Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/122f45c0-4b77-3a0f-a241-67099530a7d3.roa
File: 122f45c0-4b77-3a0f-a241-67099530a7d3.roa (raw, json)
Hash identifier: glOngqc3BdpNhuMuCQZz4juQPPdS3i0BXATqksrrWQI=
Subject key identifier: 64:CF:8F:73:EF:B1:7C:7A:A2:48:D8:FE:30:C5:A8:2C:5B:0F:99:03
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B32F3A3BA673A809CE63FC
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/122f45c0-4b77-3a0f-a241-67099530a7d3.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.150.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b3:2f:3a:3b:a6:73:a8:09:ce:63:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=8996288b-e020-4af8-8e80-7822e2f0b173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:02:48:ce:9c:b7:3c:11:ae:74:7c:4a:36:
ab:96:48:cc:dd:78:41:83:84:11:ef:c1:c5:6d:66:
81:71:87:76:6d:e4:71:51:18:4e:c0:94:be:30:eb:
eb:83:f6:d8:fa:65:1c:e8:66:c1:2d:a9:a1:b5:df:
a8:a6:df:51:e7:47:32:ff:9d:f0:df:62:47:07:77:
a3:db:dc:98:c9:aa:fe:12:ae:b6:5e:b5:d1:58:e0:
df:5f:b6:15:c2:33:9a:d7:51:c4:db:a0:ea:8c:54:
e7:38:a1:46:94:0b:bb:28:f0:2a:f6:08:7c:58:c3:
d0:15:e3:1a:02:04:4c:a3:d4:b2:0d:8a:ac:ff:aa:
72:d0:e0:49:65:ea:19:94:18:a2:02:e6:7c:41:70:
bd:93:d6:67:81:56:b8:4a:6e:5d:19:a9:1d:a6:e1:
d9:e2:bb:06:16:78:25:27:db:53:d8:81:27:b2:77:
16:83:e1:8d:6d:61:fe:7d:3a:fb:51:3c:ad:55:fa:
5b:73:5d:ff:0e:1e:03:c8:de:32:b7:b0:3b:29:29:
d8:39:32:bd:99:68:a8:1a:8a:ad:87:d3:04:26:d3:
63:19:08:87:6b:07:57:24:ae:09:65:dd:ab:dc:e1:
6d:07:b5:51:b1:51:16:2e:b6:b7:53:14:f3:83:d1:
f5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CF:8F:73:EF:B1:7C:7A:A2:48:D8:FE:30:C5:A8:2C:5B:0F:99:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/122f45c0-4b77-3a0f-a241-67099530a7d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.150.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:95:6d:0d:fa:9a:b1:f1:2b:97:b2:98:c7:96:36:cf:b0:a8:
05:25:b8:2f:a9:62:50:de:ad:c5:f4:dd:62:c9:27:58:ae:21:
09:e2:d2:78:51:cb:36:3d:04:3e:32:4e:e0:3b:1e:0f:1b:41:
d9:29:63:08:0f:8f:e2:11:6e:8a:94:a3:c3:bd:8d:d3:bd:33:
8f:be:4b:4e:92:b8:f2:25:c1:8a:15:b1:01:74:c7:19:07:76:
84:f1:2c:46:b5:b6:07:98:99:41:00:e7:0b:16:21:95:10:2e:
cb:ec:a7:67:de:16:03:e9:d5:90:88:03:a0:18:1e:c0:8d:8c:
1c:40:47:2e:7b:6f:6e:9f:a2:ba:bb:b8:a4:78:34:51:19:26:
89:15:66:6e:60:4b:8a:2f:86:01:4e:ac:79:dd:0a:08:3a:fe:
b4:0c:9a:ea:19:75:71:48:54:34:d7:3d:a3:d4:70:66:3e:82:
8b:54:a8:86:94:f2:f4:32:36:ab:75:98:b8:3c:95:e1:6c:ca:
df:05:d4:63:35:7b:d8:6e:08:b4:f1:36:6a:c1:ee:5e:73:b7:
81:b3:0d:db:d0:31:41:db:66:a7:02:36:48:98:0d:cb:62:ab:
bd:46:ea:e6:dc:1e:e7:f6:bb:dc:3f:22:71:9e:64:4a:5e:57:
bb:80:12:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org