Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4106dced-f156-3192-95d6-abe62ca7eb13.roa
File: 4106dced-f156-3192-95d6-abe62ca7eb13.roa (raw, json)
Hash identifier: gyy5WRxM108Q1KvKjhe3xYPwl9wANyIBRVhxPH5C9Yc=
Subject key identifier: 5E:44:E5:EC:6B:ED:C6:98:85:52:7B:FA:F9:4F:FF:53:D7:C3:F0:F9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50A284ED8BA04B99325500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4106dced-f156-3192-95d6-abe62ca7eb13.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 12266
IP address blocks: 2001:470:be::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:a2:84:ed:8b:a0:4b:99:32:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=60ce6a9b-f3eb-4f68-a9b3-8c1e6ca553de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:24:c5:46:fa:be:85:d8:e9:09:b5:13:13:93:
7a:e0:13:4d:3f:bc:66:7b:c3:8a:ed:76:6d:3b:b1:
a9:39:ac:32:f0:42:c7:71:41:60:b6:02:d2:0f:cb:
2a:19:fc:1f:36:9b:5d:6c:3a:95:8c:7a:04:14:82:
12:60:86:76:b1:77:cc:ec:11:8e:da:01:8b:9f:08:
b1:6e:c4:fd:11:aa:27:ad:d1:ee:1f:25:d7:c5:c6:
cc:4d:6d:bf:b8:ab:e8:07:ca:52:ff:e0:22:83:20:
0f:82:5e:b0:bf:cf:25:4c:6c:71:95:e0:64:4a:be:
35:55:90:9c:c4:cb:b5:bf:82:2b:55:b4:f8:9c:e6:
88:a0:6f:1a:ff:f7:73:76:73:d9:f3:9e:52:ae:98:
1b:69:cd:97:74:b5:fc:d9:bb:1a:8a:e8:82:ba:4b:
92:0c:2f:57:12:4d:c4:77:7e:18:93:47:44:19:de:
b1:30:df:d6:c4:78:1f:2a:43:9e:23:5b:d1:0a:2e:
ef:bd:da:70:2b:a8:c3:00:fa:f8:4e:25:38:b2:fb:
84:d4:d1:19:2a:23:3f:3a:cd:c9:77:66:e8:df:08:
e3:87:11:e9:39:c9:ca:b9:a0:37:c9:44:a3:58:2b:
fd:72:d5:a3:13:2d:95:38:40:34:94:31:c3:8d:d0:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:44:E5:EC:6B:ED:C6:98:85:52:7B:FA:F9:4F:FF:53:D7:C3:F0:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4106dced-f156-3192-95d6-abe62ca7eb13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:be::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:50:1e:d6:23:4a:8d:91:7e:18:3d:dd:56:91:b1:4f:7e:c2:
3e:31:d9:50:ab:ed:98:da:a3:ea:6f:ce:4a:d6:5f:9a:5e:76:
c4:a1:ca:e0:5f:d0:29:cd:a9:69:5a:84:97:05:34:5d:4c:00:
df:5c:67:fe:12:8a:6d:45:3b:b1:8d:a2:31:1e:a8:bf:99:7a:
e4:63:82:1b:1c:74:b6:e0:65:e9:98:95:4e:5d:87:b4:05:29:
14:68:02:0f:9e:06:5f:90:7b:a1:7d:dc:09:e0:9f:3b:f3:bd:
68:6f:cf:58:2a:12:8f:7a:84:0e:b8:15:07:ae:f1:f9:b9:a1:
ee:80:65:19:69:06:f7:ee:46:e5:00:e6:d2:e1:69:3a:4c:2b:
ef:6c:c4:d0:7b:d4:ee:6d:47:39:b1:68:30:ac:ad:bb:1f:2d:
92:bb:cb:0f:97:bd:35:d4:60:78:4f:8e:23:39:ec:4c:b9:85:
4c:7d:fb:52:ac:a2:a8:38:86:ff:e0:07:28:c5:39:da:8b:59:
d4:83:8f:7a:c4:59:7d:ba:e1:73:41:2d:8f:59:87:64:8c:33:
39:cd:ba:23:14:0f:00:cb:e1:7a:1a:43:bd:86:a9:f1:1a:c2:
78:00:84:b7:c9:3b:a6:9a:5b:0f:51:31:30:ac:22:19:8e:09:
2b:71:1d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:04 2023 by rpki-client on console-fra.rpki-client.org