Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b620980d-e648-3749-aa26-0cc01f3c91dd.roa
File: b620980d-e648-3749-aa26-0cc01f3c91dd.roa (raw, json)
Hash identifier: diq66PPG6VVQxRAqvR2udFaBSzKtUHRbkQ5kC9jwtdc=
Subject key identifier: 34:4D:7D:3D:BB:8F:20:75:FC:2B:23:D6:D4:18:EB:88:B4:62:2C:C9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50AB538B3983222ED23B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b620980d-e648-3749-aa26-0cc01f3c91dd.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 13816
IP address blocks: 184.105.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:ab:53:8b:39:83:22:2e:d2:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=cd1de47f-211e-4969-b27a-c434d11d1221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:01:30:07:d7:c5:59:82:13:58:75:6a:f3:b4:
69:da:b0:34:05:b2:f1:b8:be:32:3d:83:3c:9c:2c:
57:dc:86:58:80:60:62:f5:d9:cf:a3:16:4c:8b:fa:
ba:60:f3:8f:82:f7:43:16:d2:e1:c9:cf:62:bf:3e:
fe:15:2b:52:68:49:5f:d5:28:9a:ad:2a:e7:96:ef:
c4:b0:c0:a0:36:76:44:c8:1a:61:02:24:71:82:02:
5e:b8:b5:73:46:fa:43:ee:e3:70:0e:e9:83:a9:0b:
63:18:30:9e:dd:6d:38:1b:fd:ab:ab:e9:48:84:db:
1e:3d:91:0e:cd:46:4c:68:64:d8:da:71:0d:31:71:
c1:fa:bd:8c:ca:6a:d6:37:37:86:85:1c:8c:ef:6d:
03:59:aa:a1:4e:52:67:41:68:08:fb:c6:62:bb:7f:
b8:a3:a6:a2:81:f9:92:06:9d:5f:37:52:1a:d8:5c:
46:c1:d7:83:b5:55:c1:f4:6b:e1:b1:31:5c:24:da:
7f:0f:e6:a0:ab:48:c0:59:8e:38:ba:cf:26:5c:b2:
cc:9f:87:ad:2d:09:d8:89:f7:2c:db:34:a4:07:5f:
71:6e:61:48:c5:a3:3d:e6:dd:d3:59:6c:f4:ac:07:
ea:5e:93:60:37:3d:aa:5c:ab:f2:38:39:d3:8c:22:
82:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4D:7D:3D:BB:8F:20:75:FC:2B:23:D6:D4:18:EB:88:B4:62:2C:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b620980d-e648-3749-aa26-0cc01f3c91dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
184.105.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:ea:7f:35:2d:68:b7:10:27:ea:c9:0f:66:80:44:59:97:07:
53:73:52:23:3c:bb:95:59:67:b4:9d:94:1b:c3:26:45:9c:8e:
7f:fb:0a:54:ab:5f:ca:3e:a4:eb:c4:cc:d8:f6:d0:62:5a:e4:
70:e5:90:c2:ca:31:1a:35:66:38:e3:e6:db:bc:6f:88:03:74:
43:ef:cd:77:72:43:0b:d7:c5:44:6e:87:b7:37:9a:25:92:d2:
50:3c:44:eb:c1:45:13:d1:af:74:0c:5e:00:f1:75:c8:d0:dc:
89:e9:18:3f:69:e9:9c:6a:62:79:b6:22:b3:e0:cd:3b:26:30:
2e:ef:0e:13:14:29:0e:f1:26:ac:82:ca:90:8d:0a:5e:dd:3e:
29:f7:0c:4a:4b:e4:d3:f5:7f:6a:2c:ce:b3:83:96:01:92:2c:
ac:af:ca:51:3b:de:8b:5c:55:01:f1:12:58:89:65:3d:e6:b2:
51:33:dd:81:ca:82:07:23:67:7d:7d:34:bc:ab:a2:9e:f0:c5:
d6:cc:46:52:6c:f8:a6:a0:de:67:37:32:5e:df:eb:88:36:70:
eb:b0:a1:16:07:28:66:30:26:63:6e:3e:83:a6:4d:08:46:4a:
ea:ff:60:de:40:ca:ad:2a:0b:d3:e9:c9:d4:7a:e3:d7:2c:87:
a3:ed:ca:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:03:39 2023 by rpki-client on console-ams.rpki-client.org