Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7f47b0c-eacd-3763-8a6d-dbf2b25e810f.roa
File: a7f47b0c-eacd-3763-8a6d-dbf2b25e810f.roa (raw, json)
Hash identifier: TgX8oiiwrRabqn66wLuyFS7YuaIQkA6glHGR7muYXBg=
Subject key identifier: 5A:4D:5C:5B:90:60:5F:C4:60:92:9E:F4:A2:8C:0D:06:57:39:04:E3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A5076053D0D8DD53E463D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7f47b0c-eacd-3763-8a6d-dbf2b25e810f.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 11255
IP address blocks: 2001:470:b3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:76:05:3d:0d:8d:d5:3e:46:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=d22bb318-7b8f-45bd-b394-122f1e4c0da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:ab:94:75:c7:17:fa:30:28:3c:60:01:c8:
f7:0b:27:18:3b:f9:20:9d:78:27:aa:83:06:09:d3:
0e:8b:06:cb:5f:39:1d:f4:5d:75:ea:58:9b:0a:31:
a7:b9:5f:55:ab:bf:fe:90:19:d4:b2:b0:be:28:e5:
28:d1:0d:0b:62:ac:e3:89:c3:4d:a8:2a:ca:64:2a:
e9:14:9b:9f:b9:26:69:7b:c7:6b:76:de:58:87:dc:
df:05:8e:df:09:ca:95:56:30:70:d0:d4:b2:3c:da:
2c:50:b2:32:83:aa:7d:e2:07:26:e0:db:3a:5c:67:
3b:9b:34:8a:01:82:3d:21:a4:14:bf:ff:9c:02:7a:
17:2f:0f:e3:64:25:18:f9:70:14:7e:4e:2e:22:ef:
5e:2f:4b:58:f2:00:2a:3a:2f:11:95:a1:26:f3:40:
4d:73:09:11:2e:f3:51:b6:3b:d1:40:a2:b5:c0:14:
25:c5:bd:47:57:8f:e8:3c:4d:48:81:92:11:10:cc:
f5:eb:91:f6:5d:47:e8:ef:fe:20:eb:58:e2:ee:91:
0c:48:29:05:62:d7:02:2f:15:71:a1:3a:53:06:30:
a5:63:0e:86:c1:86:cc:c7:a1:f0:f9:5b:08:10:e3:
0d:e6:88:7e:90:ec:20:a0:bb:e0:bb:42:ed:3d:75:
83:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4D:5C:5B:90:60:5F:C4:60:92:9E:F4:A2:8C:0D:06:57:39:04:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7f47b0c-eacd-3763-8a6d-dbf2b25e810f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:b3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:d5:ca:24:d8:e6:4e:0b:22:9e:41:cf:5c:32:1c:06:b9:b8:
cc:e7:98:0d:f2:47:2d:9a:b5:f1:ca:51:64:b0:50:a5:80:11:
c2:89:ca:59:90:b4:14:67:d7:ca:dc:8b:54:61:a7:67:1b:fd:
4f:4a:7a:64:08:e2:00:14:46:60:74:ff:e3:42:88:af:ae:cb:
b7:40:d9:28:44:89:1a:22:f6:5b:a0:b3:28:15:70:95:9f:00:
97:75:10:cf:4c:3d:b7:bd:44:79:54:3c:06:67:8f:b4:2c:93:
80:41:4e:80:15:84:f6:d5:2d:f3:3c:7f:6d:17:62:5d:e0:6f:
35:48:cc:e0:84:63:22:73:63:b2:a5:74:60:59:09:c8:30:8f:
a8:7c:fd:72:2b:5d:ed:79:4e:a8:a9:b1:d4:64:30:e5:f8:aa:
97:6a:ae:b4:71:bb:4d:b5:61:be:0e:67:50:69:70:f8:06:2c:
28:b7:26:36:20:13:7a:b5:60:61:f7:ca:9e:ea:f0:94:da:18:
36:b5:75:0d:f8:78:f7:02:29:1f:dd:b0:02:74:39:0e:20:aa:
7b:38:9f:ca:f4:b3:3e:7f:13:65:22:19:d4:48:06:26:32:43:
3a:5d:96:a6:df:81:3c:76:03:99:fd:45:5c:24:9d:ac:0f:86:
79:b2:15:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:05 2023 by rpki-client on console-fra.rpki-client.org