Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/f9a60f4b-3e99-3f66-823c-15a5c75fe270.roa
File: f9a60f4b-3e99-3f66-823c-15a5c75fe270.roa (raw, json)
Hash identifier: lLJnxgehkhvXxLvp+3xuP5O4wu2yir5rbnZ5sbVyYG0=
Subject key identifier: C2:A3:08:D9:7C:0F:91:96:23:D4:EB:7E:5F:EF:41:68:00:D1:E6:AD
Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7
Certificate serial: 010D0C9F4328584221384EBF4C6164F873015C00
Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/f9a60f4b-3e99-3f66-823c-15a5c75fe270.roa
Signing time: Tue 06 Jun 2023 13:00:19 +0000
ROA not before: Tue 06 Jun 2023 13:00:19 +0000
ROA not after: Mon 04 Sep 2023 13:00:19 +0000
asID: 13638
IP address blocks: 64.186.64.0/22 maxlen: 22
64.186.64.0/20 maxlen: 20
64.186.72.0/22 maxlen: 22
64.186.68.0/22 maxlen: 22
64.186.76.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:21:38:4e:bf:4c:61:64:f8:73:01:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7
Validity
Not Before: Jun 6 13:00:19 2023 GMT
Not After : Sep 4 13:00:19 2023 GMT
Subject: CN=ab62c858-9d4c-4fcc-a648-103e70d289fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:1b:be:b3:28:0d:2d:68:85:6d:20:67:fa:
7b:52:9d:3b:03:5f:40:ac:a1:c7:f3:81:70:48:a7:
01:7d:2d:a1:71:23:89:7e:59:31:db:55:e9:a5:b6:
4d:aa:4a:f5:79:ac:90:0c:a0:09:f2:21:9d:c6:87:
1f:3e:c7:b2:af:e5:9d:1e:5d:4a:b7:a7:d9:60:fb:
53:48:06:fd:81:3f:a3:51:01:32:e7:87:b3:d4:71:
81:3f:5c:6f:46:97:f6:07:c1:9a:f9:66:26:82:94:
7e:e3:29:71:8c:b0:7a:b5:69:2a:b7:12:7c:b7:64:
86:1f:00:bb:81:11:6d:4d:4e:ad:90:22:54:3e:5a:
93:61:0e:de:ba:d4:e0:7c:ed:f5:03:ea:71:26:6e:
a3:8c:11:71:ea:fa:57:9e:f8:3f:9b:d4:95:fb:9e:
67:d7:36:c2:55:1c:8e:75:f7:23:5f:1f:ee:7a:8b:
47:f5:85:03:12:a1:43:37:ba:cf:32:13:15:59:ba:
9a:29:0b:0a:41:79:1a:35:60:d2:5e:8e:4e:b3:56:
e3:af:a3:19:35:34:8c:8c:ba:80:46:f6:2d:9c:98:
69:57:d9:60:d9:de:67:90:6e:c3:e4:cb:12:b4:b9:
75:4f:14:6e:4d:b7:d3:ee:df:cf:a7:50:3b:6f:5a:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A3:08:D9:7C:0F:91:96:23:D4:EB:7E:5F:EF:41:68:00:D1:E6:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/f9a60f4b-3e99-3f66-823c-15a5c75fe270.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl
X509v3 Authority Key Identifier:
keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.186.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:2c:1d:d3:9e:b3:4f:26:dc:d5:a0:0c:70:9d:0f:42:f6:d6:
6f:c3:f2:0d:87:04:82:82:59:97:95:bb:7e:76:d4:85:71:89:
0a:61:88:8e:ce:9d:c1:55:c6:1f:fb:3e:d2:28:ba:69:44:dc:
55:f8:81:9d:5d:2c:96:b5:33:c7:2b:c1:88:94:69:4a:42:83:
35:2e:64:7a:f1:2b:00:63:d9:56:11:81:4f:3d:55:c9:d5:b8:
4f:61:1a:61:53:58:19:8b:e0:3f:88:86:10:fa:f0:52:d4:12:
03:5c:f0:f7:fe:30:2e:c0:d7:62:af:5a:07:9d:37:56:86:be:
34:2e:16:09:fe:c7:35:a9:e6:e0:a3:ed:22:a4:da:5c:ef:13:
e0:44:fc:f0:c7:6b:c0:7f:58:05:a8:ba:ff:17:7f:cb:1a:3f:
8a:fc:e0:f6:46:57:50:40:40:e4:dc:e5:82:1c:12:85:fa:13:
43:f3:60:c3:3f:46:5f:ed:e3:91:05:b0:81:24:8d:b3:e0:df:
2c:65:30:04:a9:ee:1b:76:63:db:5f:3e:a5:1a:b9:ad:52:1c:
7f:e3:ce:90:ba:03:86:6f:82:8d:8d:ae:ce:6c:a6:28:e8:f9:
5c:b1:39:89:16:ae:02:76:15:fe:d0:ab:ec:ab:a3:ff:0d:5d:
b1:e5:3f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:13 2024 by rpki-client on console-fra.rpki-client.org