Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a59b35f9-7381-318c-803c-29a96c41e1cf.roa
File: a59b35f9-7381-318c-803c-29a96c41e1cf.roa (raw, json)
Hash identifier: 6rP/yN89UEq42idAAcSJfxsd5IfDrrcgD/XszCk4Rdw=
Subject key identifier: F8:6E:A2:F0:A9:58:05:E9:A0:31:1B:70:66:2B:FD:93:F2:09:13:B8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A5187CF1444B9FF97A28820
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a59b35f9-7381-318c-803c-29a96c41e1cf.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 54288
IP address blocks: 184.105.158.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:87:cf:14:44:b9:ff:97:a2:88:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=0e89c9d9-d865-4f2d-97d0-f7800042eab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:00:70:cc:2e:91:21:73:b7:00:0d:97:b4:
67:76:1e:06:70:ba:58:1b:48:99:87:bd:0b:c2:8b:
47:d0:91:97:b9:28:ea:f5:d8:cc:99:8b:39:65:50:
94:a5:a6:0e:1e:5d:11:c6:93:dc:51:9c:82:4f:3f:
69:1d:c1:c3:0b:be:f6:78:07:18:7e:f6:ad:a2:8c:
32:ed:a8:63:c9:7b:bd:2a:ea:b3:d2:64:85:27:8f:
83:f8:17:34:74:79:0a:b8:ba:93:35:00:66:6b:43:
1c:be:02:d2:c0:2c:cb:59:8c:39:be:65:fb:e8:40:
3f:b3:ca:6a:00:0f:2c:e8:39:a1:9f:87:cf:b8:c2:
2f:87:df:48:87:e9:17:a9:28:cf:4c:47:d9:cc:f7:
99:5b:cf:0c:41:ce:31:f5:8f:4f:33:88:9f:e9:13:
04:5d:fd:a7:7e:39:c4:2f:8d:89:51:15:14:00:ed:
68:3a:c8:97:23:e3:83:f6:27:42:01:11:46:26:c5:
1f:10:87:60:86:8f:34:be:50:4e:cc:d2:4a:db:f7:
c3:13:ee:d1:d5:38:e8:1f:85:f0:2b:59:f7:3a:3a:
a0:e0:06:07:aa:61:7b:00:3f:3c:15:00:5c:80:66:
d3:cd:62:41:a1:bb:e5:bd:04:19:56:22:3d:fb:e5:
b0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6E:A2:F0:A9:58:05:E9:A0:31:1B:70:66:2B:FD:93:F2:09:13:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a59b35f9-7381-318c-803c-29a96c41e1cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
184.105.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:53:33:b6:19:fa:01:42:9b:a1:a8:fe:7f:f6:ba:00:59:87:
67:51:70:15:3d:54:4b:41:0b:a2:a2:32:f8:fa:76:d0:5f:02:
0c:39:34:80:85:8b:04:8b:e3:06:0c:f0:f9:48:6d:01:c4:3d:
c9:37:31:c0:0f:12:c8:0f:02:0d:2c:65:c1:ca:a7:39:3b:62:
09:32:87:f3:e9:0a:43:1d:ae:4b:7f:8e:f7:6b:a8:c5:62:c1:
7e:59:bb:49:a2:52:a1:95:a8:40:9a:22:ec:49:e1:b6:b3:a5:
8d:4e:d4:8c:04:8e:54:26:52:9f:90:cc:ea:47:76:36:d2:ff:
90:d1:8c:28:92:df:c3:64:f6:f2:5e:36:6b:36:63:33:ea:85:
73:9e:41:29:59:42:74:85:2e:94:f5:fe:d3:e4:0e:97:7f:32:
b5:c5:c5:a3:5e:83:d0:0f:ec:8d:fd:dd:56:50:d6:7e:be:f3:
6f:4b:ef:ce:17:39:43:9e:83:6e:b9:23:b5:e4:92:17:6d:0a:
67:74:e0:6d:85:e5:6d:30:f1:88:45:a1:ce:50:0f:b1:05:59:
68:3f:36:3c:c3:bc:cc:9e:e7:ed:6e:5f:16:f9:d8:c6:0d:ee:
6a:5b:6d:9a:27:95:b8:4e:31:68:a6:63:5f:56:51:fb:99:11:
cd:49:a2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:03:39 2023 by rpki-client on console-ams.rpki-client.org