Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba0a191c-a153-3f2b-abc8-a6afd6452963.roa
File: ba0a191c-a153-3f2b-abc8-a6afd6452963.roa (raw, json)
Hash identifier: tDoPpcdgRpIhXI0yYNKWcn6IMBwlY/IwqAb3zR/KdHg=
Subject key identifier: 33:F1:C2:82:52:AC:6B:1E:D3:30:03:59:49:13:C6:A0:05:3E:7C:18
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D7935FBD06A44B46047CF0F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba0a191c-a153-3f2b-abc8-a6afd6452963.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 393259
IP address blocks: 64.71.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:35:fb:d0:6a:44:b4:60:47:cf:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=38084409-891e-4992-b2b1-b881b37efe07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:52:a8:ff:7d:67:56:32:68:a6:7e:dd:c7:
2c:e6:ff:6f:11:83:7a:3c:5b:f1:dd:0d:6a:d8:08:
bc:d8:95:9e:ed:b5:e4:12:0f:35:6c:77:91:58:94:
69:ce:f0:65:06:20:b9:16:f8:18:1a:4c:64:63:d2:
18:3b:df:1f:fc:59:0d:d9:7f:76:a2:e5:0f:d9:96:
63:f2:58:22:9f:9f:0a:49:8d:b9:94:b3:0e:cd:9b:
61:de:4a:32:0a:2e:ee:64:e0:1e:42:48:1c:82:03:
05:eb:74:84:80:44:27:aa:a6:be:f6:86:0f:5b:53:
80:86:f5:68:d2:73:d1:78:54:c1:e0:16:e2:b7:48:
a0:57:a3:cc:bc:52:d6:55:ba:29:52:05:2f:69:4b:
92:56:37:c9:c2:98:f8:05:7a:a3:0f:10:0c:dd:dd:
6a:8f:31:05:56:5a:dd:f0:98:75:93:ce:ea:98:cd:
46:0f:e2:f3:7e:82:2c:31:d2:b3:9f:6f:9e:21:3e:
be:45:d5:7a:f5:86:85:56:8d:af:eb:8c:88:ce:3e:
51:81:c8:72:00:4a:66:85:d9:5a:c7:fe:58:69:27:
28:f1:97:64:0e:e9:a5:9e:d3:02:4d:22:fd:be:3b:
b0:5c:f4:c2:f2:c6:b3:6f:6e:1c:a4:14:74:d1:9b:
14:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F1:C2:82:52:AC:6B:1E:D3:30:03:59:49:13:C6:A0:05:3E:7C:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba0a191c-a153-3f2b-abc8-a6afd6452963.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.71.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:1b:78:d0:11:87:c9:2a:13:c8:89:56:75:c0:aa:47:c2:de:
d7:ad:2c:e7:cc:8b:86:55:89:53:b4:33:e6:6c:c3:bf:ce:4e:
7e:52:5f:c5:4e:ef:a8:5f:e6:1c:0b:af:32:6d:de:f0:ad:b1:
c8:09:08:71:0a:df:51:57:1f:f1:ad:46:91:87:34:87:89:f2:
f8:64:35:3f:1c:6e:8f:0a:7d:30:ff:64:1b:2e:d9:7e:b8:3a:
d7:37:89:7c:4f:cb:ea:cc:29:4b:6a:c7:c9:b8:d0:6d:81:b3:
9a:dd:e6:79:50:4a:91:4b:a8:c1:99:2b:72:cd:5e:7b:cd:f4:
65:39:d2:0a:92:40:fe:fe:5b:fa:b3:cc:0a:6b:df:36:71:b7:
02:42:fa:6a:13:03:09:2e:93:1e:29:d8:63:fd:de:b1:cc:74:
aa:40:ec:e9:73:56:c3:05:bd:16:ca:58:ab:32:56:40:1d:96:
35:04:a0:3d:10:3c:ce:43:c8:50:c6:b5:83:fe:79:b0:6b:0e:
ba:e4:b2:33:3a:94:7a:07:b8:f2:44:39:c1:75:ba:ca:6c:2f:
18:ca:4c:a5:bc:e4:dc:b9:b5:4c:80:ec:0f:48:5d:a0:fb:6e:
99:3e:03:ec:28:7f:1d:a5:4b:02:d5:aa:34:01:7d:0c:32:51:
5d:87:08:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:46 2023 by rpki-client on console-fra.rpki-client.org