Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e6de09d-3704-3473-8f30-e8cc7146f50e.roa
File: 4e6de09d-3704-3473-8f30-e8cc7146f50e.roa (raw, json)
Hash identifier: LrT628QYybr/KjSEqcJx1oXnYfYtIl4z0AT+F9HoFyQ=
Subject key identifier: 5C:8D:B5:FA:4C:02:BB:06:89:D2:9E:9D:CF:5D:A9:C5:40:7D:13:64
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285842C1CD961C36526BE25FBC5F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e6de09d-3704-3473-8f30-e8cc7146f50e.roa
Signing time: Tue 01 Aug 2023 12:00:00 +0000
ROA not before: Tue 01 Aug 2023 12:00:00 +0000
ROA not after: Fri 02 Feb 2024 05:00:00 +0000
asID: 15083
IP address blocks: 2001:470:174::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c1:cd:96:1c:36:52:6b:e2:5f:bc:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 1 12:00:00 2023 GMT
Not After : Feb 2 05:00:00 2024 GMT
Subject: CN=54def9ce-1ae5-4c70-9349-34b40057a531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:a2:f7:b0:a1:68:4e:79:3b:03:6a:82:0e:
01:6a:d7:08:12:af:eb:23:f3:48:9b:17:92:19:b2:
c2:3c:30:39:ee:84:84:f5:72:b3:df:ec:26:d2:4e:
01:5d:1f:e5:19:c7:c7:19:70:58:f6:aa:38:5e:ca:
1c:00:7e:90:1f:90:97:8a:b8:a1:3e:f4:2d:e8:99:
4f:a3:fa:ad:23:2d:78:b5:74:55:d0:cf:e4:5e:bf:
e4:ff:95:9b:92:30:1f:55:75:81:a9:97:32:a7:c0:
51:56:9c:81:cb:be:f9:5c:40:b1:9c:51:80:b4:1f:
74:92:52:03:03:24:23:9e:85:a0:26:fe:4c:18:55:
42:5e:7f:f0:5e:72:95:9c:a1:9d:b5:42:52:51:d7:
19:ec:fa:e7:76:a5:2e:bb:a2:51:fe:28:6c:2b:a3:
24:94:5b:66:03:ac:38:41:8c:6e:1b:db:ad:e2:e6:
33:ab:7e:36:ba:53:e0:4d:98:e2:b6:25:47:5e:84:
92:16:6c:18:b8:45:47:e4:2b:80:9c:6d:90:1d:b5:
e8:e6:fe:90:43:63:de:85:28:db:30:c4:d1:d1:66:
6c:43:3d:cd:78:f8:76:89:bd:99:42:56:db:a6:cd:
af:3f:78:47:0c:db:78:b5:10:0c:42:68:e8:21:23:
ef:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8D:B5:FA:4C:02:BB:06:89:D2:9E:9D:CF:5D:A9:C5:40:7D:13:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e6de09d-3704-3473-8f30-e8cc7146f50e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:174::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:c4:3f:35:95:aa:4b:f4:e0:c4:4c:90:f0:a0:a2:d6:a5:b3:
25:e0:fc:ea:d0:36:eb:18:37:ac:de:21:d0:c4:b2:b2:23:04:
91:09:b7:8f:e6:8a:36:81:be:26:ca:57:d0:2d:63:65:bf:d0:
73:63:3c:50:de:0b:d4:27:01:02:38:59:5a:2e:1b:ae:6e:9a:
d4:b1:2e:c8:95:79:83:e5:95:99:ee:86:94:1b:76:4e:26:fd:
ed:56:77:c5:8d:54:17:ed:79:1d:45:a9:2f:c5:f3:9e:28:bc:
9c:b3:6b:26:a4:b8:d7:22:a3:80:2c:6b:84:a6:1d:01:8f:11:
2e:72:34:73:34:b8:f3:f2:56:a4:b5:39:31:fd:0f:d3:82:ca:
1e:11:b1:46:1a:b0:7c:53:4b:d5:cb:a6:5b:07:6d:4f:89:91:
f3:60:e2:9c:e9:a0:e0:0b:94:b8:af:b3:41:fa:d9:0e:aa:76:
4f:e4:e7:1e:39:95:91:9a:28:7d:8d:b5:2b:70:04:e0:b1:8b:
82:97:0f:fb:7e:7b:fb:ce:d9:1b:17:b0:d9:7b:95:ac:0d:97:
63:a2:5f:26:e1:92:28:42:2c:a3:0b:8e:f9:75:e4:47:fa:85:
31:1e:0e:82:15:63:7b:9e:9e:c6:c3:a7:2b:f9:32:6d:86:eb:
61:c4:7f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 05:21:30 2024 by rpki-client on console-fra.rpki-client.org