Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e02005ca-e493-347f-995e-466e96348215.roa
File: e02005ca-e493-347f-995e-466e96348215.roa (raw, json)
Hash identifier: wo+Uu7kA93vSRYGnO1dLKy4zkkqs/wK2g9xy+jduXnk=
Subject key identifier: 17:8B:7B:8C:22:F2:C7:B1:D5:96:CB:D0:E9:26:E7:A7:C4:54:F9:20
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50FBA71365B4EDF2BB5400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e02005ca-e493-347f-995e-466e96348215.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 32896
IP address blocks: 216.218.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:fb:a7:13:65:b4:ed:f2:bb:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=1b7a1461-3781-47c4-823e-69d423787590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:cd:4f:c8:84:7b:6e:e7:04:e1:aa:f2:4b:
4b:95:ac:cb:32:85:be:61:f5:46:4b:60:51:e0:35:
d0:dd:95:aa:42:59:1a:80:80:11:a7:07:4b:81:c9:
79:0e:19:02:3f:82:81:20:db:e3:44:ad:52:4f:e5:
f5:86:4a:b9:d2:c0:e8:71:47:c7:65:78:c4:09:90:
93:35:eb:a3:41:74:da:3e:ac:55:e1:db:1d:08:96:
4e:88:43:1a:a1:eb:a3:3a:a2:b5:37:fb:43:84:9c:
73:ed:12:22:de:35:9f:12:35:8c:70:33:f0:2d:86:
80:e1:26:f0:5a:31:62:07:5a:cd:26:c6:1b:5b:04:
e4:eb:69:d3:c2:58:19:91:60:cc:22:5f:de:e4:18:
7b:be:db:14:f7:97:ae:5b:45:06:38:e4:14:b5:42:
d5:a7:28:74:a6:53:3a:26:01:5f:d7:35:95:66:34:
9f:a4:0d:cb:36:af:a9:68:d1:8a:9d:1d:7d:53:87:
49:0b:3b:73:e6:95:e3:d4:5f:a2:43:b0:06:c5:19:
45:ab:36:a7:e2:38:d3:b0:2e:b8:13:07:bd:16:6f:
2e:61:8a:82:2b:50:f8:b4:38:6d:5a:da:a2:41:dd:
46:6f:be:2a:38:43:9e:3d:ff:11:ea:58:33:1c:94:
26:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8B:7B:8C:22:F2:C7:B1:D5:96:CB:D0:E9:26:E7:A7:C4:54:F9:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e02005ca-e493-347f-995e-466e96348215.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.218.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:8a:3f:3e:75:7e:4b:9d:34:02:cc:b4:4d:cf:06:62:98:38:
6f:67:f6:9c:7d:87:49:76:de:ca:45:28:14:2a:9a:65:11:e2:
d5:1e:d2:60:a8:ab:ad:fb:61:87:08:c4:9c:41:ea:3e:0b:48:
1a:8b:a6:66:21:1c:e8:0d:6d:0d:ca:78:17:11:fd:d6:f0:73:
77:20:29:5e:38:03:08:f5:73:aa:87:24:e5:37:59:b4:fc:5d:
02:7a:1a:ee:96:66:91:6f:0d:98:9a:92:56:d0:b5:e6:f4:3f:
42:63:33:e3:48:9a:88:8a:6e:ac:65:72:9f:f6:e5:2b:92:d0:
8a:87:d0:47:f9:28:2f:33:ad:5c:d2:1b:5c:51:77:65:db:3c:
71:fb:ed:90:93:69:68:95:4c:7c:f2:97:bb:be:dd:18:9e:2c:
77:22:b4:4b:d1:dc:7d:99:2d:55:eb:5f:35:96:a2:37:ef:d2:
91:dc:61:01:44:74:df:69:b3:4f:c3:2f:02:46:90:4c:92:52:
11:ea:a1:ee:b7:ea:56:a2:82:e8:1c:68:ae:4b:a6:2a:b0:45:
56:34:a6:bd:ab:a1:49:d5:7a:18:6a:af:d0:a8:4e:4c:03:80:
a3:d0:ce:de:4f:da:b9:28:2b:5d:97:86:ea:c3:dc:5b:ef:57:
32:4d:85:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:05 2023 by rpki-client on console-fra.rpki-client.org