Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90cd3e17-adf8-38ce-a06a-0c067775b209.roa
File: 90cd3e17-adf8-38ce-a06a-0c067775b209.roa (raw, json)
Hash identifier: /a9sGo8YkbS4r/W7qy3lanFsivmjscY+xbbiKUuddt0=
Subject key identifier: 0B:E7:47:C5:CE:73:5A:37:96:9E:B9:99:B5:08:A6:C5:DC:21:06:DC
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A513B5E5B48A83C929DA780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90cd3e17-adf8-38ce-a06a-0c067775b209.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 394996
IP address blocks: 209.51.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:3b:5e:5b:48:a8:3c:92:9d:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=25809163-7e81-41f8-9130-3d349ebff9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:b7:00:e3:85:64:52:5a:96:ee:66:a9:e1:
36:eb:53:95:ac:8a:9a:b6:1d:84:3c:d0:f4:0c:68:
63:9e:08:93:c7:41:12:44:f3:5a:7b:e7:ab:9f:1d:
5a:20:f3:3c:40:4d:9d:78:82:c1:8e:28:4b:b0:32:
fd:12:39:9f:5e:74:46:83:e1:30:74:79:e1:5e:19:
e6:75:cd:ee:6e:53:5b:1d:06:1d:bc:d4:23:de:d7:
66:8c:e3:c1:cc:c3:a1:78:3c:aa:18:a1:72:1c:19:
37:8d:2a:20:41:18:98:81:f0:08:b3:fe:04:cc:6c:
7d:4d:b7:9a:52:29:b2:24:c5:71:e9:e8:45:30:83:
47:b1:1a:9b:1e:f7:c6:ab:02:24:d3:9a:ab:73:78:
f0:5c:b6:b3:3c:67:d6:c0:e2:04:60:ed:9e:0f:c5:
be:d7:65:7c:77:1a:2e:10:39:ba:ef:f4:8a:6b:b1:
1c:a3:28:d7:b7:37:b9:26:d4:a4:e8:c4:4a:c0:8d:
1f:fd:30:93:ea:d0:c6:dc:97:13:58:b7:90:09:b3:
c7:73:cc:1b:9d:a7:d7:89:e2:8e:88:cc:d4:1e:6c:
7b:3e:67:af:d3:b8:a7:aa:ec:0b:17:75:14:67:3d:
2c:52:ac:13:4d:26:c3:67:ad:45:36:11:d9:12:45:
4f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E7:47:C5:CE:73:5A:37:96:9E:B9:99:B5:08:A6:C5:DC:21:06:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90cd3e17-adf8-38ce-a06a-0c067775b209.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
209.51.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:58:6f:c6:83:8c:62:8c:e8:c3:03:04:40:32:30:c0:cc:58:
50:39:69:4d:19:5c:05:7e:6d:82:03:99:de:3a:79:9a:8e:08:
60:7e:6f:31:8e:3f:17:58:23:fe:aa:00:b2:38:bf:12:d9:63:
99:42:d8:e0:90:c1:85:de:e3:a6:04:92:fe:cf:6c:e2:59:47:
28:b5:5d:f6:ef:af:bb:74:c0:98:7a:94:78:0b:f5:a0:73:29:
25:de:bd:2a:0e:6f:b7:02:cc:e7:d0:59:02:6a:e6:ad:e3:cc:
65:41:fd:24:0b:fe:de:c8:5e:af:99:40:62:e3:1a:6f:1e:1d:
2b:3b:4c:f4:3e:3d:c5:b6:98:4f:5b:ff:6a:c9:82:a5:7a:82:
dd:3a:db:73:f5:0a:09:42:bb:2d:b7:60:34:8c:7c:29:fc:32:
9d:a1:d8:5c:f9:fd:fc:4d:fd:6b:2b:56:64:d4:03:39:9c:b2:
e0:1c:b6:5d:53:20:db:bd:26:e8:f0:1e:bc:e5:26:01:0a:17:
45:13:f0:31:a7:62:8d:e3:60:04:ab:51:a8:e0:0e:51:f1:75:
43:67:e2:b7:25:70:81:c5:49:bc:1b:8f:f1:8f:bb:eb:58:32:
ef:df:34:b4:5e:88:d7:ef:b0:c0:93:6d:41:29:61:3b:ad:bf:
32:2e:4f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:05 2023 by rpki-client on console-fra.rpki-client.org