Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/838d730a-2392-3b13-8097-c8dca006ee44.roa
File: 838d730a-2392-3b13-8097-c8dca006ee44.roa (raw, json)
Hash identifier: ksr0N2ns20rfxFptHbGsCIhKrKVWlVJuqNuYVerChZY=
Subject key identifier: 4A:88:B1:F6:F1:C1:54:4C:BE:6F:47:F8:39:48:F1:C5:3A:12:D6:A0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583C1AF5F6DA3F23771373E20980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/838d730a-2392-3b13-8097-c8dca006ee44.roa
Signing time: Tue 30 Nov 2021 05:00:00 +0000
ROA not before: Tue 30 Nov 2021 05:00:00 +0000
ROA not after: Mon 30 May 2022 04:00:00 +0000
asID: 209242
IP address blocks: 72.52.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:1a:f5:f6:da:3f:23:77:13:73:e2:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 30 05:00:00 2021 GMT
Not After : May 30 04:00:00 2022 GMT
Subject: CN=ad2e8147-157c-417b-bc0c-fb6783890c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f6:7e:e1:ca:90:fe:71:97:d4:b5:7a:dd:28:
c6:04:38:e7:0f:46:0e:6c:6f:56:fe:60:1e:09:fc:
6d:44:77:9c:df:0c:b4:4c:4e:2f:b6:42:09:42:05:
9e:61:35:ec:8d:c2:98:1d:78:f8:ea:a0:18:b7:f8:
f3:cd:e2:ee:7f:58:01:63:91:46:be:b2:b9:a6:3e:
d8:64:19:ca:5f:94:45:37:a1:0f:d6:f5:f6:6d:d3:
d9:3e:62:39:51:cf:73:79:bc:58:26:a4:af:e3:cb:
e1:d8:85:14:54:9b:33:86:aa:52:5f:fe:66:31:8b:
26:12:e0:53:5c:41:c5:a9:f0:4b:df:c0:15:9b:30:
0c:d4:2c:ec:6a:bd:f1:80:f2:41:aa:63:8f:de:e4:
f6:35:8f:b5:1b:de:6e:e1:8e:8a:3d:88:8c:63:83:
5b:d7:ef:fa:7b:0b:0e:27:04:a7:86:a1:08:f2:a0:
4f:08:d9:97:47:41:43:71:83:aa:83:2d:14:79:e7:
25:67:80:05:0f:27:e3:7d:5d:54:e7:a4:63:89:d1:
3a:cf:c2:2f:7d:47:bb:ad:a6:43:51:67:0e:7e:24:
88:0c:1b:19:0b:8a:49:9d:91:43:6b:78:cf:f2:f9:
47:0e:37:22:d5:9e:0f:5e:7d:93:b9:0e:1f:70:46:
04:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:88:B1:F6:F1:C1:54:4C:BE:6F:47:F8:39:48:F1:C5:3A:12:D6:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/838d730a-2392-3b13-8097-c8dca006ee44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
72.52.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:25:0e:80:9a:4e:19:7b:9c:06:fc:f2:aa:4f:84:43:57:65:
9f:bf:2d:d1:3d:47:41:eb:c6:ea:bf:33:8c:d3:02:d6:60:db:
b8:a7:d5:08:c6:4b:65:fd:46:66:e5:77:a5:c7:83:c4:b0:7b:
3f:cd:26:b6:af:00:97:fb:8f:37:7b:88:15:02:7a:ad:e9:9c:
28:8f:25:af:de:7e:f2:1c:87:d5:bc:93:e7:db:3d:a6:0d:8e:
18:27:10:59:eb:58:4d:55:88:ee:32:f3:5e:a9:cb:25:35:ae:
76:b9:58:fe:8c:a5:cc:39:5b:5b:4e:63:98:f5:b9:5d:5a:df:
cd:ba:92:97:c4:5e:e3:d4:6f:65:52:20:49:27:80:8d:8f:9a:
b4:fe:8b:08:cb:63:7a:95:62:bc:da:d5:e1:9b:96:9f:18:5f:
f0:32:57:0c:e6:5a:f7:49:54:b8:d1:06:7b:4c:db:c1:ac:92:
dc:a9:9a:5a:8b:72:3d:44:28:c4:9b:50:46:02:56:4a:14:a4:
c5:52:13:67:fe:36:fd:5a:0d:1c:27:15:12:30:85:68:4d:5f:
f8:78:d1:29:01:db:35:bb:6f:75:ee:a2:73:c8:ad:b4:fd:a6:
ae:bf:cc:29:e2:77:7b:50:80:4d:17:8c:db:d5:5d:91:30:3a:
6d:e0:7a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:44 2023 by rpki-client on console-fra.rpki-client.org