: 8C:94:8A:E8:FF:01:7F:50:F0:12:3B:7A:BC:7C:59:64:F0:D6:38:0D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A51114E0F93A4C93C195C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f93e318-fd5c-33cd-a3e1-dc03ee643938.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 36103
IP address blocks: 2001:470:e4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:11:4e:0f:93:a4:c9:3c:19:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=7e9b9e48-0f3c-461f-a09f-11ce0f56bc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:5b:ff:bf:83:26:2a:a2:3b:e4:10:66:ae:
57:91:93:7e:2d:cb:c7:8c:d8:c1:1d:d1:36:d6:26:
9c:a7:94:d8:c7:b4:ea:d4:1e:23:6a:06:9b:bb:10:
b6:83:ea:71:cc:0a:eb:0e:de:ac:c3:aa:26:d5:b5:
98:40:cd:3f:24:60:8b:58:e8:f5:70:5c:62:d5:5b:
ae:bc:72:e1:a6:85:39:f9:30:97:22:61:7c:d4:cb:
ec:7e:e1:4e:d8:3f:66:18:76:c3:cb:5c:a2:18:f3:
d1:8b:31:50:11:d2:0a:48:9e:a2:f4:dc:05:2a:b8:
62:fd:a7:da:a9:82:30:05:40:21:62:c1:50:f8:3e:
a1:f7:2b:28:b6:5d:fa:6d:23:36:3e:e2:c0:6d:90:
8d:ee:ee:09:28:b1:9b:ee:39:d5:fb:57:c6:ea:73:
a1:d3:40:2e:0e:d6:47:e1:2a:17:71:13:5c:fc:98:
06:4f:82:b4:98:42:30:75:21:73:63:f0:0c:74:29:
99:1b:b4:46:eb:8a:2d:f0:6b:67:5d:38:ad:09:a1:
fb:8f:03:6a:52:cb:3d:b7:02:6d:67:22:86:12:27:
e6:9d:2f:ff:a7:9e:c0:56:dc:51:d4:c3:d6:aa:74:
9b:55:b5:33:6e:b7:76:93:98:cf:99:94:87:20:7b:
39:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:94:8A:E8:FF:01:7F:50:F0:12:3B:7A:BC:7C:59:64:F0:D6:38:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f93e318-fd5c-33cd-a3e1-dc03ee643938.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:e4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:a2:ae:d9:15:39:fd:7c:2e:39:71:6d:a6:bd:02:f9:70:9c:
fd:44:4c:bd:a9:dd:37:4a:e3:32:a1:46:c7:9b:b4:76:a9:0f:
59:ea:fc:f5:af:40:2e:bb:c8:bc:f7:ba:04:6a:7a:27:00:1f:
7c:70:56:3d:4e:83:df:21:a7:7a:a9:43:ed:0c:00:3a:bb:5b:
5d:59:f3:cf:16:d8:e3:2e:fb:a1:15:ca:a7:d7:d1:a4:42:9f:
6b:71:36:c9:a2:4f:54:b6:d5:b2:c1:64:97:a8:9c:05:6f:28:
98:64:4b:e2:c0:12:d5:1e:b0:74:cb:af:5d:e6:d3:2b:ec:29:
bd:40:92:6f:10:09:e7:f1:cc:46:5e:7a:90:27:5c:de:63:d3:
68:64:d4:b9:2c:20:3e:f7:18:36:69:2c:8e:dc:93:3a:d2:42:
ca:4f:21:05:95:ea:4f:ba:01:9d:45:d1:95:f2:25:64:e8:55:
1f:61:01:c7:04:13:a9:12:c5:11:e1:75:83:0b:24:1c:be:32:
18:e0:99:91:a6:c6:9a:97:61:29:18:c1:59:97:77:78:a0:a7:
35:4f:e4:86:59:38:3a:c1:35:f2:f3:89:ad:53:0c:5f:99:e6:
85:81:14:1b:a9:21:98:f9:52:d4:83:c3:c8:c4:22:0e:8c:8b:
23:d6:6c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:05 2023 by rpki-client on console-fra.rpki-client.org