Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d72ea8f5-02a0-321d-bd1c-78a9ad2d8254.roa
File: d72ea8f5-02a0-321d-bd1c-78a9ad2d8254.roa (raw, json)
Hash identifier: 5rbD6FaZgcYH9aGHnRscT5nAV6n/mfjnTWQyn9IE3sU=
Subject key identifier: 67:A4:A3:89:55:2D:61:D7:18:5B:D3:10:E8:A6:C2:60:32:1B:4E:5C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583E2D46202755178612484DB900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d72ea8f5-02a0-321d-bd1c-78a9ad2d8254.roa
Signing time: Tue 07 Jun 2022 12:00:00 +0000
ROA not before: Tue 07 Jun 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 139076
IP address blocks: 66.160.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:2d:46:20:27:55:17:86:12:48:4d:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 7 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=e682ebad-bbbd-468e-8399-ab5a7a0307b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:23:1f:b3:56:81:bf:6f:ca:eb:be:a4:a8:40:
e6:aa:b1:67:ca:8e:0f:b8:e2:1e:e5:58:5f:45:01:
40:73:3f:16:2f:71:ae:5b:56:75:71:fb:06:39:8d:
1d:b9:51:03:d4:f0:5b:15:e5:3e:ff:f9:69:45:33:
a3:3f:03:92:8b:39:40:78:31:c6:48:4a:5a:01:f6:
b4:53:f7:5b:b2:e5:a7:d4:4f:05:61:3e:ee:6a:7a:
92:41:82:d4:5b:6d:d1:d7:61:fb:db:a5:0c:28:a0:
af:e4:e9:1f:dc:b2:7c:df:9c:8b:92:d5:d8:c7:4e:
54:a8:0a:27:68:8a:26:66:3c:ab:b7:0e:e4:3e:89:
c3:4c:55:d4:7b:4b:fe:ec:00:39:2b:5a:d0:d9:fd:
75:ec:73:7b:21:a9:79:68:59:0f:81:76:10:04:3c:
4c:86:1f:2d:8f:45:60:36:c7:3c:45:48:c9:48:bb:
f4:08:d9:80:87:1a:ee:79:10:21:40:33:f9:b2:b4:
86:b5:d2:a4:2e:7b:2c:94:c9:0c:85:19:4a:ed:cd:
12:9e:ed:ff:b7:5e:a6:81:c0:ea:d3:90:f4:3e:64:
ab:e3:fe:84:49:65:bc:fd:49:e3:0f:14:0c:93:8e:
ae:ab:fa:e3:81:f8:b8:5e:ef:0b:58:59:a3:78:aa:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A4:A3:89:55:2D:61:D7:18:5B:D3:10:E8:A6:C2:60:32:1B:4E:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d72ea8f5-02a0-321d-bd1c-78a9ad2d8254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.160.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:b2:ad:f0:9c:38:eb:cd:ea:24:c1:10:83:94:24:6d:c6:bb:
14:d7:52:c9:a7:f3:06:6c:53:4a:dd:4e:17:67:a4:18:de:71:
3f:96:7c:0b:f6:2a:8b:c8:e0:b5:91:ea:7b:6f:04:32:04:9d:
e2:51:8c:34:b7:bb:54:19:ad:aa:8f:fe:ed:c5:06:59:b5:f5:
de:79:13:af:7e:22:91:bb:ce:9c:05:a6:38:a6:a2:af:42:ad:
ef:f4:17:d6:42:8e:0e:d4:dc:57:aa:58:64:cf:ea:95:f7:4e:
a6:80:39:69:55:72:05:df:6f:01:fa:4f:fe:f6:90:7e:84:bf:
37:53:d7:86:66:0f:cc:09:f1:e3:6b:0f:cc:4f:06:93:81:57:
46:21:bf:e0:63:53:fe:4d:c3:0a:69:05:3f:24:1e:64:85:6c:
bf:a8:74:ea:71:92:f3:6b:8c:fb:2b:0d:04:e2:ae:83:9e:29:
5d:2d:dd:40:6e:09:31:cb:4e:de:13:1c:a3:c4:4e:a0:b2:b9:
8d:82:cb:91:f5:69:b5:ae:bb:68:21:60:57:27:aa:c7:00:9f:
82:c6:af:4d:4d:09:ee:b4:d8:27:56:1e:11:9d:fa:93:0a:ea:
b1:6d:68:22:c3:20:3d:68:3f:82:0a:8b:15:c7:91:33:6b:62:
a9:3f:2a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:43 2023 by rpki-client on console-ams.rpki-client.org