Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d318ac94-d431-3903-a5c4-6316ec766013.roa
File: d318ac94-d431-3903-a5c4-6316ec766013.roa (raw, json)
Hash identifier: dIs1qvxi4sqZDAOadlls6pg3Jz7XirY5AHhd6TY6EdQ=
Subject key identifier: B3:11:69:AA:04:5B:4A:71:49:BB:22:39:A2:DC:B7:22:88:7E:DF:FA
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285841182DD571A99ED188999E2400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d318ac94-d431-3903-a5c4-6316ec766013.roa
Signing time: Thu 02 Mar 2023 12:00:00 +0000
ROA not before: Thu 02 Mar 2023 12:00:00 +0000
ROA not after: Sun 03 Sep 2023 04:00:00 +0000
asID: 4455
IP address blocks: 2001:470:38::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:18:2d:d5:71:a9:9e:d1:88:99:9e:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 2 12:00:00 2023 GMT
Not After : Sep 3 04:00:00 2023 GMT
Subject: CN=ff579cc5-9a6c-47ca-b4ae-ca362b4267d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:92:11:12:22:28:bf:c4:d7:cc:14:13:2f:
5b:99:cf:d8:c3:0f:94:31:b3:0e:18:f6:94:90:fe:
66:43:1e:70:27:f1:49:36:91:3e:a8:e2:4b:38:ce:
7b:9d:e2:5d:42:52:5e:cc:33:37:14:0f:96:9b:94:
a4:1f:63:7a:31:1d:71:a2:d5:56:dd:9a:29:43:98:
26:56:fe:ba:ae:b1:d2:a8:cc:4d:a3:29:9c:2c:7a:
72:c8:69:87:0f:a7:8a:05:84:cd:48:76:0d:81:86:
55:6f:bc:be:e9:45:a6:3b:23:b7:52:78:22:1d:6b:
dd:53:d4:77:36:d1:8c:a8:12:b1:05:6f:4c:61:3c:
e8:b8:47:34:fc:bd:42:13:ea:c9:10:68:29:02:6c:
ed:d4:91:58:0f:51:cc:54:57:84:04:82:87:e9:2b:
86:9a:4f:0f:bf:74:eb:f1:27:17:1d:90:b2:06:d9:
ed:a5:07:26:f8:ea:89:b1:50:dc:c0:d8:f7:0a:98:
0c:b5:39:f7:e8:c4:c4:e9:96:62:4e:2a:4f:d9:5b:
b5:39:0e:17:cd:2c:b0:1e:74:0d:98:22:96:96:96:
54:2c:65:6e:a2:40:fc:7f:fa:9c:d8:dc:35:38:1f:
f1:2e:9a:f4:49:98:1d:31:20:5b:eb:1c:9d:91:f6:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:11:69:AA:04:5B:4A:71:49:BB:22:39:A2:DC:B7:22:88:7E:DF:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d318ac94-d431-3903-a5c4-6316ec766013.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:38::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:ff:8a:ec:a7:70:4e:cb:4d:69:e4:70:b6:ba:ec:a3:17:f3:
58:8b:5a:9b:e9:b1:41:b3:be:65:e1:5f:4f:e3:86:33:52:5c:
fc:76:5c:03:ae:99:ed:53:13:3e:63:5e:01:29:20:bf:05:97:
51:69:ab:ab:a3:89:cd:7b:c0:01:f2:e7:10:97:da:2f:7a:af:
a0:c4:47:33:cd:f8:8a:5f:93:09:59:be:fc:d5:d7:6d:94:42:
07:d1:ce:21:4e:cb:a2:c1:e9:e7:de:6d:22:d7:cd:88:70:d4:
ab:b2:fe:63:7b:59:a4:f8:a6:8b:be:b0:86:6a:fc:c8:ff:ea:
e6:eb:7d:39:f4:95:05:2f:d0:15:d2:a3:3c:26:47:76:9d:a0:
4a:02:9f:ea:07:91:7f:ac:0e:18:7e:10:00:14:db:08:35:c5:
95:48:6e:af:7e:d0:3b:e0:46:ae:26:c3:61:21:bf:c8:cc:32:
60:23:fb:0a:cd:96:b8:9c:3d:ff:cf:b7:3b:02:48:23:4f:8f:
bf:3b:43:bb:10:8f:69:c1:ba:3d:cc:77:a9:de:55:8f:01:22:
ab:5d:32:e6:c0:4b:f7:16:fa:df:10:e7:9b:7d:85:a6:0c:22:
9c:98:f8:73:7d:e6:20:b0:c1:19:4d:69:4c:66:e3:b6:27:61:
e3:40:44:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 3 04:22:11 2023 by rpki-client on console-fra.rpki-client.org