Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb9d8775-68be-3da2-88d4-8f97bdbc88de.roa
File: bb9d8775-68be-3da2-88d4-8f97bdbc88de.roa (raw, json)
Hash identifier: kOp6CQk1NfQzRU7pCnILOphVVlPMCJTKKYgPxHNIf6k=
Subject key identifier: D2:4E:F4:F9:8F:FA:FE:61:92:0A:EB:0A:66:77:57:73:A5:F0:47:F9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584144BB046FCADAF23AEFD3B280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb9d8775-68be-3da2-88d4-8f97bdbc88de.roa
Signing time: Sat 18 Mar 2023 12:00:00 +0000
ROA not before: Sat 18 Mar 2023 12:00:00 +0000
ROA not after: Tue 19 Sep 2023 04:00:00 +0000
asID: 399084
IP address blocks: 65.49.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:44:bb:04:6f:ca:da:f2:3a:ef:d3:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 18 12:00:00 2023 GMT
Not After : Sep 19 04:00:00 2023 GMT
Subject: CN=45bc8ab1-45dd-4a68-a516-4448534cf198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fd:6d:6d:ac:9d:24:be:94:c8:03:d6:6d:aa:
4f:87:6c:f0:be:5c:92:f9:54:ed:0f:e9:31:41:da:
24:ed:fb:ca:a0:75:02:6a:e2:a9:d8:f2:56:e5:15:
14:e4:e3:80:45:9f:d8:0d:a0:ec:02:06:52:24:26:
92:08:bf:75:34:23:75:d3:f4:98:49:f1:fd:85:42:
2f:9c:cf:45:14:c8:23:f8:21:3d:53:e6:d2:bb:20:
2d:59:25:dd:ca:e6:d2:3e:8f:9b:7e:03:b5:6a:33:
df:9e:33:57:2b:09:30:04:06:3b:8d:de:5d:20:9f:
40:33:8c:3e:95:e2:06:a3:b5:44:1d:d5:b1:a2:4a:
53:e1:92:85:e9:03:05:25:e1:07:70:66:a9:5e:8b:
c9:ea:b4:7b:31:39:b1:71:76:94:8c:bb:22:78:d9:
17:80:77:69:b8:f8:f3:4f:9e:71:21:3b:33:08:bc:
5c:8f:51:29:5e:5f:b7:d2:f6:81:c8:83:f8:e7:bb:
5f:63:e1:6b:e8:ca:aa:20:8b:70:a4:a1:0f:5a:16:
50:d5:72:8f:00:75:a0:8d:38:d0:c0:39:21:7d:ca:
93:a8:e9:66:df:a3:36:30:24:29:34:56:9f:93:44:
16:97:2a:88:50:5b:b5:a3:0f:a0:54:2f:21:34:79:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4E:F4:F9:8F:FA:FE:61:92:0A:EB:0A:66:77:57:73:A5:F0:47:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb9d8775-68be-3da2-88d4-8f97bdbc88de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:01:5d:e1:a6:be:d4:fa:d7:f5:f9:0a:64:f1:3c:23:b7:bb:
75:0b:93:d1:95:e3:aa:a9:57:b8:5e:29:05:3f:4e:19:52:00:
e6:c1:dc:ae:15:e6:ed:c8:a0:6f:5b:49:7f:3b:73:1e:79:0c:
2c:56:0c:72:40:3a:47:55:2e:09:e6:77:e7:e8:03:2b:5a:6d:
a9:3f:49:fa:1c:bd:95:d1:91:d3:19:22:b9:a4:63:71:95:a2:
73:80:dc:c0:bd:29:05:58:70:47:92:e4:e4:c4:66:30:de:92:
d2:4e:3d:7b:bc:6f:85:53:35:e7:76:00:5d:5b:93:7b:a5:6e:
31:2b:91:6b:98:b1:d3:6f:6b:37:ee:73:9b:2b:90:18:f0:b9:
f5:8a:de:96:27:72:da:35:3d:c1:f0:e7:2a:63:97:cc:80:15:
dd:33:e3:3b:d3:ec:91:e1:5d:3a:0b:53:63:16:45:7a:5b:4b:
4e:e1:85:dd:2d:73:68:ca:34:0d:d8:33:1c:df:18:de:36:45:
14:72:4a:f8:0f:aa:3c:57:8c:60:ff:61:31:a6:13:98:d8:b5:
71:dd:82:0d:da:37:97:93:83:47:7c:ff:dc:47:96:2c:9f:7b:
c0:ba:74:43:e9:84:ed:3d:26:4f:26:33:72:ab:1a:38:de:9d:
62:2e:5b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 04:29:56 2023 by rpki-client on console-ams.rpki-client.org