Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68eb3e8d-b6d2-3b54-a0d3-d7e01050548c.roa
File: 68eb3e8d-b6d2-3b54-a0d3-d7e01050548c.roa (raw, json)
Hash identifier: Eb8V7y6MKeN1UX/MOIwcX+BFFBBPSKRfwbdrBBg7zRU=
Subject key identifier: F5:20:98:4B:C0:EC:CB:41:9C:6F:C1:85:71:64:71:AF:61:08:DF:37
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7C2612AC828B4F8BA1D0080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68eb3e8d-b6d2-3b54-a0d3-d7e01050548c.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 108.177.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c2:61:2a:c8:28:b4:f8:ba:1d:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=6102ec98-1365-4aec-9363-ffe80580c062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:6e:41:2f:a6:af:2b:7c:0b:26:3f:a2:c0:
f9:6b:63:c9:b2:ad:2b:5d:80:da:07:85:60:47:c4:
1e:0a:dd:d2:f5:2d:a9:b6:c1:c5:b8:91:01:16:68:
26:21:95:b8:b9:ae:89:5d:88:71:8a:01:f6:b2:f3:
50:eb:a2:88:3e:8c:55:b2:c8:2f:ac:a0:51:41:09:
79:46:78:fd:93:14:ac:18:6f:82:2c:8a:5f:3d:7e:
1e:b0:e7:59:cb:8f:14:d0:f4:c9:c0:5f:d1:1a:77:
81:4a:3d:5f:86:22:26:03:48:84:69:60:e3:4a:ab:
1b:a6:78:09:b8:69:2c:1e:40:02:70:bd:d6:77:88:
0f:b4:b1:cf:92:c0:51:ef:b9:e5:c5:39:8d:85:8c:
f7:e4:1d:74:f9:7e:de:0f:b9:81:3f:58:17:ab:16:
25:67:86:c0:66:17:70:32:4b:d7:12:f2:29:5e:79:
0c:6a:67:b8:19:54:c9:72:d4:93:74:a5:c4:0e:15:
03:ee:a0:ec:64:a9:b6:7e:2c:76:e7:51:0d:4c:53:
80:2e:47:09:68:f3:fa:cc:0d:f9:99:ea:a0:5e:e2:
33:cf:ee:9d:de:d9:8e:4e:d8:d7:a9:83:44:47:c5:
fb:3c:ac:9e:67:70:56:02:5f:10:c2:e2:44:83:a1:
41:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:20:98:4B:C0:EC:CB:41:9C:6F:C1:85:71:64:71:AF:61:08:DF:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68eb3e8d-b6d2-3b54-a0d3-d7e01050548c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:c7:15:f0:c9:d1:db:4d:e0:ac:97:22:6f:cd:43:ff:ec:29:
bd:3c:27:f4:a2:38:4c:60:06:d0:13:a1:97:56:fb:e1:56:25:
4d:cb:ae:31:f5:ed:0e:f3:61:14:30:ad:07:9f:0b:9d:66:04:
b1:d9:6f:b5:38:28:cb:fe:47:fe:5a:f8:0a:66:1a:33:4c:d3:
08:1c:e5:fc:dc:82:4c:55:7d:04:90:8c:ea:23:90:56:b6:20:
02:bf:34:e4:cf:7b:dd:61:b2:c8:ca:36:1a:c5:2f:43:9a:0c:
ac:90:ce:bc:ea:9f:59:06:ed:e5:19:ef:e9:93:a9:b6:a5:96:
73:e0:ac:fb:27:70:ae:12:43:98:29:a3:9b:d7:cf:c5:b6:c9:
89:96:73:56:1b:13:be:ac:bb:bf:0b:34:ec:0a:b4:f8:1f:7f:
3a:fe:27:0f:1e:93:72:6b:5d:30:96:9c:e6:3e:ba:1b:a4:28:
cb:aa:8c:f2:be:cf:14:9a:5a:06:0e:9c:76:65:4c:02:57:24:
b6:f3:cc:f1:5d:5a:a4:96:83:69:51:ae:33:d4:c8:19:d9:29:
08:dc:12:26:27:ce:e0:25:c3:02:05:2b:a5:8c:1d:77:3b:88:
8e:88:3a:c3:03:f5:fa:a7:fb:cb:d3:a9:dc:82:73:47:55:a0:
29:35:7a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org