Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5bda15a3-459e-35ff-96d8-253da5d5c67c.roa
File: 5bda15a3-459e-35ff-96d8-253da5d5c67c.roa (raw, json)
Hash identifier: +Axrx3ieSBNO56HV5NyhsNCSnXV2L+nK1jXreAQdg/Q=
Subject key identifier: 9E:D7:DA:65:B3:57:CA:CA:C4:77:9C:01:4E:0D:25:91:65:7A:0B:60
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285837993A050667111CBFD406D560
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5bda15a3-459e-35ff-96d8-253da5d5c67c.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Mon 16 Jan 2023 05:00:00 +0000
asID: 3356
IP address blocks: 108.165.216.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:99:3a:05:06:67:11:1c:bf:d4:06:d5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Jan 16 05:00:00 2023 GMT
Subject: CN=0f08a06c-f2c1-4aee-893f-c0589837fb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5e:c7:6b:71:4a:99:9e:40:b2:3a:2a:d7:7f:
9e:60:45:20:5c:20:a7:14:6b:9e:1d:5d:f1:f6:39:
ef:cb:90:4b:ad:c5:1c:c6:1b:90:c6:ea:98:b7:4d:
73:97:4a:f0:27:63:0b:c2:e5:b5:0b:eb:0b:3f:ea:
28:05:79:f1:23:87:94:6c:31:86:d2:d5:d4:39:ab:
04:3e:94:c7:9b:93:91:79:3a:ba:24:c6:1f:35:f9:
29:1f:89:d2:c5:d6:a8:1d:9a:e8:59:d2:00:b7:d5:
4f:61:a7:97:37:46:29:bc:e1:ee:96:19:b4:76:95:
ad:a9:1b:62:8b:31:ff:67:b5:f5:22:2e:20:bf:0c:
53:66:63:f1:36:59:2e:dc:be:f6:bf:1b:c1:e3:e4:
8e:e6:5b:19:c7:47:e3:7e:5a:d1:13:c5:e9:35:1f:
66:7f:f0:02:6b:7d:b5:d0:6f:3f:08:32:08:a2:9e:
28:12:33:d1:71:d0:66:3e:51:93:b7:b9:a2:73:a7:
b6:eb:8c:02:1f:09:d6:2b:71:72:92:57:98:9f:f1:
19:76:c0:e0:89:8d:c1:f1:20:d9:c2:ff:89:01:5d:
da:bd:c7:a5:58:b4:aa:b6:5b:a5:7f:2b:93:71:54:
5e:5c:c3:0f:a3:6c:21:7b:52:48:a8:51:97:c6:b8:
4d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D7:DA:65:B3:57:CA:CA:C4:77:9C:01:4E:0D:25:91:65:7A:0B:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5bda15a3-459e-35ff-96d8-253da5d5c67c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:32:2d:f8:a3:aa:dc:62:fd:cd:00:b3:de:5b:c9:87:44:f0:
97:03:bb:45:ec:e7:5f:20:4f:47:b5:1e:b6:0d:44:7d:07:8e:
d1:aa:3a:32:ef:40:b6:c8:6c:a6:30:65:47:25:63:58:87:20:
ad:00:2e:d1:63:84:71:5a:0b:36:07:d0:80:9c:46:a9:3e:5f:
fb:b1:5e:80:da:1e:28:0c:9d:a7:b0:c5:2e:2a:0f:9e:37:8d:
2a:a3:bb:3b:d2:25:8e:4a:8c:10:29:a8:69:05:e8:77:f8:0f:
30:27:e6:49:96:43:13:94:3b:66:0e:73:ed:90:5b:aa:b3:65:
0b:9d:75:85:17:a5:c4:c1:58:73:53:9e:db:a7:c9:3d:ee:3d:
ba:ca:88:14:6b:c5:56:7b:5a:01:2c:f9:3f:6e:64:b2:44:1a:
4e:a8:c4:f5:0b:76:f2:07:b1:6c:00:25:f5:08:c4:4b:31:a2:
1f:3a:a2:98:0d:ac:da:84:6d:ed:22:fb:a8:d5:4f:e1:ad:b0:
35:b5:46:fb:8e:42:90:52:af:64:8d:94:a0:1f:0c:43:ae:90:
a4:34:8f:85:cb:05:78:f7:46:ac:43:f9:f3:e2:b6:36:e7:e4:
e7:be:7f:ff:9e:d6:0f:f6:ef:3a:65:cd:78:da:76:33:5b:68:
86:da:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:36 2023 by rpki-client on console-fra.rpki-client.org