Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c439a75b-0a8d-33ae-8846-e8b838c51cb2.roa
File: c439a75b-0a8d-33ae-8846-e8b838c51cb2.roa (raw, json)
Hash identifier: Hw7ONJADGED+YtUYSfqkZ52wvwrOtOnoKG9EvByeNDM=
Subject key identifier: 36:99:29:F9:10:F5:71:0E:F7:79:90:30:CF:4B:F4:90:B7:30:87:CE
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D7935A2567831F42555A05180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c439a75b-0a8d-33ae-8846-e8b838c51cb2.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 25582
IP address blocks: 65.49.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:35:a2:56:78:31:f4:25:55:a0:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=b40387c1-daad-44dc-9de1-af3cbba85d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:0c:9b:b4:4d:c5:b7:ac:bf:13:bd:21:62:
0c:37:90:bd:32:66:93:c6:60:6b:eb:2a:39:93:38:
3d:cc:01:67:34:59:8f:8a:56:19:0f:d2:e0:44:0b:
4b:e3:45:9e:6c:6e:06:cd:06:86:d7:09:9b:94:72:
e0:bf:c2:7a:8f:b6:80:41:ed:ed:b8:ce:e0:a5:b1:
01:28:de:fc:4c:21:54:3b:86:e3:8f:ae:a6:12:20:
1a:8a:d3:c7:a8:e3:67:47:4d:67:39:c5:98:af:3f:
1f:96:67:c8:0d:3b:ea:5a:9e:34:1c:5c:76:07:52:
10:92:b6:38:37:e4:a2:bb:3b:de:66:a8:df:db:05:
f2:f0:48:8b:c0:95:09:7f:ca:83:03:95:54:c7:a2:
db:b7:90:bc:75:8c:5c:5b:62:84:84:14:3d:7c:52:
d2:1c:78:d8:c1:66:56:db:72:12:43:02:86:6a:cf:
3f:b4:b5:9e:78:6b:42:b6:6c:7f:7d:76:89:93:1a:
38:0b:bc:62:d7:41:97:1f:a2:55:8e:12:88:0a:70:
01:bc:cb:34:43:d5:ef:ac:31:03:59:5c:18:e7:68:
a9:95:ac:97:a3:6f:97:40:0e:8a:60:9f:a4:9d:bc:
de:76:fc:c0:39:02:48:72:3e:80:6f:3d:9e:42:0e:
10:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:99:29:F9:10:F5:71:0E:F7:79:90:30:CF:4B:F4:90:B7:30:87:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c439a75b-0a8d-33ae-8846-e8b838c51cb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:1e:e6:1d:ea:ea:5c:49:45:58:31:f3:96:9e:a7:c0:cc:de:
97:dd:70:57:e2:39:88:ff:64:b1:74:86:1b:a2:92:22:e7:8b:
ea:ab:f4:8d:45:ca:07:04:41:6a:d3:06:03:5a:72:2f:cd:69:
42:15:0a:5d:26:bd:e5:88:98:a5:a8:9a:0e:59:00:5a:ba:3f:
82:f1:ff:c0:37:49:b8:a4:25:4d:78:f8:51:2b:57:23:b2:67:
a3:dd:3e:7d:5c:81:ee:0f:02:23:12:80:16:5c:66:bb:cd:9e:
67:b1:71:a3:28:33:1f:59:c6:7c:38:e5:74:de:0d:60:64:dc:
de:a8:d9:fa:42:a7:b6:7a:bb:6e:89:71:98:49:1c:c5:de:09:
0e:ae:b7:85:0f:9f:19:69:e8:51:83:9e:2d:79:d5:89:eb:cf:
f6:4e:5e:83:b9:1f:02:5d:ea:bd:c5:4c:94:44:42:d7:43:ad:
91:11:28:3d:11:59:43:52:b0:d3:72:db:53:94:c8:7f:a0:eb:
b4:d0:01:c1:47:11:08:2f:41:f3:47:3f:34:f0:b3:5a:38:7f:
f6:67:8a:df:ca:ab:e0:a6:e7:53:62:53:69:ec:f1:2d:98:c7:
cf:8e:90:a5:a5:3e:bc:73:e7:a2:9e:b2:a6:3e:b4:ff:63:9c:
3f:fa:92:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:47 2023 by rpki-client on console-fra.rpki-client.org