Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/431ffd87-5efd-345f-ad02-ba8331f08623.roa
File: 431ffd87-5efd-345f-ad02-ba8331f08623.roa (raw, json)
Hash identifier: H21gI+tnGRgEjQdHg3HfQe2EiTd505ihE4mwtgPR0q4=
Subject key identifier: 2F:DC:DE:9A:EA:91:21:E6:E2:7E:9C:D9:68:DF:06:6C:17:B5:B3:27
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858402281C20BD264396AE3A763C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/431ffd87-5efd-345f-ad02-ba8331f08623.roa
Signing time: Sun 04 Dec 2022 12:00:00 +0000
ROA not before: Sun 04 Dec 2022 12:00:00 +0000
ROA not after: Mon 05 Jun 2023 04:00:00 +0000
asID: 63186
IP address blocks: 216.66.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:22:81:c2:0b:d2:64:39:6a:e3:a7:63:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 4 12:00:00 2022 GMT
Not After : Jun 5 04:00:00 2023 GMT
Subject: CN=98587160-7197-493f-9ee8-718090dcb998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:c2:b6:20:a4:59:cd:ba:e9:f6:4f:5f:c5:
e3:c4:46:e2:f6:66:af:54:57:3d:c6:b5:61:f8:95:
38:ae:44:32:bd:91:e4:77:8b:77:c3:3b:e9:c8:07:
af:c0:e5:74:b5:4f:1b:b5:41:04:d3:c3:6b:fd:82:
a5:02:6b:d3:bf:df:43:f9:43:92:da:6a:30:7e:da:
b1:a7:2c:77:82:9c:8c:c4:6a:4a:48:2b:ee:d0:48:
4b:cd:62:34:ea:5d:5e:93:28:f1:a5:7d:82:eb:24:
a6:26:a9:6a:3b:50:ea:a6:c0:46:9c:38:02:b2:75:
88:c7:f0:d6:3d:90:c2:5b:c3:87:1e:f8:b9:86:d0:
77:8c:83:d1:66:14:18:ef:32:db:20:a6:e8:27:fb:
7d:4c:34:92:a5:02:41:17:7e:f3:c8:b9:45:92:90:
55:76:3c:db:9c:09:84:99:da:0c:18:54:3c:59:d2:
4d:54:f9:3d:d2:62:00:1d:6e:10:25:da:d8:b5:72:
f6:1c:42:2f:f3:60:14:10:72:74:58:f3:fc:ab:62:
d8:a7:8a:79:d9:fa:a0:04:10:8c:42:64:f4:62:fc:
83:8b:a3:18:2f:1d:51:fb:04:16:63:b2:ce:cc:05:
8b:ff:9b:80:ad:a2:c6:f2:a1:84:be:77:84:3d:ee:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DC:DE:9A:EA:91:21:E6:E2:7E:9C:D9:68:DF:06:6C:17:B5:B3:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/431ffd87-5efd-345f-ad02-ba8331f08623.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.46.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:3d:80:46:24:70:20:72:86:67:01:e9:23:b4:6e:d7:18:9c:
87:06:50:f2:2c:9b:72:44:38:b5:c3:27:68:3c:68:63:be:12:
03:0c:f8:7f:e6:de:7a:90:ab:2c:1c:29:23:8b:d4:73:10:36:
17:3e:1c:69:78:87:35:15:4e:71:90:14:c5:fd:11:e8:c7:9e:
35:5a:d5:fe:1e:d4:f1:be:96:cb:ad:31:04:23:f2:55:57:25:
25:1e:32:5d:7b:4f:1d:f1:89:5a:4e:68:a8:5a:dc:7c:7f:67:
35:27:98:24:8e:b6:e5:ab:b3:5a:33:94:05:27:57:d7:6b:d6:
8a:55:ee:a4:e6:12:05:4d:d4:66:bb:d9:ae:4f:28:a1:c5:ab:
7c:32:89:ac:82:7a:5a:48:b1:50:a2:d3:fb:42:e1:2f:dd:f8:
b2:7e:1a:7a:41:9a:0c:39:e2:f0:6f:9b:f3:79:7b:85:cb:a7:
60:99:15:45:5f:54:75:a4:ff:5a:0e:ca:56:45:c7:aa:86:54:
df:60:b6:7c:a9:e1:63:dd:9e:b3:8f:2c:cc:f9:6d:80:fd:e1:
d2:88:5c:45:ba:ec:2c:33:6a:67:06:f0:5f:87:33:74:35:57:
59:74:2e:32:56:ac:9d:97:40:64:22:af:78:aa:d4:e9:fa:56:
a6:53:86:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:41 2023 by rpki-client on console-fra.rpki-client.org