Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9c575ced-d64e-3c2f-9391-cfdedb9fcbf7.roa
File: 9c575ced-d64e-3c2f-9391-cfdedb9fcbf7.roa (raw, json)
Hash identifier: t20Tpo5UIVOHkAYauCNhRXZr8O1mUU9eEeTnOkFlEpY=
Subject key identifier: F4:88:C1:6B:9D:78:C5:38:4B:1E:0C:16:38:B1:72:0D:87:06:8B:B7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D79361B6431335F709C3DA720
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9c575ced-d64e-3c2f-9391-cfdedb9fcbf7.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 394996
IP address blocks: 209.51.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:36:1b:64:31:33:5f:70:9c:3d:a7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=29cdc38a-c5db-4192-b3c5-ff151e893420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:15:67:6d:28:6b:71:a9:ea:27:02:9f:f5:
b6:83:0d:41:31:32:22:36:00:41:50:d0:1f:55:45:
0d:ab:14:38:e1:21:81:15:81:c1:ec:7f:50:37:16:
09:fb:23:bb:fc:3b:97:80:9d:c6:e1:5c:15:ff:1a:
a6:f1:f1:b1:65:6d:90:83:53:d3:ee:2f:ff:4e:e2:
15:fe:89:5d:96:52:8d:ed:e9:f4:f9:02:37:2c:8d:
47:76:fc:b0:c3:a1:3f:13:1e:ab:1f:4a:7d:49:cb:
bf:20:9b:cb:c8:18:c9:e4:ef:43:87:79:54:da:7f:
cf:1a:89:04:e8:f4:12:55:0b:a9:a5:e9:6f:6f:74:
6c:77:92:19:88:b7:dd:05:98:14:a9:3b:36:93:35:
2e:d4:fd:3d:3b:10:d9:81:51:57:0c:31:de:ba:ce:
e5:4f:42:2c:cc:75:d9:de:0b:77:d3:a3:82:c5:cb:
71:54:f3:10:04:fa:e6:90:4f:26:99:1b:c2:a3:5f:
b2:d5:06:29:7f:50:a6:1a:66:59:a2:cc:ad:bb:e6:
5e:c5:67:8d:9a:26:bf:eb:76:c3:18:d1:f3:96:65:
b0:a2:c2:67:86:9a:22:36:f7:bc:56:3d:f9:e5:26:
d6:fa:15:24:bf:26:d5:52:4d:cf:45:55:37:34:88:
dc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:88:C1:6B:9D:78:C5:38:4B:1E:0C:16:38:B1:72:0D:87:06:8B:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9c575ced-d64e-3c2f-9391-cfdedb9fcbf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
209.51.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:9c:fb:13:6f:c5:cc:ad:c6:39:d8:94:f6:85:04:06:e6:b5:
50:9f:19:e3:00:7b:ae:1f:a2:b9:ad:6e:e5:4b:7b:c4:cc:7a:
05:e2:02:bc:80:7d:76:ef:df:86:ee:ad:16:4a:ab:56:a9:f9:
e1:44:9b:ea:3c:25:35:8e:5f:cf:52:ff:ab:c2:b2:d3:f0:cf:
67:40:e3:33:ae:e1:bf:7d:cc:37:f1:78:5e:e2:22:dd:dd:93:
75:59:73:d5:32:a1:ca:71:f0:85:78:05:37:36:22:0d:9f:57:
d4:3f:b7:72:57:d4:55:26:11:29:6c:f6:2e:40:5b:69:32:12:
6b:ca:f0:6e:41:c7:40:79:96:92:df:3b:c4:f9:e3:54:e0:0a:
e3:0e:99:c8:81:9b:7f:87:bc:ff:c8:e1:4e:57:26:9f:fa:9a:
c5:ce:b3:56:02:97:b6:42:3d:4e:72:60:8e:11:f4:9c:97:93:
ed:c5:93:81:6e:a4:f0:eb:ee:a6:6b:b5:11:80:19:51:b2:65:
3c:b7:ed:3c:4a:b0:4e:0d:bc:ab:20:f4:0e:bf:c6:70:60:07:
7e:6e:94:ae:6e:59:e7:60:1a:8d:60:d9:6b:e4:fc:8b:ac:d8:
28:ff:f4:d6:05:b0:93:75:5d:68:fb:ed:eb:49:be:f3:7c:91:
9d:22:4c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:45 2023 by rpki-client on console-fra.rpki-client.org