Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/567964fb-b6c9-3bcc-b975-3981edf104e8.roa
File: 567964fb-b6c9-3bcc-b975-3981edf104e8.roa (raw, json)
Hash identifier: qU71bdHxUyWSUAY/3fnpFgqLgPOH8hRFRUastufL1jc=
Subject key identifier: 43:72:D3:71:48:0F:42:05:8C:20:55:F6:18:73:D8:64:67:26:91:07
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B2C4DE216892E98C5A9400
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/567964fb-b6c9-3bcc-b975-3981edf104e8.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b2:c4:de:21:68:92:e9:8c:5a:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=49b7c7ca-4370-4276-b218-e7fad0170141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b2:ae:47:1c:a8:9a:a1:52:fb:a6:39:db:d4:
d2:d5:90:e0:ba:01:29:bc:12:a2:74:5e:ef:9e:dd:
71:a2:4f:73:ea:2f:ba:56:bf:37:9a:e3:88:9b:87:
c9:d5:1f:12:83:bc:d5:90:50:90:e9:4f:41:47:fd:
7d:e5:dd:d5:2c:56:9f:d1:73:81:d1:87:37:eb:2a:
54:76:3a:4d:78:c4:64:69:b5:8b:f8:8b:97:08:9d:
5e:ff:b3:69:5c:07:8c:96:a4:b5:b6:b8:df:1b:8b:
c7:2d:55:67:be:a6:81:49:18:02:c2:bf:3a:d9:5a:
88:19:90:78:3e:3d:1b:6b:8d:ae:70:e3:43:3b:e3:
aa:38:9b:89:14:6d:fb:3d:cc:04:80:f9:d7:58:5e:
f0:0d:c3:48:3d:ce:bf:7c:c2:b4:16:52:93:28:29:
1d:b5:bb:da:b8:d7:fb:15:b3:96:04:89:b6:d2:9c:
ac:c1:c0:77:22:c6:81:8b:97:15:88:02:1c:10:71:
e0:60:35:7d:c9:a3:f1:eb:80:e1:f6:4e:c1:0a:bf:
71:1d:93:63:a6:63:8f:8f:b2:ca:b9:15:95:00:b9:
31:79:23:22:bf:85:f9:06:08:0c:77:a3:79:f4:85:
7a:25:12:ae:61:66:42:fe:01:cb:f4:9c:a4:f7:3f:
b7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:72:D3:71:48:0F:42:05:8C:20:55:F6:18:73:D8:64:67:26:91:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/567964fb-b6c9-3bcc-b975-3981edf104e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:a7:90:0c:e7:53:cb:50:d6:da:c9:2f:c4:1d:82:85:ba:dd:
67:ad:68:3a:c1:88:6b:6a:11:e0:b0:fb:27:73:e6:ab:4a:3d:
ae:30:16:cd:d4:35:26:03:92:f8:6c:86:0f:60:47:9b:da:2d:
b0:bd:e6:16:3e:fe:e2:c6:8e:8f:e9:de:6a:32:d1:02:5b:81:
39:ad:6e:0b:1a:22:69:0a:51:71:e5:2d:df:33:cd:39:b1:cf:
ec:7c:a2:90:2f:2a:91:b3:ed:d2:d5:83:60:f7:9f:07:95:ea:
90:0d:f2:43:07:29:3f:0b:f7:db:78:dc:ea:85:40:0f:72:c4:
40:31:17:eb:6e:3d:71:cc:f9:5b:a1:fa:e7:4d:b0:d3:53:2c:
00:e3:b8:8e:dd:c2:82:bc:21:3a:8b:8d:0f:54:a4:e4:a5:86:
82:a2:50:d2:d9:a9:0d:9f:ff:e7:5b:a4:bf:5e:70:b9:25:7c:
06:b8:c4:b6:12:3e:fa:88:1a:07:85:24:3e:f4:af:47:fe:43:
a3:e9:c0:d4:0e:e8:97:dd:e5:86:c8:28:b7:99:bb:99:20:b4:
a9:00:11:e0:0e:08:43:0e:cf:25:d6:7e:df:2c:5b:9e:4c:e9:
52:96:18:5a:29:1a:eb:78:ef:d1:a7:88:f3:01:10:f7:4a:92:
95:22:84:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org