Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be84a36c-32eb-30dc-b904-6f837b8efa7a.roa
File: be84a36c-32eb-30dc-b904-6f837b8efa7a.roa (raw, json)
Hash identifier: u0uam10QWmdjGrr4m4JrgmgiGM39vkeEZ2SeLYjpkNM=
Subject key identifier: C3:EB:6C:4F:36:98:61:0E:F1:32:45:20:34:1C:23:E2:AA:06:11:E4
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D793556732EEEFE2E7F2EF000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be84a36c-32eb-30dc-b904-6f837b8efa7a.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 14979
IP address blocks: 64.62.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:35:56:73:2e:ee:fe:2e:7f:2e:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=2ae67120-4431-44e9-936f-69d6c2941ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:cc:28:2f:05:88:39:77:81:4c:f8:4c:38:
83:43:a6:3a:82:f6:0a:22:26:d6:72:74:ba:38:ee:
0d:3d:ee:c7:87:92:ff:0a:91:fd:a7:12:8c:f2:51:
11:ce:9f:7f:56:f6:e8:7b:34:44:93:fb:21:82:8a:
65:16:ec:ad:53:9b:42:bf:a8:68:10:3a:08:df:8f:
4b:c7:fe:ec:d2:1d:3d:20:95:98:53:c1:7b:85:e7:
94:15:b0:6a:57:59:5d:a6:62:f3:72:c3:9a:96:f8:
8f:eb:b4:af:72:eb:a7:5f:23:dc:43:3e:1f:a3:80:
92:be:7c:e2:9b:e4:fc:57:a2:70:54:4b:01:f7:7b:
3f:15:a6:1c:8f:64:f3:64:ff:e0:55:2f:35:81:57:
32:b3:ab:cd:ad:51:c0:9e:a8:d6:46:3d:20:7f:41:
d2:1b:0c:9e:4d:e4:99:34:31:41:68:0a:7a:aa:31:
df:df:bd:e8:cd:f8:ad:83:62:d2:c4:21:3e:38:11:
94:c8:0d:7b:d7:f1:c0:51:d6:b0:1e:a7:60:4f:08:
bf:07:3a:89:db:56:be:4f:8a:fe:a3:1d:0a:4a:6c:
a5:8f:15:33:7e:6f:54:73:a6:50:32:6d:2f:49:1a:
db:d7:0d:4d:20:29:45:d4:e6:a9:77:f8:49:74:60:
47:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EB:6C:4F:36:98:61:0E:F1:32:45:20:34:1C:23:E2:AA:06:11:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be84a36c-32eb-30dc-b904-6f837b8efa7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:a1:51:c0:0e:0e:11:5a:08:97:59:53:76:0c:f9:9d:1d:21:
8c:27:eb:05:43:d3:b7:12:52:f6:84:64:6f:3b:d3:e1:61:e6:
e3:a7:47:c8:82:f1:51:03:27:dc:b5:c1:1d:9d:35:92:3a:93:
79:26:b3:e2:aa:ed:62:df:81:3b:ab:1b:c8:5a:89:6d:d4:e1:
79:4d:78:a1:93:4e:03:c1:33:4f:a2:7b:08:b8:7a:b6:be:06:
3c:af:1f:0f:b5:04:ef:6e:ac:40:67:67:1c:d5:c7:d0:1f:9d:
a8:7a:c7:6e:92:3a:91:76:55:32:b9:67:3d:4d:97:b1:c8:0a:
48:72:bb:da:05:17:a0:c7:3e:43:1e:37:99:4a:37:73:36:d2:
80:87:9f:f3:48:aa:9d:ab:8a:c8:19:25:5a:55:bb:c0:81:29:
5d:54:2a:dd:f3:67:93:09:ac:f8:b6:a4:c0:bf:0a:17:94:d1:
d1:6f:16:ff:74:3c:e9:ec:34:83:8f:c8:06:dc:58:fd:23:6a:
c9:09:b7:b1:66:db:74:ad:2b:75:ed:73:19:c5:83:9c:95:26:
74:36:23:1f:d5:ea:8a:af:0d:9c:9f:ae:19:ea:1c:79:e7:12:
b3:48:e5:c8:aa:c0:86:7c:5b:c1:c8:34:ec:a5:5b:04:3e:fa:
40:05:d5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:47 2023 by rpki-client on console-fra.rpki-client.org