Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/494a1165-1e37-38a1-9c31-aa880877aee0.roa
File: 494a1165-1e37-38a1-9c31-aa880877aee0.roa (raw, json)
Hash identifier: ubvj3JxGwxvq7EqH4jBuIqb+6W2GPSVcKsSsME7ykuI=
Subject key identifier: BB:E0:DD:BC:4A:37:DC:71:30:21:CF:0A:97:16:64:3B:8B:1E:73:23
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A51778C4B92C9DF4000BDC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/494a1165-1e37-38a1-9c31-aa880877aee0.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 54288
IP address blocks: 66.160.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:77:8c:4b:92:c9:df:40:00:bd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=b34001ac-2d6f-41c1-a26a-b101a0db3820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:25:65:ae:4a:f1:62:51:47:2e:2a:7d:ec:
1a:ac:d9:00:47:02:9d:b9:c0:15:0a:b4:af:f2:cc:
ff:fd:81:00:46:0d:08:47:9d:90:2d:31:8b:09:00:
53:90:6c:54:b7:87:60:8c:ef:b1:3c:47:94:5a:91:
df:3c:1d:e7:a0:c1:82:65:7a:30:9e:68:80:dd:80:
3a:4e:00:f0:6b:93:47:0c:05:a9:c7:2b:54:4e:3b:
9d:eb:9e:25:17:fe:10:24:a4:f9:b4:c0:9e:15:3d:
fb:99:7e:76:53:5c:91:bd:99:98:f3:15:59:cb:db:
2d:c2:65:a6:55:1b:49:84:fb:02:1f:84:08:5b:03:
8a:38:ba:e7:f3:e3:89:91:cb:32:7f:2d:bc:eb:18:
7d:b4:d0:e3:09:05:c3:47:78:c8:76:ad:a4:ae:37:
a5:69:33:5c:13:05:2b:4d:ef:10:fd:5f:77:03:de:
87:96:69:90:b7:98:79:e5:eb:fe:f8:cf:be:bd:98:
a1:ef:4a:ac:65:ae:de:a1:0a:6d:97:67:ff:1f:59:
d1:42:b1:a5:84:e4:82:b3:a1:15:77:be:9f:e3:0e:
2f:39:4a:f9:f0:c4:db:50:51:16:73:94:54:0e:61:
ec:c9:20:f5:19:43:b0:ae:89:83:cd:f8:75:81:9b:
a2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E0:DD:BC:4A:37:DC:71:30:21:CF:0A:97:16:64:3B:8B:1E:73:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/494a1165-1e37-38a1-9c31-aa880877aee0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.160.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:a7:9c:4a:32:16:bf:2c:c7:2a:9b:06:a0:f7:17:9c:82:80:
34:c0:5b:81:6a:6b:a3:0f:c3:26:d5:b4:45:42:08:f5:d6:a0:
29:3d:2f:87:27:86:9a:ce:2d:6d:81:ca:be:85:2e:2b:75:55:
24:4a:6b:b7:e1:68:1b:3b:d7:2a:ff:79:e3:eb:a6:37:94:3c:
2e:5a:49:2c:7e:bc:c0:7a:67:ea:e9:74:a3:94:35:6e:8e:62:
a8:46:ee:b2:ac:6b:97:c0:1e:d9:c3:52:fd:1f:b1:35:ce:04:
df:60:d0:0f:85:94:be:67:0c:e2:f6:52:af:a8:a9:54:2a:eb:
48:2e:90:60:54:31:48:9d:e4:e6:8f:9a:f4:ab:e5:dc:37:92:
7f:0f:26:7e:ac:5c:bf:03:9b:4a:e0:dd:66:50:7f:54:25:ab:
3f:b1:10:3d:0c:84:e0:96:a8:4a:09:7c:72:63:72:25:58:86:
64:3a:ab:05:23:ff:2e:3f:11:33:a5:5c:2c:c0:fc:4c:52:c0:
df:99:9a:9f:0d:6d:8f:f6:f5:03:10:b2:0c:0d:05:a2:d0:ae:
f8:a4:85:2c:8b:c8:95:4d:b1:e3:53:2c:2e:be:af:13:96:a8:
3b:53:a2:78:91:20:b1:7c:69:ce:a2:3e:c1:ef:b2:6a:7f:81:
cf:2a:f9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:04 2023 by rpki-client on console-fra.rpki-client.org