Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fc9e2b5-95ab-3c36-9fc7-802ee042c74e.roa
File: 7fc9e2b5-95ab-3c36-9fc7-802ee042c74e.roa (raw, json)
Hash identifier: 8ef2sQlPMqZqpZYhLdct4jRkb6lZGKJaAuM9KGaGa88=
Subject key identifier: 66:BF:89:1B:69:85:CA:E0:33:F2:0F:36:21:A6:49:11:88:BB:19:9E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7BD48A390280B160EF03540
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fc9e2b5-95ab-3c36-9fc7-802ee042c74e.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 108.170.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bd:48:a3:90:28:0b:16:0e:f0:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=381840d2-ccd9-4122-a1d9-904a63a4d3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:3b:43:39:96:b8:b9:c5:07:00:f4:70:c0:
ea:3b:77:7b:ca:ed:17:f0:f4:8e:14:f2:a0:d6:77:
4e:2a:e8:0c:57:64:f7:3a:51:3d:04:a0:29:bb:79:
97:fb:bd:f1:59:ae:41:66:22:d9:aa:0c:ac:0f:a2:
e4:06:8b:59:61:e8:2f:90:d1:82:92:58:ce:1e:44:
86:d7:f5:ef:39:31:22:2f:5c:e4:41:1c:77:ad:18:
45:66:e6:b0:9e:9d:4a:1a:a9:21:15:f8:87:99:55:
47:49:2e:70:85:e5:e9:e4:fc:90:ff:56:1d:b1:90:
73:83:0e:9a:0a:43:b2:fc:9a:37:37:86:8e:ca:87:
07:b4:e7:a5:ba:cf:5b:57:32:b6:86:40:51:83:89:
13:6a:a5:7a:ac:65:99:b4:85:65:2b:8e:58:74:98:
ec:27:b4:9c:6b:19:64:63:e7:5b:07:ba:9d:ee:fc:
be:9c:67:aa:43:97:79:58:ac:18:89:41:7d:99:51:
0a:15:87:72:75:49:62:5c:36:71:c4:b2:70:be:3e:
1c:32:52:98:04:05:32:69:ca:f2:33:f7:1a:82:30:
56:96:53:a2:ff:be:ac:1c:8b:72:b0:ea:45:6c:73:
01:8f:ed:38:5e:8a:a9:c0:7a:5e:ff:b5:71:b1:1e:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BF:89:1B:69:85:CA:E0:33:F2:0F:36:21:A6:49:11:88:BB:19:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fc9e2b5-95ab-3c36-9fc7-802ee042c74e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:92:18:7c:58:39:53:aa:56:e6:6e:82:41:91:52:21:bc:4c:
cd:65:67:c9:19:ff:13:74:cf:ce:6c:27:9c:9b:ae:9b:ed:58:
b2:53:37:f7:b2:78:34:e4:5f:91:30:95:98:8b:3f:5d:a5:6b:
fd:ec:50:35:1f:50:a4:0c:a8:f0:cf:45:2a:91:c1:cd:a7:90:
db:e1:e9:84:96:ff:19:6a:04:40:6e:e5:d3:32:41:34:14:50:
25:62:03:e4:7d:75:57:1d:ab:4d:9f:25:4e:0c:e4:6d:eb:5b:
a6:9a:58:48:05:a8:1b:29:d6:f7:72:a5:09:75:0b:78:12:65:
e8:f9:c3:bb:98:5a:da:57:25:93:41:5f:85:3b:28:18:e5:7e:
00:4c:da:1a:91:a4:ba:48:db:c3:c4:96:42:d2:9a:fd:0e:ad:
dd:0e:77:03:5f:76:4e:99:d2:20:68:66:2d:d6:d4:d0:4a:bd:
53:a7:12:4f:56:cd:26:bd:5c:cf:ac:80:87:6a:63:68:4b:86:
a0:9d:ea:e0:29:af:1e:4b:82:bb:0c:2a:14:54:db:99:01:15:
44:93:f6:eb:06:34:57:0b:96:6e:d1:7c:8d:60:6c:76:79:6a:
ce:f1:d3:78:91:69:3e:9e:b1:c6:fe:54:da:36:b4:11:16:7d:
f7:6e:da:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org