Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca58c60b-0869-3ea8-8070-5cfbc8db5a84.roa
File: ca58c60b-0869-3ea8-8070-5cfbc8db5a84.roa (raw, json)
Hash identifier: nOTC1YiOQwOaKH0OBvmLPR/G/llEj6CIcfsxmvUQjQ8=
Subject key identifier: 0A:B8:BE:FD:56:9E:66:E4:76:51:0C:4B:B4:6D:96:09:46:30:E1:A7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D7935FB7B49A8144743F30600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca58c60b-0869-3ea8-8070-5cfbc8db5a84.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 6165
IP address blocks: 65.49.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:35:fb:7b:49:a8:14:47:43:f3:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=c07e489a-ea24-47ab-866a-f8cc2bf073f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f2:05:bd:d9:01:18:67:83:c9:fb:16:33:eb:
42:43:c0:f3:dc:1e:aa:59:95:f3:4c:96:f2:3f:24:
f6:20:ec:a9:ab:54:c7:10:d0:d3:7b:ce:71:f5:93:
58:c7:88:31:76:48:d4:b1:0e:61:b9:b5:85:28:07:
45:1a:50:3d:33:05:bf:8e:c9:f1:df:14:d6:e4:97:
05:0e:d1:7f:93:16:9e:83:d5:49:90:81:8d:88:fb:
4c:98:d7:3d:46:3f:a1:70:e8:e9:54:b0:bc:8c:fc:
6c:01:2e:51:89:bb:2b:ae:c1:26:b5:52:20:b3:21:
3a:6c:3e:ba:9d:f4:02:55:32:33:ea:ae:1e:12:83:
ab:4a:eb:fd:13:27:95:f2:f7:6a:e5:27:bc:1d:ca:
2f:a3:b4:d8:c5:25:4a:0e:01:5f:42:3f:d4:91:05:
5f:23:4d:cc:f4:e8:04:11:52:6d:2c:b9:db:07:5d:
2b:ff:d3:26:cc:14:7c:bb:a7:5c:d3:d6:ea:f1:da:
8f:1c:83:0a:9e:fd:2b:c9:d2:5a:c9:85:a8:86:63:
a6:14:c3:ae:be:6d:a0:66:94:36:39:7d:30:45:44:
fc:69:89:b0:6f:1d:c0:ba:30:89:d3:fd:58:7e:d2:
bc:9c:52:18:2f:7e:2c:01:16:c8:01:81:14:d6:6a:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B8:BE:FD:56:9E:66:E4:76:51:0C:4B:B4:6D:96:09:46:30:E1:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca58c60b-0869-3ea8-8070-5cfbc8db5a84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:7d:3f:2c:20:94:47:0d:bf:9f:81:e4:40:95:52:35:0c:31:
f2:ac:c2:a3:1b:da:96:e1:b0:11:ac:c6:5d:91:05:6f:4d:72:
a1:8b:cb:75:b5:1a:aa:be:55:02:08:05:cb:a4:cb:d7:b9:99:
0e:3b:83:7e:d5:e8:31:86:03:06:a7:2d:56:fa:ed:43:bc:25:
ff:df:89:ad:b4:ba:c6:94:20:75:dd:27:d8:fa:27:97:da:0c:
91:51:d4:78:12:19:8b:2e:87:50:12:89:86:48:27:67:6d:ad:
b2:aa:9b:e2:39:0d:ca:33:c2:42:97:81:9e:92:49:dd:76:be:
03:5d:e2:b2:a1:bf:b3:27:49:17:41:ee:90:b2:c8:06:f4:f6:
4b:fe:a2:69:c7:d5:c2:03:f4:c5:d6:9c:92:6e:27:49:17:2c:
65:2a:f9:7d:08:5b:fb:82:73:e8:37:f5:10:c8:99:b5:5a:5b:
17:c9:50:d3:80:88:c4:f8:33:42:dc:a5:9e:37:84:a6:a2:31:
a3:46:b8:21:40:50:9c:cc:fd:3b:70:6e:37:c1:4e:fe:ca:65:
87:5b:6f:3d:e9:d6:88:7a:55:64:62:c0:fc:41:a2:d4:06:f1:
a9:4a:99:7b:98:6d:0b:16:a8:db:2c:cd:c8:ab:ad:ed:d5:42:
73:53:34:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-ams.rpki-client.org