Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4b621f05-a9d0-34cc-a106-dec261dee4e0.roa
File: 4b621f05-a9d0-34cc-a106-dec261dee4e0.roa (raw, json)
Hash identifier: mrOCcUpQjwK9KhZ8nZE1FTCTnBABpa6M/NX+WeN9FgQ=
Subject key identifier: 7B:F6:78:D8:A5:9D:9B:06:40:5E:CE:8C:D1:6E:BD:D7:B2:B4:0E:FA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7C2A2A62D1D17C67BB3EB00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4b621f05-a9d0-34cc-a106-dec261dee4e0.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 216.239.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c2:a2:a6:2d:1d:17:c6:7b:b3:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=b8743367-cf08-41a6-bd5d-b5f121edce64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:da:87:49:9b:de:ac:b8:23:e6:93:83:c7:66:
b2:b5:e2:d8:cd:ce:73:45:ea:db:04:bb:fc:fd:4f:
c9:8e:30:ae:90:61:db:fe:7d:ed:e1:e6:dc:a3:7e:
68:ee:8e:29:13:f5:33:05:41:01:f9:72:0e:0b:29:
62:08:d2:46:dd:a0:d9:f0:92:15:2e:7c:18:ea:7f:
5e:0b:f1:a3:18:3e:0a:5c:d6:e0:9a:ef:e2:8c:77:
d4:34:4b:95:68:df:b4:82:1f:8c:62:89:e0:99:b9:
d5:82:1f:ed:29:c1:51:5c:d9:5d:5f:80:e9:fa:9f:
14:34:2a:40:f8:60:b6:d4:84:a5:15:04:41:4a:19:
5f:29:d3:3d:61:5f:6b:2d:56:84:10:43:5b:ab:49:
19:54:1a:97:8b:36:0f:e1:72:3d:3e:4b:b2:9c:30:
a6:ce:a2:1f:9a:2d:39:d6:58:35:c7:27:e7:e2:a1:
52:40:74:f2:d3:04:e9:02:88:4a:5a:01:ed:4f:43:
39:c9:04:ce:b2:6d:72:f5:54:5d:94:c5:e1:ec:79:
41:8d:24:42:7d:56:36:f0:03:6d:c3:5e:9d:d8:c2:
20:5c:81:e0:9a:aa:1f:c6:69:db:9e:10:6e:52:f9:
89:75:5a:91:39:a8:ad:9d:ac:fe:de:75:bc:cb:55:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F6:78:D8:A5:9D:9B:06:40:5E:CE:8C:D1:6E:BD:D7:B2:B4:0E:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4b621f05-a9d0-34cc-a106-dec261dee4e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.239.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:9f:5c:84:69:27:b0:27:68:1c:d4:7a:a0:fa:c9:91:06:dc:
36:2c:18:66:86:87:1d:99:e9:e9:be:e4:9d:0f:db:ef:24:71:
3d:65:c8:d8:8f:7c:08:c7:8b:4d:bc:fa:ca:66:d4:75:3c:41:
d0:5c:9e:c3:4f:34:bf:15:23:25:a5:52:51:0e:1e:36:89:77:
29:9e:43:a9:bf:dc:86:ac:42:d2:11:97:8a:8b:c6:48:21:b0:
dc:f5:4d:2e:67:4c:e2:13:07:4d:db:50:1d:df:07:59:3e:bb:
4b:64:3e:76:b6:5b:37:fa:ae:4a:ab:92:11:5a:a8:b3:4a:30:
d4:0b:45:89:b3:d0:4d:6a:4e:f6:02:74:e7:74:3c:88:f4:87:
12:88:06:a6:a1:df:a2:65:ad:c0:42:29:ff:c3:b9:84:99:22:
9b:b0:68:58:c1:e8:a0:99:89:bc:87:f2:fa:4e:7d:1a:68:c0:
d2:e8:25:73:3b:1b:7d:3e:52:c9:6a:d0:d6:81:5d:38:fe:0c:
61:b9:50:f5:f4:16:89:fb:ab:b8:1f:cb:f4:75:a5:1b:d6:3b:
94:b4:e7:4e:a3:63:a9:e5:ea:64:d7:0c:0d:54:fc:be:f4:73:
fe:1e:f6:90:ae:46:ba:2f:7b:30:58:9e:90:20:d3:00:f5:6e:
af:6f:8c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org