Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/821c3fbb-1b35-3cb0-b69b-f3fe3087b5dc.roa
File: 821c3fbb-1b35-3cb0-b69b-f3fe3087b5dc.roa (raw, json)
Hash identifier: cnML6W/9VM1ANhGGNl6uE8Tpqx9mTOdqjFFAMMKLDqY=
Subject key identifier: 6B:6C:DF:64:70:70:06:77:94:92:20:CC:27:19:CC:E3:14:8F:26:A1
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7AC572E2282BC423F45AB80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/821c3fbb-1b35-3cb0-b69b-f3fe3087b5dc.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ac:57:2e:22:82:bc:42:3f:45:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=54d15238-25ac-41a5-be1b-73eaba9fc81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f5:a8:e3:b1:ea:b2:cb:12:7b:b1:c9:14:b3:
f1:7b:8e:23:d9:0d:15:58:fb:88:f6:bd:5f:92:5d:
40:66:46:42:67:7b:6d:45:01:02:af:97:25:49:ed:
15:3d:bc:4f:48:f3:75:88:31:40:d2:64:fd:d1:82:
5a:5a:1c:be:a8:01:ca:2a:2d:cf:09:71:35:96:91:
6d:77:cf:7d:03:de:70:ee:33:af:2a:3e:9e:b2:90:
ca:ea:5a:a6:43:e1:21:ca:eb:82:8b:65:54:1d:83:
4b:52:32:e5:b8:d8:3c:d4:7f:7d:64:1f:7e:66:1a:
55:06:05:34:32:91:b2:03:cb:2d:fb:19:33:1f:35:
11:4e:82:68:05:cf:06:72:43:01:f4:e0:f5:aa:d5:
6b:c1:c6:7f:f2:b7:f8:cb:51:1c:5e:9b:94:a5:8e:
ca:0d:44:cb:61:c7:7c:75:8c:c5:81:9e:4f:3c:9b:
52:cb:d5:f6:9a:1c:aa:1d:37:89:0d:d0:d7:13:e6:
44:5f:9f:b1:fe:43:4b:7f:55:06:ee:5e:98:22:2c:
47:c0:08:f4:31:6c:4d:f7:d4:0d:85:d7:60:07:33:
8c:41:e6:6c:51:02:d6:88:5b:d6:a3:f2:26:30:98:
e8:12:0f:7a:21:a0:41:ab:a0:db:d5:1e:80:25:95:
64:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6C:DF:64:70:70:06:77:94:92:20:CC:27:19:CC:E3:14:8F:26:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/821c3fbb-1b35-3cb0-b69b-f3fe3087b5dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:93:3b:e5:c3:6a:e0:cf:c8:e3:35:c1:51:03:6e:fb:f2:d8:
a1:06:00:79:f5:7f:6d:f7:da:3f:c3:5b:7a:89:28:37:c9:a3:
91:03:88:e6:ce:eb:15:61:8b:da:33:33:0a:d4:4a:cb:77:95:
5c:98:2c:1a:0d:5b:1d:bb:58:00:66:1e:b9:04:a3:7e:29:fe:
39:0c:78:0a:c3:ab:0f:3a:e9:06:02:df:58:1f:4c:7c:4a:2a:
d6:3a:0d:fc:c3:82:d3:11:ec:80:62:3c:c5:16:a2:e4:2e:11:
bd:0c:d7:2c:7b:23:c9:66:c0:7b:58:44:94:8c:f9:b5:12:34:
c1:e2:c2:12:0e:b6:df:cb:f3:c0:78:ba:72:f2:b4:38:69:c5:
87:e4:07:94:67:bb:cc:94:09:10:5d:3c:15:51:95:ef:4c:e5:
58:6b:80:d2:1e:1d:95:3b:62:94:62:7b:83:a4:b4:06:1b:48:
2f:61:59:aa:77:3b:22:76:7f:88:56:ee:02:4a:dd:17:1e:03:
87:da:bc:2e:6f:70:9b:22:60:c4:c2:6b:a3:64:c2:6a:86:b8:
df:5c:cc:84:be:f4:5c:c8:33:3b:f9:2f:b1:c0:19:f6:2b:50:
14:a3:1f:1c:83:35:4c:78:91:f7:41:14:46:9a:07:a0:70:85:
24:ad:e3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:55:55 2025 by rpki-client