Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/911ab140-a8d8-35f3-ae95-5e90e80d6d49.roa
File: 911ab140-a8d8-35f3-ae95-5e90e80d6d49.roa (raw, json)
Hash identifier: 7rceqT0xXJMz//S+U3R63qfHgJVnAGitXvah3Pt8pHs=
Subject key identifier: CF:12:90:D3:64:C9:EA:5D:E6:56:43:66:B8:F3:EA:97:C1:3D:5F:44
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D7935E850BBC3860073C1D780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/911ab140-a8d8-35f3-ae95-5e90e80d6d49.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 36103
IP address blocks: 72.52.122.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:35:e8:50:bb:c3:86:00:73:c1:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=eaf1302e-4065-4776-a1f0-91093e9a1db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:a0:2f:3f:3c:61:65:0e:b0:86:84:85:31:
f0:be:61:30:78:95:b2:c2:35:4f:cd:ef:fe:6a:0a:
b6:6d:c4:af:41:3a:3e:fc:90:a8:21:e4:80:da:65:
86:31:dc:56:cc:c3:be:72:fa:04:05:de:88:f1:b5:
45:6b:29:cc:64:4d:4e:9e:93:50:ee:24:e2:83:70:
f8:e4:84:37:23:10:ba:0c:4f:8c:b6:78:c7:7e:25:
6e:9a:88:6d:79:b1:36:6a:84:fa:29:5a:99:6d:d5:
b9:24:b4:4f:5b:2e:2f:15:90:4e:cc:ce:20:2a:4e:
f4:11:be:c4:31:a2:28:19:ea:51:ad:79:81:a3:f6:
f4:83:37:f2:27:cf:b2:1b:7f:b9:93:69:d5:6b:4e:
54:1b:b7:2d:22:94:00:0a:40:93:ad:d5:99:1b:86:
34:dd:16:ad:de:da:5b:3b:0e:3f:19:16:48:7c:4b:
af:59:73:1a:f0:02:1b:f0:88:42:2e:64:5b:dc:29:
39:78:7f:9e:f3:6a:82:12:de:a1:9d:d4:2a:d0:58:
3e:3c:11:20:24:d1:72:72:5e:38:46:1f:0f:b8:4c:
b2:d3:1c:61:5f:ca:09:8d:69:35:42:f9:e4:a7:81:
ab:2d:6b:a7:09:6b:d3:00:74:46:cf:19:8f:a2:ba:
fb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:12:90:D3:64:C9:EA:5D:E6:56:43:66:B8:F3:EA:97:C1:3D:5F:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/911ab140-a8d8-35f3-ae95-5e90e80d6d49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
72.52.122.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:dd:6c:86:f3:74:32:11:1b:f0:23:d6:f9:02:1a:8b:f4:59:
0d:01:71:9e:34:b9:bc:0d:f8:ec:fa:07:d6:b2:e4:85:be:e6:
9c:37:33:66:4b:54:a0:04:ff:8e:00:1b:c7:6d:0e:43:54:4a:
3b:11:fd:25:fe:1d:67:82:b3:9c:6f:db:25:ff:bf:67:44:90:
e0:97:85:93:79:66:b1:d4:0b:6b:32:a7:80:d3:e9:b7:ef:d7:
de:97:e2:13:a9:35:e4:a4:70:87:80:53:51:ec:20:c9:2a:7c:
60:36:8c:93:1b:dd:c7:b4:24:3e:80:f5:44:6b:42:19:3d:c6:
f2:ed:8b:e2:32:a9:ad:ee:11:54:db:98:9e:89:ae:a1:a2:2c:
9f:0a:b4:51:28:da:d3:75:a5:15:4c:58:93:9d:46:fc:1e:75:
56:9c:03:ca:11:fe:e4:cc:d4:19:b5:6d:ad:20:6c:d8:8c:c3:
53:e0:61:f5:10:cb:7a:24:d9:6f:f3:b7:a8:e0:c2:91:cf:cd:
df:26:ee:4b:e9:81:1b:76:e9:f2:47:9e:fc:1b:0d:1f:0e:32:
79:1a:72:fb:fa:fd:a4:5b:39:a1:a1:c4:6c:08:00:b2:19:e8:
eb:1c:3e:0f:f4:2d:45:1c:f1:9f:52:a1:4e:06:71:c1:99:45:
94:75:9b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:44 2023 by rpki-client on console-fra.rpki-client.org