Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3ef924f-380e-31e6-94b9-66a2e62854d0.roa
File: d3ef924f-380e-31e6-94b9-66a2e62854d0.roa (raw, json)
Hash identifier: Z829nJeQIP66YdghxVpJ+w+rfyt1RPB8c7sWzYv4UFY=
Subject key identifier: 72:68:C5:B6:71:DD:C6:8E:20:B6:A1:14:75:11:1D:C8:9A:57:89:74
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A515B2B15BA2BDFFE79A580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3ef924f-380e-31e6-94b9-66a2e62854d0.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 40841
IP address blocks: 66.160.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:5b:2b:15:ba:2b:df:fe:79:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=8dd10931-c9a4-4506-9976-0c666105c6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:af:87:81:65:8b:89:01:49:c3:68:13:b9:c2:
38:ce:43:12:67:c0:8b:90:2f:25:c1:6b:bf:bf:95:
af:60:cd:5f:9b:10:85:6f:4a:19:53:0d:48:8f:43:
69:cb:59:22:db:41:a7:51:f5:f1:fd:0b:ad:b8:e4:
54:fa:8c:cd:ff:eb:e8:47:d0:0e:57:0b:50:f5:7b:
d0:d0:83:3f:e6:80:52:c5:a2:b3:c0:8b:1b:b3:c7:
a1:09:fc:d3:de:94:0d:76:8e:67:67:0d:1b:6b:16:
d8:d0:73:09:4d:80:61:0a:c0:7e:8a:e9:7c:e8:26:
29:14:78:aa:dc:af:c2:7e:57:89:eb:ad:c9:11:b8:
e7:2d:9b:fa:90:ac:95:1e:67:da:7d:76:c1:1a:06:
4c:5d:7a:ad:59:83:4e:b8:6e:c0:9c:e5:50:df:cb:
8d:a4:a8:72:02:51:99:a3:50:67:eb:66:b4:06:81:
7a:5f:cd:16:7c:1d:c6:96:d8:6a:be:ca:70:d8:6c:
4d:e4:09:46:9b:d8:b3:f6:f5:22:a3:9b:ab:61:6f:
9a:3b:bd:24:bb:75:3b:00:ce:10:be:ff:03:35:83:
ec:50:46:8b:51:5e:d1:dc:d8:1f:77:af:32:c9:77:
bb:b6:d4:1d:67:c1:b1:4c:03:fb:bc:c5:11:12:6a:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:68:C5:B6:71:DD:C6:8E:20:B6:A1:14:75:11:1D:C8:9A:57:89:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3ef924f-380e-31e6-94b9-66a2e62854d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.160.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:46:b9:57:25:93:cf:71:ba:1a:67:05:5d:6c:65:92:d3:7b:
a3:40:85:a9:7e:ce:fa:15:96:c7:96:23:a5:a2:03:41:2f:e1:
e9:28:46:ff:29:2d:7d:f9:09:8f:c1:b5:58:3c:67:88:06:aa:
25:96:5f:4d:a7:85:73:9b:0c:be:a2:f8:63:2c:30:ef:b8:8c:
86:23:a9:96:72:00:6b:2e:3c:3b:e4:e2:d3:f5:fb:aa:36:1a:
44:dd:0a:89:38:7e:01:07:cb:69:79:e2:00:cc:51:23:5d:b2:
63:d2:7b:15:d3:dc:a9:ca:a3:28:8f:ba:af:55:04:7b:47:08:
cf:b8:86:36:02:a5:6b:97:3d:56:ee:ca:12:89:6b:20:db:6c:
76:ac:ad:41:2d:e1:2b:80:c6:9f:89:a7:86:e3:1c:86:60:a7:
7d:b4:ef:6c:b6:a6:50:f7:b6:d3:92:d1:af:86:27:e6:08:7f:
6b:66:db:f3:56:06:29:e6:d0:23:04:56:41:37:fe:1f:83:09:
4f:0d:28:6c:29:9a:22:64:90:a4:aa:db:ef:14:98:34:69:f2:
04:02:a3:25:d4:da:d9:d5:3b:40:29:18:0c:f2:2a:ab:60:e8:
9b:37:45:ba:7f:b1:e4:ab:d7:49:ef:5a:d0:86:7a:56:f0:82:
17:1b:16:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:03:39 2023 by rpki-client on console-ams.rpki-client.org