Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9dd9f1c3-c02c-3989-a6ce-5075976053b8.roa
File: 9dd9f1c3-c02c-3989-a6ce-5075976053b8.roa (raw, json)
Hash identifier: d4EPhSgUqXgZNJuYOFmTB2eXbZpBaH6XTcwJsdVQAyE=
Subject key identifier: 63:A7:C5:92:5C:42:07:51:0A:C3:D9:88:E9:B5:24:7D:DF:76:91:C7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285842D55874249802A1E9AAE68A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9dd9f1c3-c02c-3989-a6ce-5075976053b8.roa
Signing time: Tue 08 Aug 2023 12:00:00 +0000
ROA not before: Tue 08 Aug 2023 12:00:00 +0000
ROA not after: Fri 09 Feb 2024 05:00:00 +0000
asID: 201506
IP address blocks: 2001:470:17b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d5:58:74:24:98:02:a1:e9:aa:e6:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 8 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2024 GMT
Subject: CN=07a09459-d43b-4a27-91be-3db6358aaa8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:1b:3f:7f:7e:42:7b:c3:5a:b9:eb:6c:cf:
7d:01:6b:f0:06:e9:7f:37:06:df:02:72:e3:69:43:
6e:87:91:48:24:88:a7:54:d5:eb:91:0b:b2:c4:fe:
2e:a5:fe:60:c7:da:4b:3c:40:25:ef:a2:70:9a:16:
08:a5:e2:d0:03:84:9a:fc:d1:27:ec:13:d4:d7:06:
d5:cb:14:05:43:63:96:89:94:5f:22:31:59:b2:0f:
33:a4:31:13:3d:81:02:23:dd:a5:a0:5b:c5:61:e5:
85:b8:ab:1d:9c:a8:24:e4:e4:0a:2a:f6:79:31:28:
1c:75:c7:02:cc:de:3c:52:1c:77:d1:8a:2b:9a:07:
bd:18:b7:30:d2:35:73:c9:fb:03:a0:d2:84:f3:b0:
41:d2:55:b6:cf:4a:49:21:4a:fa:78:6b:0a:50:22:
9a:6e:16:89:b3:95:d0:0f:92:30:df:eb:dd:f7:01:
77:9c:60:4f:58:29:43:0d:55:d1:23:f9:26:19:6c:
11:89:1b:6e:67:28:6e:5c:46:9e:24:83:35:fa:76:
19:84:4e:93:72:fb:7a:b6:00:50:8f:f1:cc:47:1f:
1f:39:48:12:7d:ea:2f:c2:f0:a6:e0:a3:d4:0a:83:
cf:e9:8f:77:9e:7f:69:8f:b2:f9:02:94:d9:b2:45:
c9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A7:C5:92:5C:42:07:51:0A:C3:D9:88:E9:B5:24:7D:DF:76:91:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9dd9f1c3-c02c-3989-a6ce-5075976053b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:17b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:f1:14:33:70:55:b3:73:52:86:66:35:33:46:83:52:af:42:
3e:64:99:c7:2c:09:db:cb:ed:2c:c7:4d:8d:db:15:fe:40:d0:
68:6d:78:f2:4f:f9:73:06:91:8f:15:7b:53:d7:09:cc:37:f1:
c0:fe:cd:46:fb:42:9f:61:bd:c7:fd:38:1f:07:98:6a:f2:46:
8c:82:7c:19:4a:ec:b1:30:42:03:16:26:f7:47:80:96:44:b5:
d3:5b:5d:db:b7:6c:2c:d6:e1:4b:fd:31:a0:94:4e:d3:da:21:
45:88:5f:5c:85:5d:c3:52:46:a6:c1:cb:ce:28:7e:8c:41:91:
43:2e:5b:fd:49:1c:64:2f:a9:eb:20:34:f1:a5:6d:2b:49:c9:
4b:38:05:b8:b0:cf:30:b3:0c:cd:83:e9:6c:9d:20:08:e2:b8:
45:b2:51:cb:24:5d:7c:f8:b1:4c:75:ac:7b:5a:ea:5c:b8:b0:
dd:81:bd:46:d6:bd:b1:11:06:51:a2:ca:92:2c:f9:67:a9:a5:
9e:4b:fb:b5:13:6f:d7:07:f4:dd:95:a8:94:1a:9b:8e:48:62:
6d:d5:96:2c:d4:b0:0b:93:b2:cf:c0:42:27:94:82:8c:7e:43:
89:35:4e:26:12:85:14:5f:dd:53:7f:e0:62:54:15:ba:16:2e:
23:0a:0e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 06:12:23 2024 by rpki-client on console-ams.rpki-client.org