Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ff3879a-6fa3-3e63-9548-03edffdc451e.roa
File: 3ff3879a-6fa3-3e63-9548-03edffdc451e.roa (raw, json)
Hash identifier: scr6QU9PJTy/bFnSs5dtpK1O2Y0FZ1cT4PRyav8FijY=
Subject key identifier: A0:44:7C:32:0E:FC:A6:C2:1E:3E:6D:EE:8C:52:B1:5D:42:0B:AE:94
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A81C2B8DABE6531A5EB680
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ff3879a-6fa3-3e63-9548-03edffdc451e.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a8:1c:2b:8d:ab:e6:53:1a:5e:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=110579a0-3ad4-405a-97a6-ef29c992aa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:2d:e8:8a:b0:0d:7f:f1:64:8d:d7:e4:53:
03:c7:4a:6a:d0:45:ce:d7:e2:62:bc:56:7b:7f:5e:
2f:a6:0f:5d:b1:79:d6:9d:14:7f:2e:73:da:40:58:
af:5a:08:8a:e3:b2:39:28:88:6a:7e:69:54:40:75:
07:2d:1f:09:b1:a1:87:95:28:c3:32:ff:e8:20:f8:
59:2b:21:a1:52:41:db:de:8c:75:dd:59:f3:57:73:
b5:74:48:e6:e0:03:67:52:7b:40:1b:99:2d:04:2e:
e3:1c:76:ee:a5:7f:0f:99:54:8b:b5:61:5e:6d:66:
c6:3c:7d:a7:09:af:d1:ee:ef:3d:ff:0b:ef:98:22:
0e:43:30:fe:61:f2:a0:bd:79:a4:cc:69:a6:1e:e1:
f3:4d:b3:76:40:ef:2d:6f:73:fe:b2:02:2c:df:b2:
06:6b:0a:c6:ad:56:98:b5:90:60:ac:86:0d:76:e1:
81:86:70:02:7f:01:ad:b9:35:b8:70:11:70:0f:9f:
79:b9:cc:61:de:f0:96:32:f7:8a:5b:bf:98:34:98:
20:67:ec:43:5f:40:85:29:91:07:4c:ff:7b:ec:f9:
1c:8c:4a:b6:3d:d9:94:29:a7:f2:a5:51:c6:3c:8f:
29:52:f1:9e:32:81:28:48:1c:9e:9f:87:4d:f1:c2:
a0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:44:7C:32:0E:FC:A6:C2:1E:3E:6D:EE:8C:52:B1:5D:42:0B:AE:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ff3879a-6fa3-3e63-9548-03edffdc451e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:54:e3:30:8a:dd:8d:e5:ef:ca:1a:2f:8e:76:ff:0e:e3:17:
f0:8d:59:32:3e:9d:9e:d8:41:24:a6:6c:1e:3f:1e:b6:5e:9f:
b4:98:52:01:a8:db:24:03:9e:ad:76:d2:4f:6e:0e:f8:94:9e:
95:de:f5:7c:28:3e:26:0a:ba:53:12:4a:28:3f:cb:84:2b:2f:
d2:57:0b:f7:13:2d:b5:80:fa:00:a5:af:db:22:d7:19:7b:e1:
18:26:c7:2f:ff:74:7f:eb:72:58:fc:8c:4e:6e:36:84:39:05:
ff:e4:fb:c9:cf:70:34:48:0d:78:b3:30:c9:91:08:a2:27:a2:
2a:17:f6:70:e0:00:f3:3d:92:77:b5:7a:c6:c6:55:ab:a0:47:
00:62:0a:a3:29:57:da:d0:97:3d:88:ed:47:ed:76:53:10:ab:
52:20:e4:8b:2e:bc:d5:ed:1e:00:0a:f0:1b:f0:41:ef:24:c0:
0d:66:36:b0:6a:18:a8:03:63:3b:98:94:e6:b9:58:e3:d4:e0:
96:fc:13:3f:d0:5b:5d:ab:25:fb:5e:6d:af:4b:bf:f0:df:41:
2d:15:b4:0e:a7:9a:82:15:e6:33:49:40:af:6f:4b:e3:11:e1:
5a:3a:77:32:2b:12:9f:b9:99:aa:97:5f:c5:11:b7:86:87:fb:
8c:23:be:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:24 2023 by rpki-client on console-ams.rpki-client.org