Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b59f3e1-0c3f-33f5-8d2b-ced11c7b2fcb.roa
File: 5b59f3e1-0c3f-33f5-8d2b-ced11c7b2fcb.roa (raw, json)
Hash identifier: ACvORCW0xhEsNyLz7AK8uowfFR3SYCXFUHkOdnm9j74=
Subject key identifier: 3E:FF:E7:3C:E9:AD:B4:4C:AB:C3:D4:0D:3B:7C:22:23:0A:E8:54:0B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7C353239ADD2B06A5A94980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b59f3e1-0c3f-33f5-8d2b-ced11c7b2fcb.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c3:53:23:9a:dd:2b:06:a5:a9:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c4188dc8-6322-4060-adbb-94c0dbde82cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:92:9b:57:ce:11:69:a3:01:df:a3:75:0e:
eb:79:92:24:2b:c9:b1:fd:ac:23:90:04:e4:83:26:
18:f3:cd:fc:2e:39:df:40:b1:67:2f:06:ca:60:b9:
73:3a:ac:13:c4:f2:c4:2e:2e:5e:17:98:9a:30:04:
e9:57:49:70:d0:b2:c1:a7:76:42:88:79:74:14:3d:
3e:87:c9:34:fc:a6:63:82:78:27:1c:17:74:64:c4:
2d:b0:f1:98:61:8d:92:7c:b3:f6:0c:26:8e:26:7c:
0f:9a:3e:00:8f:75:a8:a3:bd:2d:c1:36:7a:77:a9:
88:d2:0a:c9:34:e0:33:43:84:11:da:99:aa:53:a0:
b1:2b:1e:61:5e:c0:fc:83:90:7b:4b:2a:c6:34:64:
37:71:73:fc:c3:b5:81:54:0a:c0:fe:fd:2d:60:6d:
85:41:04:f9:0e:92:e4:1d:1c:03:99:03:5d:af:ed:
96:b0:8a:46:2c:4d:39:78:e9:1a:c4:4f:cc:ac:8f:
87:de:5f:1d:ac:61:2f:9c:10:af:f9:4f:95:34:69:
4d:bd:c7:00:0d:65:f2:65:b1:64:50:63:74:a3:2a:
78:07:20:c6:0f:86:ca:4c:60:44:93:6d:e3:f8:f7:
70:84:96:9c:74:e5:2a:97:09:79:cb:7c:d9:c8:1f:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FF:E7:3C:E9:AD:B4:4C:AB:C3:D4:0D:3B:7C:22:23:0A:E8:54:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b59f3e1-0c3f-33f5-8d2b-ced11c7b2fcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:2a:64:3a:fb:47:4b:87:7c:9c:54:37:68:df:88:4e:23:90:
31:d3:5b:d5:12:2b:c1:f8:e5:0c:60:66:69:46:47:53:04:b4:
b5:46:99:36:ad:35:fb:11:4f:51:19:52:0d:bb:00:d0:51:64:
2c:bd:cc:64:54:6d:c1:aa:b7:3d:c2:d9:3a:3f:ce:94:2b:53:
d2:44:8a:95:c6:d5:7f:0b:71:b1:04:b0:c5:25:52:b0:04:35:
dc:48:b1:04:7f:e2:ab:64:76:a9:58:bc:b0:d8:a2:9c:91:96:
9d:ce:5e:90:d8:de:82:59:fa:26:72:cb:36:2f:2d:64:58:7f:
94:43:ef:04:50:d5:de:4c:cf:96:2a:e1:1d:af:38:90:2f:ef:
41:bd:52:16:8d:db:64:b5:ba:dd:cb:19:e6:38:de:9c:03:a0:
b8:c2:d9:94:e0:e9:cf:58:13:a4:24:fb:e3:2d:0b:20:01:15:
7a:26:67:25:86:d8:8b:1a:46:85:fa:07:be:cd:82:20:21:e5:
66:28:2d:ce:a6:4f:0e:3b:33:d3:92:cd:0e:35:55:78:68:7c:
ef:15:1d:1a:66:59:03:13:b0:a5:40:08:9b:c4:29:32:8b:19:
01:e4:57:19:06:58:33:5e:5b:08:87:f4:9e:2a:34:63:2d:9b:
e8:5b:6d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org