Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/49af7397-daac-3a34-ad1b-2e44edb82b48.roa
File: 49af7397-daac-3a34-ad1b-2e44edb82b48.roa (raw, json)
Hash identifier: ynMtl3MaNQHDfjcgYyarfCrd8PMyXA8Xr3Fj/gGL+ZE=
Subject key identifier: 20:C4:DD:CA:9E:53:91:5F:6B:32:7F:BA:06:46:7F:30:25:67:73:AC
Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial: 010D0C9F4328583DC80135F3E9079D99F9DD6700
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/49af7397-daac-3a34-ad1b-2e44edb82b48.roa
Signing time: Sat 30 Apr 2022 12:00:00 +0000
ROA not before: Sat 30 Apr 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 1246
IP address blocks: 64.147.212.0/22 maxlen: 24
72.27.236.0/24 maxlen: 24
72.27.237.0/24 maxlen: 24
72.27.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:c8:01:35:f3:e9:07:9d:99:f9:dd:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Validity
Not Before: Apr 30 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=d9e02d73-8f76-4e66-9179-97b2161f506b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:c2:af:19:ae:c1:93:3c:ec:37:b7:42:43:
5c:a6:b4:95:f5:a4:96:72:51:26:ae:d6:c0:e0:f0:
14:56:8f:c3:46:ae:ec:2f:e6:7c:26:18:b6:cf:37:
c5:b7:6e:db:73:24:3b:b3:86:91:0e:44:43:37:32:
a1:36:6a:5a:93:45:40:b3:4e:17:f3:92:03:e6:e7:
e4:8b:c3:05:85:c9:f3:a4:90:9f:b1:c2:2e:a0:6c:
17:1c:14:92:b7:9e:99:d7:09:14:f4:f1:02:c9:86:
dd:cb:4d:c9:a9:16:ee:fb:9d:72:56:97:c9:db:4e:
37:2a:b6:0b:f0:4f:6c:a3:ec:f4:0f:35:52:35:32:
95:c6:9e:15:e4:a0:5f:5f:1b:34:68:5c:03:cd:96:
21:8e:0b:44:47:03:ca:ec:81:6d:a6:e7:42:17:78:
b5:39:82:03:43:3d:7e:c0:55:0e:4d:48:cf:da:a8:
51:74:a5:0d:29:5e:c8:36:bb:48:f0:b5:85:bc:1e:
b8:9a:24:14:38:50:b8:f2:fe:00:e1:f7:6f:cf:4f:
78:4c:0b:8d:9c:2c:ec:5a:e7:96:99:57:3e:21:0f:
16:1b:38:a3:2d:54:24:85:0f:6f:a1:43:70:0f:ef:
af:0d:ef:82:96:1a:af:85:c5:25:4f:e6:24:49:76:
56:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C4:DD:CA:9E:53:91:5F:6B:32:7F:BA:06:46:7F:30:25:67:73:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/49af7397-daac-3a34-ad1b-2e44edb82b48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
X509v3 Authority Key Identifier:
keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.147.212.0/22
72.27.236.0-72.27.238.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:5b:8e:b7:94:45:7e:b2:3e:70:34:1e:75:d5:a8:03:dd:16:
24:78:ce:6f:23:92:3a:82:1e:e2:aa:3e:0e:58:2b:d2:c3:9c:
8c:77:e4:8e:ad:2d:05:e9:56:f1:49:d0:d1:4f:ec:32:6d:f7:
81:b5:56:8b:69:34:90:c4:ba:91:03:c2:6f:62:d8:96:59:f9:
a3:2e:cd:91:1e:8c:b8:4d:60:6c:52:0a:6f:ce:e6:ac:db:85:
3f:46:70:55:0a:93:6c:87:50:c5:95:85:a0:7d:cd:da:6b:6f:
87:e3:a9:71:d9:61:e2:fd:de:7d:8a:11:70:71:91:32:ef:39:
11:a1:fc:ad:b7:02:74:89:65:98:5f:26:f8:49:c1:01:fb:98:
d6:bb:42:18:7e:36:87:78:f8:c8:b0:1a:18:44:c5:d1:fc:ac:
75:b0:b9:05:e5:1f:df:d6:e6:60:24:a8:7d:0f:72:e6:06:26:
ae:3c:1b:88:05:52:ee:7b:cc:d5:26:bc:a0:c7:47:0d:8c:ab:
5d:f1:c1:10:1c:e8:b2:4a:2a:39:42:f5:7e:02:bc:61:36:2f:
3e:27:90:3a:60:88:2a:bd:a0:d5:a8:2c:47:bf:8d:99:45:4a:
fd:6c:99:95:56:63:99:46:e8:3f:68:db:a7:10:7a:72:ba:15:
c4:48:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:39 2023 by rpki-client on console-ams.rpki-client.org