Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1110df5b-4343-32cd-8355-f4dc214d8f4f.roa
File: 1110df5b-4343-32cd-8355-f4dc214d8f4f.roa (raw, json)
Hash identifier: X0LInqYOONM9cTNThk1gEwXWAgil4NlEhya7goZLTag=
Subject key identifier: 1B:2E:53:7D:42:0F:EA:4A:1D:DA:34:F4:13:B1:52:E2:E0:72:D6:5D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858427A9D1E268774CC574D28B540
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1110df5b-4343-32cd-8355-f4dc214d8f4f.roa
Signing time: Fri 07 Jul 2023 12:00:00 +0000
ROA not before: Fri 07 Jul 2023 12:00:00 +0000
ROA not after: Mon 08 Jan 2024 05:00:00 +0000
asID: 31769
IP address blocks: 2001:470:137::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:7a:9d:1e:26:87:74:cc:57:4d:28:b5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 7 12:00:00 2023 GMT
Not After : Jan 8 05:00:00 2024 GMT
Subject: CN=b429c2a7-6452-4cf6-93e8-9ad0b26ddc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:a6:02:1e:2e:14:a3:4e:0c:4f:08:b3:9d:
f2:6b:42:1c:ca:3b:ab:94:4f:af:21:e3:8b:f1:3f:
dd:c1:9f:59:94:e2:b3:b4:4b:89:52:a4:34:4d:5a:
5f:1e:6f:d6:e4:61:38:79:33:13:fb:59:af:90:dd:
d5:b7:af:75:10:74:bb:ee:33:2e:ce:b9:80:94:54:
f7:a1:90:2a:2f:ab:c1:1b:dd:55:a9:f6:2a:54:68:
1a:2d:fe:4e:61:fe:4a:47:a3:42:07:25:33:f8:f0:
65:39:41:b1:82:87:2d:7e:2e:70:15:50:5d:75:19:
5b:1d:f1:5e:e1:a4:5d:95:f2:cb:72:7d:db:c0:9a:
50:33:b8:1c:ef:7f:27:57:4e:42:0c:bc:b0:e5:10:
62:14:c9:08:28:eb:a1:50:d8:e3:c9:83:eb:54:a2:
c9:af:97:80:f3:79:95:50:05:6c:75:9b:1b:e0:96:
54:6c:84:5f:4d:9a:1a:15:b0:1d:a3:33:bc:ed:f5:
a6:59:d5:67:73:52:f4:9b:4a:e8:22:44:79:c1:fe:
0a:35:b1:6c:b6:6c:55:af:f5:c6:a4:4f:64:58:9b:
08:34:fd:de:93:9d:01:15:09:d8:4f:94:93:18:1a:
5c:3a:3e:37:30:c1:68:7c:bd:d2:09:32:c6:10:5f:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2E:53:7D:42:0F:EA:4A:1D:DA:34:F4:13:B1:52:E2:E0:72:D6:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1110df5b-4343-32cd-8355-f4dc214d8f4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:137::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:a1:00:19:43:c2:19:b0:6e:23:d6:ba:61:8f:71:d4:42:5b:
43:21:fc:92:1a:fd:82:74:ca:88:f7:c2:f1:8c:9e:00:a8:0f:
b7:7f:ac:24:f8:e0:94:55:ad:18:50:6c:fb:f0:dd:d0:fd:8c:
4e:f3:e5:25:e7:10:91:84:02:fd:f8:f6:ba:10:d3:e3:3d:1e:
11:cd:77:8b:19:c6:16:41:14:2e:dd:96:a8:d0:78:9d:a7:c2:
dc:16:b1:17:d7:b5:b4:0c:0f:02:9d:f5:ef:a4:c9:e6:f7:d2:
62:ce:a8:67:71:9f:73:bc:5b:c0:bb:a4:be:5b:53:e1:7b:d5:
e4:23:0d:c7:bc:ff:da:bc:89:95:fc:59:a1:c6:0d:43:5e:1b:
7e:71:1e:cb:95:9e:ac:02:4c:1a:61:01:5b:ee:f0:3d:3d:3d:
2e:73:8d:d6:de:1d:27:de:16:2a:e2:42:a3:bc:da:ae:41:e1:
e5:38:a5:a5:a6:e4:c3:d3:fe:29:f1:48:b6:ab:8f:92:3e:89:
cd:53:01:1f:49:0f:dd:9c:d3:5a:28:29:22:3a:3f:54:17:6e:
ab:04:b8:9c:0c:62:b1:8f:3e:ed:4c:69:cc:9b:a8:1e:de:6e:
e1:2d:d2:38:70:cf:4a:1a:ef:b3:49:2d:df:3c:59:a4:66:a4:
fd:6c:47:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 05:55:11 2024 by rpki-client on console-fra.rpki-client.org