Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5817cae2-5ab0-37e2-95c4-4d3837b29289.roa
File: 5817cae2-5ab0-37e2-95c4-4d3837b29289.roa (raw, json)
Hash identifier: I3Zn8hkNqM1IDz3d88J15PFS3Ncg9ZQLJ//Emva46tk=
Subject key identifier: FF:C7:A7:F7:8B:32:42:8A:BE:4E:70:AF:48:14:84:F5:89:C5:65:33
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B559C135FAF5FD8F9AEC80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5817cae2-5ab0-37e2-95c4-4d3837b29289.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b5:59:c1:35:fa:f5:fd:8f:9a:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f44b0f42-f27b-4786-b1ae-6619e3ad393e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:29:86:01:50:51:b6:cb:0e:d0:1a:23:f5:2a:
07:c3:3e:fb:82:e8:b6:4d:3b:c9:df:53:ad:84:f5:
c6:31:d8:e4:f4:2c:bc:ef:f8:29:64:66:35:60:3c:
6b:15:d9:b0:ec:7d:b9:05:23:89:42:13:a2:a7:43:
34:ac:e8:e1:04:be:8e:be:a9:8f:92:05:4d:61:b5:
5d:ee:38:76:32:2b:7c:25:6f:7e:71:7b:9e:1a:3e:
ca:7b:c6:5c:0f:b7:94:38:8e:ba:07:5b:57:78:e1:
61:79:76:93:43:d3:0c:b1:4c:bc:7f:4d:94:5a:7d:
94:0b:80:31:ed:24:a6:02:5e:21:31:f7:aa:92:7e:
be:85:1e:4f:9b:f2:65:fa:ea:82:89:7a:4e:74:6c:
2f:2c:d8:93:18:d4:a8:f6:3a:f9:a6:85:c1:ad:bc:
ae:6d:92:05:6d:b7:de:b4:58:35:22:fb:5f:3a:54:
35:c5:99:da:d9:b3:0a:92:2b:b6:78:67:13:aa:77:
72:5d:66:c5:f9:5e:ac:5e:b3:6d:31:d0:d0:da:c9:
40:6a:17:a4:ed:51:f2:06:4e:03:aa:b7:ab:0b:f4:
65:8c:02:a0:ff:f0:43:77:be:3d:1b:af:ba:4e:3c:
67:41:dd:34:ae:6f:38:ef:aa:00:7a:74:d3:6a:69:
41:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C7:A7:F7:8B:32:42:8A:BE:4E:70:AF:48:14:84:F5:89:C5:65:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5817cae2-5ab0-37e2-95c4-4d3837b29289.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:a3:34:eb:28:55:be:97:4d:26:62:5c:12:13:8d:d7:20:88:
96:a5:c5:fb:7e:55:2b:1d:ea:67:d4:96:a8:f4:e9:c3:1a:eb:
29:cc:61:56:f3:49:96:38:fc:30:65:c3:49:6f:e6:2d:75:03:
31:e2:68:8e:fa:c7:85:b6:8b:c1:d6:6d:10:06:16:c2:c3:be:
a6:a5:37:85:1b:7e:c1:5a:6d:46:a3:f6:89:d7:7c:da:d3:31:
00:a2:9c:a3:20:39:56:e0:2f:92:4b:93:b7:b5:4f:9f:77:6d:
d4:48:47:b4:b0:2f:62:72:6e:fb:ec:0f:98:7d:aa:d4:ed:0c:
d8:ac:51:76:df:4c:12:b0:96:34:e7:30:9d:c1:74:a3:cf:00:
60:3b:27:99:06:2e:1e:20:55:f6:74:20:63:1c:77:9f:4b:e7:
fe:5f:5a:6a:69:d8:ec:cd:2c:f2:b2:97:4f:0b:c2:35:9a:1d:
7d:36:26:48:0d:b8:76:4b:b0:40:2f:f7:0c:a0:e9:1a:12:6b:
24:90:c7:c3:e7:f5:2f:bd:1e:e6:50:cc:e6:13:83:e5:9a:26:
70:8c:08:f4:99:69:d8:36:f7:6c:ef:a5:5e:fb:4e:da:d7:44:
cd:79:5e:26:ee:c8:ae:96:d1:d8:86:cf:2c:6f:99:3f:31:0e:
5a:ce:b6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:12:44 2025 by rpki-client