Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6c625694-b2a3-3692-b0f3-e328fec47474.roa
File: 6c625694-b2a3-3692-b0f3-e328fec47474.roa (raw, json)
Hash identifier: 5+7aAMdianSxuijtnfQNpiNkWePWNi1A/mh4u9oYnww=
Subject key identifier: 38:44:84:CB:EF:6E:AA:51:D2:BE:4E:49:CA:4F:16:E2:18:FB:E9:CE
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A5174E6A7576047299D0768
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6c625694-b2a3-3692-b0f3-e328fec47474.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 54288
IP address blocks: 65.49.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:74:e6:a7:57:60:47:29:9d:07:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=17d39a7d-b546-4a7e-ab9c-b2b0542d4d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7d:ac:ed:d2:89:a2:4b:2f:48:cd:02:9d:85:
bd:da:25:3e:04:8d:a0:e2:e5:7e:b8:2e:f8:29:72:
08:c9:2a:06:e2:44:c4:24:1a:5a:17:9d:4a:6e:14:
2e:f5:d4:d7:03:e9:f3:a3:17:7c:9f:6c:71:a6:97:
87:3c:2c:0e:19:14:d6:53:57:69:aa:32:65:db:61:
8a:62:9c:e4:b9:4d:44:6d:61:cf:fb:08:66:4f:bb:
56:17:a1:d8:9b:49:73:84:b5:3f:12:7d:a2:da:a7:
33:b6:48:1e:ad:96:01:4a:cd:4e:48:81:f1:6f:42:
fb:b4:fa:c8:68:b0:b4:69:95:6b:ae:b5:3c:8f:47:
88:e7:2c:b3:23:e7:de:88:07:c6:e8:b2:36:ca:76:
5c:78:47:da:86:6a:32:3a:c3:4e:78:0b:80:e8:df:
3d:e0:07:cb:35:63:8c:2c:ae:04:84:37:74:75:d9:
ab:f4:18:c4:e5:7e:65:4c:db:eb:4e:ee:5a:36:fb:
03:37:2b:0c:72:a2:1b:a6:5e:d1:28:af:78:d9:33:
1c:ed:b9:0f:5c:67:dc:02:e7:6b:21:5d:44:de:91:
71:f1:06:0b:e5:c8:05:d2:36:a0:19:98:a4:76:56:
0d:c0:41:69:a9:ed:9e:08:a8:b2:18:51:a3:c9:17:
fe:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:44:84:CB:EF:6E:AA:51:D2:BE:4E:49:CA:4F:16:E2:18:FB:E9:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6c625694-b2a3-3692-b0f3-e328fec47474.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:8c:88:bc:0d:fe:d4:77:37:13:59:19:e2:66:1e:b9:bf:eb:
fe:fc:ba:57:d9:38:fb:64:57:ac:f1:19:18:bd:69:e2:41:a2:
7b:9f:e4:4f:bb:d0:bf:1c:2a:52:cd:af:9a:06:4e:46:e9:d7:
b0:72:3a:21:16:53:b7:10:2d:8a:c2:e5:7a:a5:86:64:18:b5:
14:59:6f:08:5c:4c:d9:fd:f8:d9:10:eb:a3:f4:8b:79:6a:eb:
85:78:a3:70:4f:6a:42:00:c3:8b:19:cb:79:61:5e:46:a7:cd:
4c:96:af:88:db:5c:f9:de:fc:4e:83:3a:b0:07:6a:70:47:15:
33:e7:da:51:84:2f:26:f0:06:ed:09:98:a6:f9:13:76:20:8f:
0e:8a:56:aa:76:92:44:d4:f1:e4:9a:89:e3:e9:d4:64:aa:e6:
ff:ce:2c:b5:94:d5:b5:b2:4e:5e:8b:0e:fb:c1:3b:c6:f1:67:
29:9c:41:c8:14:c7:be:25:5d:4d:62:ba:b6:ce:4d:6f:9c:d4:
34:68:38:84:34:84:e8:1d:a9:ec:8e:41:72:e4:56:8a:15:d2:
95:21:2a:cf:18:0f:36:eb:b0:f9:8b:f3:58:a2:8d:03:b0:bf:
e5:40:9c:d8:31:dd:64:92:28:3c:35:ee:d5:45:0c:35:76:6f:
53:bd:04:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:04 2023 by rpki-client on console-fra.rpki-client.org