Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c4979710-fdb0-33ca-94a6-cb6883820326.roa
File: c4979710-fdb0-33ca-94a6-cb6883820326.roa (raw, json)
Hash identifier: aM1I9sNET/V2Iiu3g+LJ4VumrDKXxZYTpq5fDurh4fw=
Subject key identifier: CC:87:39:2A:46:98:A7:55:66:2B:6B:2F:F8:52:7D:B0:FC:DE:1E:0A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285841663B3A9929F25801ED923400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c4979710-fdb0-33ca-94a6-cb6883820326.roa
Signing time: Thu 30 Mar 2023 12:00:00 +0000
ROA not before: Thu 30 Mar 2023 12:00:00 +0000
ROA not after: Sun 01 Oct 2023 04:00:00 +0000
asID: 54243
IP address blocks: 2001:470:ce::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:66:3b:3a:99:29:f2:58:01:ed:92:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 30 12:00:00 2023 GMT
Not After : Oct 1 04:00:00 2023 GMT
Subject: CN=e38034fb-2c59-41d9-baeb-95e37793861d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8c:22:81:b6:15:3f:7a:8a:bf:20:18:b8:30:
f3:d1:fd:7c:63:b0:39:0d:04:d1:93:b3:94:cc:96:
d9:24:a3:ad:ee:e5:0c:44:5f:37:73:81:1a:1b:fc:
49:fa:0d:df:f0:d6:62:7e:04:2f:e5:2c:cc:b1:d6:
a7:b5:f9:9f:8f:f2:a7:33:b0:1e:da:a5:8f:7a:cf:
f0:2e:25:b3:62:3a:12:86:d8:09:47:c3:eb:34:f3:
05:66:8f:5a:00:13:51:70:6a:0d:b1:fb:d9:ac:ad:
d2:f5:ff:9a:34:51:29:18:37:0a:0f:33:1c:f3:38:
85:97:7a:20:fc:5f:bd:5b:85:c4:d8:bb:b0:63:7d:
29:2b:cd:da:10:59:18:84:f0:84:89:5f:c6:52:7c:
2d:1b:7b:43:04:11:b4:1a:2c:e3:85:cd:44:c3:22:
24:bc:ca:7e:3e:86:7a:f1:30:b2:6d:f8:af:03:e8:
b7:6e:64:67:80:47:99:7f:2d:62:2e:f0:9b:ad:bd:
23:8f:68:11:6d:e7:fd:83:88:4a:47:23:70:6f:ce:
2c:0d:a8:6d:ad:9c:94:e5:3e:ae:0b:ea:bc:12:8e:
63:28:5c:f8:9f:ef:23:40:59:0d:d2:2b:f6:38:d4:
a6:be:49:22:6d:02:65:46:dd:70:f6:81:46:10:26:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:87:39:2A:46:98:A7:55:66:2B:6B:2F:F8:52:7D:B0:FC:DE:1E:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c4979710-fdb0-33ca-94a6-cb6883820326.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:ce::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:a0:68:47:b0:1b:98:c7:4a:ac:3a:55:7a:36:a5:85:83:94:
6b:55:77:95:e7:9a:29:de:18:ef:c7:2b:b6:46:b0:45:e8:6d:
a0:e3:6a:72:66:46:ce:f0:98:08:7e:eb:6f:9c:61:57:57:fd:
6b:62:bc:ee:f7:4d:35:b2:7a:6e:e1:bc:cf:e7:23:b0:27:b4:
2f:f4:7c:df:66:3a:01:5d:87:70:9c:a6:b3:24:67:49:c4:59:
c2:56:4a:a6:b8:8d:2e:ec:e3:95:9f:79:c6:b7:f5:f5:0f:0a:
0d:68:89:2f:36:d8:d3:2f:42:3a:22:06:17:0d:a1:6f:30:48:
58:dc:0d:82:53:16:45:78:5c:cc:ca:50:e5:02:84:6b:9b:92:
c4:73:b6:ce:db:ab:0d:e5:dc:2a:1c:9f:b2:d2:b9:c6:b8:7f:
a5:71:66:c0:cc:97:38:71:79:ae:48:f4:0c:d7:fc:e3:fb:7e:
d0:59:4f:d1:79:a8:22:92:35:49:76:64:cf:c5:80:e7:c0:37:
5e:66:0a:2a:4c:d3:cc:80:78:ac:dc:84:3e:f2:6a:d8:dd:1f:
6b:5d:91:c9:dc:e6:f2:61:5d:40:4b:0c:b6:cf:da:83:10:4f:
1c:dd:e9:c2:29:16:d6:1a:44:70:89:0d:7a:75:53:ea:03:1a:
4f:22:fc:4c
-----BEGIN CERTIFICATE-----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Generated at Sun Oct 1 04:20:22 2023 by rpki-client on console-fra.rpki-client.org