Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3cefac4e-648d-3675-bd47-c5832c2a81e4.roa
File: 3cefac4e-648d-3675-bd47-c5832c2a81e4.roa (raw, json)
Hash identifier: 7wbCAb5NfvA/0PtptvzPjBzAKK4l6Cply7TYtaQeZxo=
Subject key identifier: F5:D0:27:A7:D4:DA:C6:E4:E2:98:39:13:50:79:79:34:90:C6:80:5E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A3FA85BD8031C222A47F20
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3cefac4e-648d-3675-bd47-c5832c2a81e4.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 172.253.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a3:fa:85:bd:80:31:c2:22:a4:7f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=5ff30df2-6a2b-44d1-9c04-c7daf8612fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:9f:57:ad:32:97:e9:86:d7:49:bf:1b:29:
50:e0:a0:33:8c:0b:68:7d:f7:63:1e:76:25:d8:68:
0c:bf:bc:64:ed:0d:47:3b:d4:3b:dd:17:82:df:9a:
2c:45:7f:dc:3d:a7:69:74:5a:82:08:20:c9:2b:a7:
8a:eb:25:cc:22:ab:00:b3:af:27:1b:2c:6f:82:db:
d8:02:68:f7:cf:04:4d:3d:2a:8d:3c:0f:21:ed:d4:
74:5f:39:10:57:35:43:6f:50:65:1a:54:5d:b8:e8:
16:1f:5c:79:37:7b:f6:06:d0:e7:41:10:cc:72:17:
ce:06:a2:a4:95:0e:3f:0a:dc:68:c8:15:ab:70:44:
0b:d4:72:53:30:08:b9:68:48:3f:6d:15:d7:11:01:
3e:46:17:c3:1f:9e:7c:59:55:9e:94:ea:d4:30:1e:
45:c4:3c:47:74:de:54:36:74:d3:df:be:36:87:79:
13:5c:8c:36:a8:27:d3:96:1f:46:93:2b:10:7c:4a:
63:2a:0f:05:be:ee:b5:18:3e:1a:73:96:5f:ad:c0:
a4:9b:69:ea:67:5d:96:c6:b9:c4:af:60:f7:26:e3:
68:b8:26:b5:22:c8:97:7f:98:b7:99:72:73:b3:ae:
a3:7c:54:85:c9:7d:f1:7b:cb:48:40:d0:d8:2b:94:
65:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D0:27:A7:D4:DA:C6:E4:E2:98:39:13:50:79:79:34:90:C6:80:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3cefac4e-648d-3675-bd47-c5832c2a81e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:50:04:e0:2f:8d:7e:e0:49:dd:1d:9f:5e:f9:fb:a1:07:6a:
21:ae:b7:74:3d:93:fe:6f:d2:d0:d8:7f:9e:bd:51:71:5c:3e:
23:44:dd:98:53:94:e8:77:68:f1:a8:0a:9d:f8:33:c5:8f:57:
9e:d0:d7:03:59:44:db:7f:0e:62:e2:b9:0e:ae:a3:4f:cf:74:
33:7b:4d:a9:0d:52:61:c9:74:67:3d:17:0f:de:0d:39:1c:6f:
61:7f:0f:9b:79:22:e1:1c:d4:8c:d2:2e:ec:11:6a:f8:b0:46:
00:c6:a0:f4:3f:43:5e:ff:ea:e8:e6:8a:94:2e:ec:f0:86:6a:
f2:a1:3a:46:e0:41:1e:31:6a:44:07:f8:e7:7f:69:bd:23:4a:
6e:3e:d5:97:23:4f:99:8a:0a:35:80:6c:78:20:e3:d0:80:a9:
6c:c3:cf:6d:32:85:9a:9f:0f:1f:59:9f:3c:07:b6:04:5c:0d:
d6:8d:16:f9:00:11:57:a9:75:7d:19:2a:5e:54:6d:d0:e1:e4:
c6:9e:35:c5:c8:52:c4:c7:17:2f:e0:c2:33:78:fc:99:ba:49:
26:24:d3:0b:7e:a0:92:b0:92:b7:b8:46:b4:af:14:26:1a:24:
cd:1c:ec:61:2b:27:96:f4:b1:d3:63:4b:a5:c6:21:e7:43:24:
63:86:56:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org