Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a94ceb2-1b91-3783-8b02-c07cab47ede8.roa
File: 7a94ceb2-1b91-3783-8b02-c07cab47ede8.roa (raw, json)
Hash identifier: d/iRLZc1ku5QOkHHhf8WnH3UgqiqG+LYgkYmT9YZJ7A=
Subject key identifier: B6:B7:D0:4C:12:8C:C0:93:E8:61:55:24:3C:52:50:33:72:AC:1B:A1
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7BCC2E24539F18D2ACC9B24
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a94ceb2-1b91-3783-8b02-c07cab47ede8.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bc:c2:e2:45:39:f1:8d:2a:cc:9b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=ac14b142-38fd-4ed1-bb8f-504f5b60954f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:83:2f:ba:20:a1:5e:4e:59:ad:fb:0b:8f:77:
ec:c9:ac:72:46:66:34:e9:f6:8e:53:92:18:6a:e4:
57:89:39:10:ff:9d:09:eb:08:c3:e4:8f:9b:0d:90:
a6:4b:7d:9a:3c:cd:f2:02:7f:d0:9b:ee:ea:23:d0:
68:2e:27:db:e8:0d:47:66:b8:ab:82:b7:ed:4d:c0:
84:82:ed:64:40:c7:5e:13:c6:6a:2d:70:e9:3b:22:
5e:2f:36:51:bf:bf:a7:7e:77:37:b2:27:3f:d2:98:
da:94:26:bd:34:29:d8:af:6a:14:a1:9e:ed:2d:f2:
1b:92:9a:60:7c:8a:40:ac:60:cb:e2:31:06:cc:6f:
79:2c:c9:c8:60:f8:bd:97:17:48:69:09:a5:3f:24:
25:97:45:20:b3:1d:66:e8:c7:c8:4d:86:1e:c7:4c:
6a:8b:61:d0:02:5c:1e:ee:30:98:c3:74:56:d5:ae:
31:0b:2a:14:2d:4b:c3:bc:39:17:4a:4f:1a:a2:af:
5a:62:f1:80:e9:05:d2:ef:72:97:2b:78:89:35:52:
9a:18:d1:14:d6:a5:c2:3f:11:e5:10:20:12:6f:ea:
d5:f7:9a:91:dc:bc:8a:41:e8:3a:37:6e:b3:b4:8b:
cb:b6:97:72:e6:f1:2a:94:49:dd:22:39:00:1e:60:
49:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B7:D0:4C:12:8C:C0:93:E8:61:55:24:3C:52:50:33:72:AC:1B:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a94ceb2-1b91-3783-8b02-c07cab47ede8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:96:14:ab:ca:2f:ef:86:cb:26:a4:5b:75:7b:a6:b5:b5:01:
ab:69:a8:af:13:ce:2f:e0:f7:f5:82:31:c1:33:ca:67:a3:00:
94:81:3b:b4:31:a4:59:34:42:48:02:6c:1b:c3:94:31:3a:36:
d5:0b:0e:8e:32:d1:53:13:14:2f:a2:76:3c:23:ff:d5:84:60:
fa:e3:13:3c:81:29:8c:62:40:25:d2:ce:16:17:1f:13:72:62:
61:af:1c:89:ba:49:78:14:eb:fb:df:de:27:a4:ca:03:ef:65:
fe:54:a1:70:a8:7c:c3:12:09:bf:09:8d:35:9e:72:27:96:13:
7b:f8:1f:44:2f:1c:db:ea:14:a2:75:4b:6d:6e:05:3b:d0:97:
4f:52:24:64:50:63:ec:8c:d0:49:eb:04:94:af:08:6e:2a:25:
c8:35:68:4b:8d:c1:4d:07:7e:b6:26:6f:0b:98:8d:c8:de:26:
3c:b0:e1:a8:11:0b:74:27:89:9e:ee:b2:5c:23:ab:de:10:9c:
7a:0f:f8:ef:db:7b:13:68:16:6d:17:69:09:e1:3f:b2:cd:36:
0a:a1:d5:b4:2b:b5:9d:f8:fc:ed:49:c5:4b:35:ea:39:4e:7f:
2d:9a:99:34:d0:f4:eb:2e:57:c0:ce:e7:2a:56:dd:b7:82:78:
af:55:74:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnvMLiRTnxjSrMmyQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YWMxNGIxNDItMzhmZC00ZWQxLWJiOGYtNTA0ZjViNjA5NTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64MvuiChXk5ZrfsLj3fsyaxyRmY06faOU5IY
auRXiTkQ/50J6wjD5I+bDZCmS32aPM3yAn/Qm+7qI9BoLifb6A1HZrirgrftTcCE
gu1kQMdeE8ZqLXDpOyJeLzZRv7+nfnc3sic/0pjalCa9NCnYr2oUoZ7tLfIbkppg
fIpArGDL4jEGzG95LMnIYPi9lxdIaQmlPyQll0Ugsx1m6MfITYYex0xqi2HQAlwe
7jCYw3RW1a4xCyoULUvDvDkXSk8aoq9aYvGA6QXS73KXK3iJNVKaGNEU1qXCPxHl
ECASb+rV95qR3LyKQeg6N26ztIvLtpdy5vEqlEndIjkAHmBJpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLa30EwSjMCT6GFVJDxSUDNyrBuhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2E5NGNlYjItMWI5MS0z
NzgzLThiMDItYzA3Y2FiNDdlZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKWWFKvKL++GyyakW3V7prW1AatpqK8Tzi/g9/WCMcEzymejAJSBO7Qx
pFk0QkgCbBvDlDE6NtULDo4y0VMTFC+idjwj/9WEYPrjEzyBKYxiQCXSzhYXHxNy
YmGvHIm6SXgU6/vf3iekygPvZf5UoXCofMMSCb8JjTWecieWE3v4H0QvHNvqFKJ1
S21uBTvQl09SJGRQY+yM0EnrBJSvCG4qJcg1aEuNwU0HfrYmbwuYjcjeJjyw4agR
C3QniZ7uslwjq94QnHoP+O/bexNoFm0XaQnhP7LNNgqh1bQrtZ34/O1JxUs16jlO
fy2amTTQ9OsuV8DO5ypW3beCeK9VdDc=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org