Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/55a32b5a-968d-3b31-896b-093efeb24ea5.roa
File: 55a32b5a-968d-3b31-896b-093efeb24ea5.roa (raw, json)
Hash identifier: TV5Zh0oFKKtm4+LdbLguXizMO3KpUyGXj39NeccPNgs=
Subject key identifier: 5F:C3:E6:F1:A8:6F:FC:E5:18:47:8B:37:A5:DB:C6:CC:96:52:8A:24
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7C4D0F65886938004E4E090
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/55a32b5a-968d-3b31-896b-093efeb24ea5.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c4:d0:f6:58:86:93:80:04:e4:e0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=56ca5252-457d-439d-b8cd-76829e653bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bf:50:e3:f1:d1:60:da:96:54:08:66:42:5c:
72:f0:e9:91:1f:db:90:cf:97:75:9c:31:bb:e2:d2:
a9:fa:27:2f:70:08:6c:08:28:dc:9f:d1:a7:8a:c2:
a2:ae:63:7d:5a:96:a2:73:b7:b2:8c:9d:ef:d0:8c:
0a:af:b7:a1:a5:a2:d6:9c:77:a1:bc:f2:5c:98:f0:
0a:1a:2d:9a:cb:6c:10:2f:1a:31:57:ce:e5:64:a6:
23:36:76:07:6f:e1:eb:ae:2e:d2:59:a7:24:3a:b9:
b9:f8:eb:6b:ff:af:02:a8:5b:da:35:50:fa:76:09:
f7:d8:ec:d2:22:77:25:a2:bd:6b:c1:ea:83:08:c4:
23:24:42:a1:33:05:6e:51:a2:bc:36:db:29:1e:05:
9f:50:dd:92:b4:97:bb:66:6b:1a:e6:72:d4:ae:5b:
87:b7:20:46:5a:60:45:1b:67:b6:bc:f5:6e:de:b5:
a7:ca:7c:eb:b4:87:18:94:ee:83:84:68:28:66:2f:
58:59:41:9a:98:77:9c:ce:ad:ac:dd:30:db:52:50:
51:41:e4:70:c1:66:a1:79:cb:2d:7b:23:c7:7e:85:
02:93:84:a7:26:63:aa:ab:1c:03:c0:0a:86:1e:69:
fd:bc:1a:fa:a5:53:88:3f:64:ed:8b:32:12:59:65:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C3:E6:F1:A8:6F:FC:E5:18:47:8B:37:A5:DB:C6:CC:96:52:8A:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/55a32b5a-968d-3b31-896b-093efeb24ea5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:f9:b2:a6:72:ae:98:40:6f:b4:7a:a6:5e:26:1b:13:71:0c:
aa:db:fd:f6:73:a5:d4:63:25:2b:56:ee:03:b6:20:fd:ac:f4:
87:9f:00:df:92:ab:aa:c5:27:bb:ba:29:5f:f8:e7:71:4f:98:
30:c8:68:8b:f7:8d:fd:a1:60:20:09:40:72:da:02:3b:66:8e:
fe:91:91:ee:8f:66:8b:df:89:1b:23:d9:19:0f:7c:b9:4e:a9:
df:3d:6f:f9:33:24:86:4e:fd:39:b0:87:6a:07:e0:ef:5a:51:
16:f7:87:0e:cd:48:f7:17:eb:2b:a9:e8:9b:2c:bb:f9:43:3f:
4a:f8:d4:7e:f9:bf:ae:18:1f:7d:d8:76:a2:23:a7:08:b8:64:
93:8b:94:a2:f0:a2:fd:ed:de:84:12:1b:09:56:15:f4:37:c6:
5e:82:a0:f6:bc:74:38:1f:97:98:2d:d0:2d:21:8a:90:23:4f:
32:34:e1:74:d4:ff:12:58:2a:29:ba:7b:51:e9:4e:26:f2:85:
1e:af:7e:a6:f6:00:fc:2c:16:3c:0f:44:38:29:fc:1a:d2:35:
25:b9:a2:ec:c5:30:11:ca:0f:00:8a:1c:ef:71:05:47:bd:2d:
0b:db:f4:ca:2e:b8:3c:9d:41:e5:3c:50:b3:e1:92:8c:ec:54:
ab:19:fb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org