Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a52cac1-1be3-34e8-b386-f1c35d4ee951.roa
File: 4a52cac1-1be3-34e8-b386-f1c35d4ee951.roa (raw, json)
Hash identifier: X1hztQX0p2/fm185uu/l3ABsXNaGeYU1Z+Z8MIpTdt4=
Subject key identifier: B7:81:78:8E:81:DF:73:E3:F4:15:D1:3E:CA:E3:3D:54:F1:D2:62:3B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7BB057611F097A9B527D180
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a52cac1-1be3-34e8-b386-f1c35d4ee951.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 108.177.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bb:05:76:11:f0:97:a9:b5:27:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=d9151a3d-7c7e-405d-bfd6-b475d35d92ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6a:57:f2:21:ad:7c:35:57:19:60:1b:63:47:
f8:c7:76:8c:43:d5:4c:e1:f6:d6:fc:39:b7:73:5b:
fc:62:dd:98:c2:34:40:1a:92:ef:c1:24:dc:a5:8f:
8a:48:cb:3b:db:8a:9e:10:2a:80:4a:55:46:56:29:
f8:10:53:6c:e1:97:d4:5d:90:e8:5c:aa:70:df:b5:
0f:54:36:32:de:21:b1:7a:9d:9c:3d:0a:2d:7a:d2:
20:66:ed:1c:a6:4f:dd:0d:65:47:27:47:db:60:15:
3d:a7:27:a7:50:ad:90:63:88:f4:7b:a3:28:86:7f:
b3:d6:e9:6d:4c:e2:c0:46:de:21:2e:f5:4a:81:73:
bd:a9:b5:d7:da:3b:3d:a7:cc:25:8e:7d:ae:a4:1d:
f7:98:78:c2:29:eb:7a:48:e4:27:3d:e0:77:78:3c:
32:90:ee:e5:d8:60:b3:c8:b4:a2:ef:8f:b5:b8:d3:
9f:08:9f:a5:d2:af:00:76:f1:e5:22:8b:44:5c:71:
05:83:d3:ba:3f:f9:9a:35:47:37:d7:21:4b:ce:4f:
36:e2:7b:c1:18:e8:76:fd:d9:82:ad:57:94:80:84:
bd:94:a2:1b:5d:b8:11:1b:00:7d:39:19:20:e0:85:
d4:b7:54:27:f1:31:67:73:bb:52:43:08:ee:30:8b:
69:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:81:78:8E:81:DF:73:E3:F4:15:D1:3E:CA:E3:3D:54:F1:D2:62:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a52cac1-1be3-34e8-b386-f1c35d4ee951.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:51:2b:88:12:e6:0e:5d:74:38:1b:74:da:7a:3d:f6:f2:26:
80:00:f3:de:98:0a:49:fd:da:07:80:a8:87:82:ce:ea:46:08:
e9:82:23:f1:66:7c:2f:c6:16:69:77:e3:8a:c9:be:9e:d0:e4:
b3:04:8e:37:da:59:0f:ee:93:0f:cf:2d:eb:b0:61:77:4a:47:
e1:6f:15:40:cd:31:11:c8:b2:80:9d:37:36:34:b4:1f:93:2f:
29:a5:e8:d3:35:29:dd:74:1b:af:06:cb:e5:4a:da:ac:f5:22:
8b:13:a9:ee:73:41:b6:f0:e7:8f:a3:02:8d:ce:e4:24:e8:45:
1b:0f:31:e3:67:3c:54:1c:2f:e8:ea:f9:5f:13:ae:e6:53:d0:
f9:04:cd:a8:83:f3:9b:fb:a3:7b:dc:62:26:1a:cb:34:ec:c2:
78:27:47:31:34:82:d5:23:af:61:57:b5:0b:24:23:a8:66:df:
ef:25:e1:f1:d6:6a:f9:2a:90:03:ea:63:50:23:cf:b3:5a:9a:
d9:02:48:62:e4:0f:9b:53:e3:1b:a6:12:8b:56:76:b7:d9:22:
a3:7f:c6:26:af:66:3d:81:69:45:62:26:50:f7:8d:23:c3:5d:
13:e5:04:3c:9d:eb:e1:79:9b:d2:fe:3f:5d:9c:51:ad:31:9c:
7e:da:e9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org