Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b663f593-5fb0-3ce3-adca-f7b8cf867462.roa
File: b663f593-5fb0-3ce3-adca-f7b8cf867462.roa (raw, json)
Hash identifier: LCj2e3KKxl48cnOKoBeg9N7lnDKApTvOvnBHXYMzwgQ=
Subject key identifier: 8A:8B:92:48:8F:BF:24:84:D7:1C:A2:2C:85:AB:30:17:53:F6:7F:5C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285842C49844306C98A7C26DAF2E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b663f593-5fb0-3ce3-adca-f7b8cf867462.roa
Signing time: Wed 02 Aug 2023 12:00:00 +0000
ROA not before: Wed 02 Aug 2023 12:00:00 +0000
ROA not after: Sat 03 Feb 2024 05:00:00 +0000
asID: 212573
IP address blocks: 216.66.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c4:98:44:30:6c:98:a7:c2:6d:af:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 2 12:00:00 2023 GMT
Not After : Feb 3 05:00:00 2024 GMT
Subject: CN=457d7ac1-2754-491b-8d0b-9adc41e3225c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b7:26:4b:d1:67:25:f2:e8:db:f3:04:73:37:
86:3f:f9:de:5c:bf:64:0d:0b:70:79:0a:d9:00:86:
da:0a:3f:33:0f:ae:e9:84:bd:ff:c4:e4:3e:6d:16:
3b:6a:3e:0b:3b:29:cf:99:18:d7:4a:fa:51:4f:99:
fb:6f:d1:b9:6f:d3:16:91:ef:7d:d1:41:0f:bc:e9:
69:d4:08:df:56:af:f7:e2:d2:ea:77:b5:0e:bb:6a:
81:a6:b2:3a:ae:f9:6b:9c:b0:04:78:44:4c:a0:b4:
aa:ce:53:0b:a3:eb:02:35:0d:e1:38:d1:31:c9:29:
88:a1:a8:81:aa:0c:4d:c1:53:c6:e4:01:51:b6:ce:
2c:fb:ad:55:44:f7:1e:cd:5a:40:1b:48:0f:5b:07:
27:a0:55:f4:8f:f4:c7:3c:fb:de:8e:c8:bf:8f:07:
97:d5:6a:08:42:f1:a6:ed:6c:25:ed:b4:06:47:8e:
f4:c1:58:73:ff:7f:a2:34:9a:7a:fc:94:5d:01:91:
e0:b2:ca:60:9f:d7:94:33:ae:d3:84:29:58:f4:33:
f0:e1:15:e7:90:34:60:bc:e3:20:ae:b6:c6:bd:23:
04:9e:45:de:34:0d:81:1f:e0:9c:3c:e5:6f:e2:4f:
7e:4a:73:98:52:51:0e:64:9a:a4:86:42:85:ec:92:
6b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8B:92:48:8F:BF:24:84:D7:1C:A2:2C:85:AB:30:17:53:F6:7F:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b663f593-5fb0-3ce3-adca-f7b8cf867462.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.92.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:74:53:f0:b1:e8:d0:84:85:35:76:de:63:53:c3:ec:a4:5e:
f9:4c:fa:e1:ea:a3:20:41:bd:31:7b:92:40:2a:09:c7:08:af:
3e:05:be:c1:78:f4:24:ad:65:70:5e:00:d2:16:10:5f:6f:3f:
35:c6:4a:e8:f9:84:cb:50:0f:0a:f7:f8:ab:88:ec:12:81:6e:
fd:79:16:bd:45:ef:7b:b1:23:7d:0b:0c:74:82:d7:df:71:e0:
8f:af:9c:f0:5d:5b:db:e4:3f:05:b3:38:d2:8f:40:90:fa:e2:
78:c0:23:c9:16:4e:e3:d4:bb:19:19:e1:b4:d9:e7:0a:d9:1c:
8e:f8:3c:d2:7b:a6:48:ec:39:67:24:3e:6d:0e:3c:a5:02:e5:
91:b7:06:e7:e9:f9:c7:c3:30:ee:4a:0c:e6:d1:e8:48:f6:1c:
03:fe:c3:19:fe:f5:a9:cf:91:91:6e:e1:ee:51:0a:05:5e:15:
46:72:57:0b:20:14:e9:22:ed:b0:f2:c7:94:8b:f3:a8:b8:d6:
c2:12:9b:d0:50:5e:ec:74:44:41:5c:e2:1a:a7:f9:cb:8a:95:
b6:51:6c:41:76:51:ff:2b:7d:65:7e:8b:23:be:0b:d9:cb:5a:
d1:e1:ee:95:57:68:09:91:e7:99:95:67:e4:06:2b:d0:02:10:
00:ab:2f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 3 06:16:25 2024 by rpki-client on console-ams.rpki-client.org