Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fbae7dc7-41df-33e0-926f-b64db63def1f.roa
File: fbae7dc7-41df-33e0-926f-b64db63def1f.roa (raw, json)
Hash identifier: smeV6WCELoyDPepmpsS+q7KH8BRLuokaHURq8dKKI54=
Subject key identifier: 75:AC:FE:D3:24:99:01:C2:44:9E:96:FA:56:02:5D:28:2B:73:3F:45
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A510EC751B6D89A5F38BC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fbae7dc7-41df-33e0-926f-b64db63def1f.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 36103
IP address blocks: 216.218.204.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:0e:c7:51:b6:d8:9a:5f:38:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=5c3e2c13-b434-4ae0-91ef-cf8236a154bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:a6:82:69:51:4d:28:7b:63:d2:75:49:d6:
4c:36:b7:66:e4:06:6e:09:14:fc:a8:67:c4:86:1a:
9c:7e:42:cc:39:42:4a:10:27:f7:28:cb:75:e0:31:
78:32:33:3d:6d:51:aa:25:65:08:50:74:4f:2b:61:
5c:dd:ea:26:e4:38:3a:29:45:07:3b:87:8e:ef:7a:
d3:21:f7:35:5b:2f:41:b6:d1:b1:3f:9d:8f:0f:97:
fe:a6:d4:f6:7a:1c:85:5a:d0:8e:e5:bb:99:30:32:
66:f6:e9:10:b0:eb:fb:d2:16:06:40:93:83:2f:9e:
bb:ff:d1:bc:90:5f:3b:6c:dd:1a:0a:55:e0:b5:8c:
bd:fe:d0:b0:91:9e:3d:7c:96:82:80:4e:79:23:65:
31:59:c8:9b:6f:6d:b2:d4:57:dd:44:7b:5f:94:7f:
ac:b7:01:97:a0:c0:8b:17:b5:5f:4a:2d:1d:b1:7c:
ae:56:1b:31:0e:f0:c2:9f:6b:2e:f3:2d:72:94:66:
41:7d:70:66:e5:41:f8:8e:d8:79:36:4c:5e:62:f3:
09:11:eb:ad:21:fb:21:d9:ec:f5:3a:b3:88:68:0d:
bc:f5:f9:d3:67:61:d6:3a:1f:8a:91:00:71:92:ac:
5a:fe:c7:66:b7:fb:99:fb:71:97:54:ff:29:dd:6d:
a9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AC:FE:D3:24:99:01:C2:44:9E:96:FA:56:02:5D:28:2B:73:3F:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fbae7dc7-41df-33e0-926f-b64db63def1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.218.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:ef:5c:42:d1:f9:70:ee:72:d6:9c:8e:8c:f6:5c:4f:d7:f7:
1b:c0:89:6f:f4:b5:78:b2:0b:df:eb:0d:84:8b:89:7c:25:ba:
49:fa:c4:ef:5b:67:cd:74:fe:a9:5d:23:5b:71:68:e0:11:dd:
8d:5c:c4:4a:d9:ff:61:09:29:7e:15:cb:f0:ba:2e:3d:82:ab:
02:04:a8:cd:d6:a6:e8:f9:d0:b5:4f:91:e5:44:d9:0c:3f:03:
19:ed:af:42:7f:14:ea:d4:0c:c1:54:2d:85:41:9f:e0:2e:3e:
fa:ca:26:f5:40:ea:9d:1b:85:c2:7e:44:42:b6:2b:5d:79:60:
3e:28:e9:df:bc:f5:d5:1b:fb:f2:5c:d3:36:09:9b:31:ad:a5:
d7:93:95:a7:a6:26:10:ed:29:19:56:17:5a:46:b4:f0:79:48:
9c:11:d5:fd:67:2d:de:85:87:6f:a0:6a:2c:dd:a8:c7:d8:f3:
47:a0:2b:24:d1:fe:9a:dd:fb:d7:bd:7e:0c:39:f9:47:e7:2c:
32:a7:7d:8b:85:62:67:cd:41:32:25:86:3e:9d:25:88:3f:31:
27:4b:68:8b:dd:fe:4f:53:6c:9f:cf:1c:6f:1b:3b:7d:ec:ea:
98:ce:60:c7:1b:10:36:b5:6b:27:12:ce:be:8d:b1:7e:48:84:
c9:d8:a9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:05 2023 by rpki-client on console-fra.rpki-client.org