Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6bf4820d-de62-39eb-b1c7-f670dcdfdd3a.roa
File: 6bf4820d-de62-39eb-b1c7-f670dcdfdd3a.roa (raw, json)
Hash identifier: G0Oz5Fc32MmknTA5oyIl/Ndb+OtFq+dzacTtK0uPVww=
Subject key identifier: 49:B0:65:52:4B:C2:53:9D:1C:08:5D:53:33:AC:99:6B:A0:A8:1E:15
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7C229B15433521BB2EFC8C8
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6bf4820d-de62-39eb-b1c7-f670dcdfdd3a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.132.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c2:29:b1:54:33:52:1b:b2:ef:c8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=dab6fea0-3415-4410-bfbe-17a46c01678d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:28:b4:bc:8d:e7:ce:a4:06:00:3f:2a:b0:
27:23:69:21:0b:27:2e:8d:57:24:c7:37:7b:e8:8b:
5d:13:f4:47:22:3f:bf:e1:ec:16:36:ff:c0:48:c5:
c7:de:e8:9f:c5:7d:5b:84:4d:28:7a:07:85:11:9d:
25:c3:a5:26:49:ce:98:fa:61:13:55:00:47:f3:a3:
4a:9a:b4:0f:99:47:e6:ff:9f:c8:b5:b2:48:4c:fe:
f8:44:0a:96:67:28:f0:90:95:07:5b:a9:0f:6b:af:
54:f4:2a:76:7b:97:36:9f:1a:05:04:37:8a:1b:ec:
78:22:4b:a6:2c:91:20:19:ff:9f:81:9e:1a:8c:2e:
89:f9:7e:c7:1f:fa:18:5e:61:0d:81:f7:15:ab:f2:
09:85:d4:d6:9f:99:92:cb:e6:36:e1:13:6d:20:b0:
ec:a2:68:f8:82:2f:21:6e:da:d6:f0:de:04:62:86:
dc:38:c6:9e:f8:44:54:1e:4d:04:fa:5b:79:10:6d:
dc:4f:8e:c1:a2:8e:29:52:4d:93:f3:a7:43:61:e9:
38:36:39:73:56:f8:58:c6:c5:98:6c:7f:8b:ff:1b:
4d:07:35:99:ba:85:a7:59:6f:89:14:55:50:ec:39:
0e:a8:a5:81:ed:c6:86:02:75:5f:9c:b5:6d:6f:9c:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B0:65:52:4B:C2:53:9D:1C:08:5D:53:33:AC:99:6B:A0:A8:1E:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6bf4820d-de62-39eb-b1c7-f670dcdfdd3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:44:bb:33:a5:8e:07:ed:ba:d5:97:76:2c:bf:fb:29:59:14:
81:4f:94:a8:38:ee:98:5f:9e:91:c7:27:75:a5:4a:e4:fb:9c:
24:8e:23:ec:03:3f:de:5d:c7:17:6f:39:5b:40:53:b3:a1:d6:
d8:0f:8d:b3:eb:5f:9c:18:e1:7b:2e:02:4c:a4:f2:b2:87:81:
2d:e2:ab:59:c5:37:98:46:76:38:04:60:e9:f3:48:e3:bb:01:
37:6c:be:6e:c2:b6:2d:fc:f4:d8:54:08:cb:01:00:0f:b6:6c:
29:63:bf:81:58:38:b2:f7:f2:9a:1a:f8:15:00:1a:7c:d3:b3:
7d:08:2d:cb:73:0c:68:00:2e:ba:b2:fa:c0:83:b8:ac:f9:5a:
6b:c7:e2:e6:5d:76:fa:23:8c:8c:05:48:53:8b:c6:48:90:c5:
29:52:23:ec:1e:df:78:24:1a:6f:22:20:59:0d:e7:99:7f:40:
18:78:7b:65:7b:71:41:63:1c:8f:0c:e0:66:b9:7e:6c:b2:27:
30:e6:ca:5c:c4:7c:21:ad:8e:88:59:8d:4b:f9:62:89:12:de:
49:cb:e1:b4:39:56:86:c8:ad:a4:48:e9:f2:78:ac:73:23:60:
12:e0:fe:fd:bc:a2:0f:ac:f1:cb:5c:1c:48:7c:b4:1e:5f:24:
85:80:19:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org