Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cd23fd57-8b3f-38a4-a507-db5f84375a29.roa
File: cd23fd57-8b3f-38a4-a507-db5f84375a29.roa (raw, json)
Hash identifier: S3sDF9BcZNEnKt3dCzPpoOES9CPI8P9zKJN8wmlPzDc=
Subject key identifier: A5:38:D5:74:33:58:87:77:D4:5F:58:49:34:C0:88:C1:38:E9:B6:49
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D7935A88BDF83E1E49769E240
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cd23fd57-8b3f-38a4-a507-db5f84375a29.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 34931
IP address blocks: 65.49.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:35:a8:8b:df:83:e1:e4:97:69:e2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=531cd5f5-b107-4070-ae21-e902654b9b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:48:73:ce:5c:18:81:ac:d4:f2:bd:86:ac:
d6:83:96:9a:d7:ff:18:4e:f2:84:a1:d0:b9:47:0e:
28:62:2c:7e:75:6a:b1:11:00:dc:db:df:15:b8:eb:
f0:88:7d:80:65:2e:f6:f5:40:09:28:5d:c5:b1:47:
64:f8:7b:0c:ed:22:d7:4e:16:27:65:2a:18:f1:22:
a2:b8:f1:fc:01:1f:02:ac:cc:ae:79:bf:3e:8b:a7:
9b:b2:c7:0a:ff:91:40:bb:0f:f3:f3:fb:3d:5d:36:
01:2d:3d:4c:d3:1c:d0:5a:27:06:ec:26:14:40:74:
53:bc:52:bf:90:97:be:ae:9a:9a:44:2f:e9:af:cd:
a1:76:46:7d:55:de:46:ee:59:d8:28:1e:ab:f6:c0:
5f:e4:48:d0:96:db:51:35:e1:82:0c:c2:3c:31:b7:
44:74:9c:25:1e:08:63:25:96:95:99:4f:78:3f:7a:
ba:7e:61:50:cc:1f:2c:80:ac:4e:65:b9:e5:e9:89:
73:1e:57:10:17:da:cb:57:10:79:a5:34:5c:e7:02:
e8:76:d0:07:10:c8:b7:03:e4:88:c0:a3:df:34:30:
4b:b1:60:54:43:00:b6:f0:50:cd:1b:c7:32:eb:5a:
84:b2:7d:3f:83:d1:ff:c4:f7:d6:c1:fd:28:47:39:
0e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:38:D5:74:33:58:87:77:D4:5F:58:49:34:C0:88:C1:38:E9:B6:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cd23fd57-8b3f-38a4-a507-db5f84375a29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:c6:21:02:ed:f8:0a:23:67:65:3f:e4:af:c1:76:f4:f1:a9:
49:f5:f7:71:cb:14:3c:59:a0:c2:8c:29:e9:64:74:76:ce:8d:
22:e3:9a:1b:a7:f0:e2:f9:93:49:ac:b4:e7:74:2f:35:27:c7:
46:69:c7:9d:a1:1b:9e:f3:fd:19:c1:6c:bf:ef:ca:b7:16:cd:
8b:4d:40:94:2f:1f:da:0d:bb:46:31:e6:aa:cc:55:90:d3:ef:
f0:72:36:81:d1:f6:50:29:21:c8:76:7e:6d:1d:5e:eb:0b:65:
19:81:d7:e7:12:15:a2:4b:af:b2:e1:c4:cd:59:9a:fa:49:10:
dc:1c:5b:31:55:d4:18:15:71:fb:0d:04:df:07:42:dd:d5:02:
5e:12:56:97:0b:bb:d7:b0:8a:01:9d:a2:15:a4:c1:1e:4a:53:
48:51:f6:10:84:2b:73:46:d1:4d:4f:e9:62:14:28:3d:20:ea:
5e:fa:c1:7a:ae:a1:da:eb:2b:83:94:5e:02:d2:a6:b8:6b:b5:
e0:90:30:5b:3b:5c:7e:c9:11:2e:34:d4:9c:1a:07:78:c9:f1:
64:f3:30:0c:cc:d9:33:be:4f:9d:e3:8a:04:c8:05:76:2c:1d:
4f:22:08:32:30:8a:f5:17:90:5f:8b:0f:80:7b:5c:e9:06:93:
ac:5d:cf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:47 2023 by rpki-client on console-fra.rpki-client.org