Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/abad7955-5d26-391c-bf85-71222f9ed166.roa
File: abad7955-5d26-391c-bf85-71222f9ed166.roa (raw, json)
Hash identifier: KRzZeNlDnvoIV9QIIcrmpXc1E6cgpd6khhyPuahgWIs=
Subject key identifier: AA:00:E0:F9:E7:2A:7E:41:EB:0C:6C:A5:20:EC:82:19:5D:40:47:D0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858401756F775B04191FBA2070020
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/abad7955-5d26-391c-bf85-71222f9ed166.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 01 Jun 2023 04:00:00 +0000
asID: 36103
IP address blocks: 65.49.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:17:56:f7:75:b0:41:91:fb:a2:07:00:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jun 1 04:00:00 2023 GMT
Subject: CN=d112b07b-c80a-43e4-9567-2d5eb6009583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:15:17:91:e1:9a:0f:7b:21:ab:ce:ac:8f:
bc:e8:3d:12:74:f0:fb:4f:e1:0f:df:43:57:9a:0b:
ef:48:1a:67:c3:66:c5:27:b2:af:6e:08:b5:f4:28:
a7:86:d2:1f:2f:2a:9b:77:26:51:78:5a:14:36:3d:
53:7d:29:72:a0:67:c5:57:23:f9:d1:f9:95:c5:47:
56:85:73:44:5f:62:43:d8:b8:32:75:f4:5b:be:1b:
8a:99:f6:0a:fc:3a:30:0b:f7:54:31:6a:12:a9:89:
bb:49:77:17:73:1e:c7:d1:c6:ce:c9:60:da:60:c1:
37:ee:1c:6d:0b:72:95:99:e2:8a:30:5c:9d:d3:1a:
c8:36:2c:d1:c5:4d:85:88:f4:28:da:46:4a:48:50:
63:a7:64:04:c3:67:b0:c0:75:ae:2c:a7:32:77:64:
20:39:e1:14:b6:6c:e6:8e:a7:d4:e1:35:3b:2e:4f:
ad:08:72:2f:23:57:e7:af:65:d8:9e:5c:36:65:18:
b5:fe:bd:15:71:2e:19:f9:4b:9e:37:60:50:60:b7:
72:22:69:f4:c6:48:52:cb:61:c8:40:48:6d:f3:5e:
84:1c:48:d6:5a:72:91:c3:42:32:46:9d:67:2c:19:
7b:1b:24:c7:fd:59:c3:8d:93:e6:36:60:c5:eb:c9:
f3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:00:E0:F9:E7:2A:7E:41:EB:0C:6C:A5:20:EC:82:19:5D:40:47:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/abad7955-5d26-391c-bf85-71222f9ed166.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:91:2c:fa:17:4f:96:4b:71:3b:52:f4:a7:e3:38:75:a9:6f:
f4:1d:23:5e:d0:18:00:9a:bb:e5:0d:1a:79:c9:76:38:6a:47:
f2:0d:ff:34:6a:fa:91:1b:20:b6:f2:04:a1:79:19:cb:f2:f4:
4b:68:f5:4e:c8:f2:27:f9:16:05:93:20:cc:db:37:f7:de:77:
0f:50:ba:94:5b:ca:92:05:f3:40:80:7c:10:25:84:f7:a3:1d:
c1:f8:44:5d:7c:9d:d1:79:97:38:bd:51:6e:9f:8e:6d:8d:aa:
44:b5:70:70:e6:35:d5:4b:81:28:89:57:e1:fb:73:23:54:44:
90:76:ad:e7:9e:82:b2:4a:25:a5:b6:f2:9a:7e:a5:fd:aa:a6:
d6:09:42:7a:06:39:4e:cf:c5:bf:0f:ae:40:71:bf:de:f9:99:
83:69:16:e1:aa:d1:ca:dd:02:0e:21:7d:9d:1a:eb:4f:4a:b0:
01:11:dc:c9:ec:b1:8b:65:0d:e1:a6:63:43:4a:89:dc:5c:31:
f4:e1:6b:d8:87:0d:5b:2c:97:ca:53:da:28:7a:c1:2c:8c:22:
e3:24:65:83:83:a2:5a:79:9d:10:6c:d5:51:6a:2f:9f:c6:d3:
fd:bf:66:73:2a:fe:27:86:49:4b:80:59:f0:36:56:7d:86:29:
60:ba:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:46 2023 by rpki-client on console-fra.rpki-client.org