Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/4a10bf38-3055-3231-8738-28d62e8705d6.roa
File: 4a10bf38-3055-3231-8738-28d62e8705d6.roa (raw, json)
Hash identifier: NDeMzXhwiwwSgur8okuTqOiKf7+Jxrc7F5/m4OFGtTQ=
Subject key identifier: 87:DC:37:25:6B:DA:BD:B6:F2:D6:36:E8:2F:EA:D0:74:19:74:83:45
Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial: 010D0C9F43285841E46CA8F279AFD614E430DD80
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/4a10bf38-3055-3231-8738-28d62e8705d6.roa
Signing time: Mon 15 May 2023 18:21:01 +0000
ROA not before: Mon 15 May 2023 18:21:01 +0000
ROA not after: Thu 01 Jun 2023 18:20:06 +0000
asID: 22345
IP address blocks: 65.51.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:6c:a8:f2:79:af:d6:14:e4:30:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Validity
Not Before: May 15 18:21:01 2023 GMT
Not After : Jun 1 18:20:06 2023 GMT
Subject: CN=12c297a4-e22d-4702-aae3-113c7949fdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:83:22:77:69:87:aa:90:e1:b6:a1:56:ca:ec:
f3:da:c1:c5:c5:a2:07:b8:bc:63:f4:9a:ea:77:dd:
b4:80:70:3f:c7:4c:02:73:db:82:96:90:90:cb:4f:
04:6d:6f:16:7d:66:c4:ff:c6:97:92:63:38:5d:15:
3f:0e:10:34:f2:ed:84:89:47:e2:7a:c9:01:a8:64:
da:1a:d4:21:06:3e:15:3c:50:3f:fb:58:32:c3:cd:
9d:cb:f9:16:24:90:eb:7c:0d:1d:96:c2:44:6a:14:
09:83:fe:4a:e9:3f:65:5f:81:11:51:93:ee:13:f0:
84:9c:1b:ba:80:3b:24:ba:ae:7d:60:9e:1b:fe:8d:
c3:e7:4e:9f:34:55:c8:4f:78:c7:be:c0:df:96:8a:
40:3f:29:94:9f:c4:97:a0:1b:30:65:76:76:68:44:
03:4a:82:38:9b:e9:a5:a1:3b:80:ad:2b:9c:2b:e4:
95:16:d3:b6:ea:28:f2:98:01:97:ec:cb:0e:5a:19:
cf:7e:b9:e5:67:19:87:ee:08:a9:1a:4c:5c:bb:14:
23:4e:ee:08:5b:e7:ff:52:6c:20:30:ba:c6:6c:1d:
69:7c:8d:d6:9d:09:95:5d:ac:5a:f0:c8:8d:8a:a7:
3c:9c:3f:eb:9d:83:4e:54:9c:cd:74:a4:a0:1d:07:
f9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DC:37:25:6B:DA:BD:B6:F2:D6:36:E8:2F:EA:D0:74:19:74:83:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/4a10bf38-3055-3231-8738-28d62e8705d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
X509v3 Authority Key Identifier:
keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
sbgp-ipAddrBlock: critical
IPv4:
65.51.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
df:c0:f9:eb:c0:7f:67:15:b7:24:81:38:99:49:9a:ae:90:21:
55:3f:4c:62:59:60:a3:f6:9d:c5:75:85:67:a9:ea:a6:18:3c:
8c:5c:56:8f:81:d8:88:12:8b:38:c2:32:cf:93:f6:f1:64:70:
12:ec:4d:4e:94:82:aa:77:c9:21:7b:15:39:c5:83:99:b1:e8:
a0:b4:5a:63:1c:4a:40:80:23:7a:95:e4:59:19:57:a3:43:3f:
be:d7:b0:3b:85:c1:c9:c7:cb:5f:70:a1:f0:21:b1:49:32:fd:
b6:1d:8b:0d:6f:1a:fe:68:5a:b4:98:30:db:19:74:78:c4:41:
87:33:65:da:9c:4d:77:1e:5e:38:25:4e:98:2a:88:8d:d4:51:
c1:c9:b1:a6:25:21:95:ec:9f:5e:74:57:77:d0:1a:39:9b:b4:
10:64:0a:ac:c0:af:fd:ec:55:61:58:1e:a8:80:dc:a4:ce:fc:
84:5a:b0:21:c6:e8:4f:39:45:2b:cc:9a:fa:fe:2b:1c:69:8c:
51:ff:07:b0:5d:d5:d2:8b:ea:ee:9b:97:7d:db:eb:be:ec:ae:
ec:a8:43:47:78:80:e2:c0:59:bc:b2:a9:76:29:48:8a:28:8f:
97:5b:89:20:0e:2a:89:67:7e:69:75:67:f1:1a:dc:4e:ae:bb:
b1:40:bf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:30 2023 by rpki-client on console-fra.rpki-client.org