Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8ba676c1-acfa-3141-b73a-afe983af7a65.roa
File: 8ba676c1-acfa-3141-b73a-afe983af7a65.roa (raw, json)
Hash identifier: Y5IH+48YWtzmZy4NF1zgObX/767iKs0/gEztSsxFNnE=
Subject key identifier: 29:AD:B3:D9:52:24:14:4E:D3:39:CC:11:3C:C7:DF:66:8C:9B:A5:38
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7C1B5BE1573D5D9CB80BB00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8ba676c1-acfa-3141-b73a-afe983af7a65.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c1:b5:be:15:73:d5:d9:cb:80:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=bea0bc86-2072-46ee-af0b-a2cf1b7db1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f3:eb:bb:f7:5c:c8:f9:9f:2f:e9:d9:ac:95:
48:78:e9:c6:19:2e:7c:36:89:e5:05:1a:2b:ed:7d:
6a:94:49:80:db:98:2a:2f:3e:c5:ee:ab:51:1a:05:
ac:cf:5b:38:9d:9c:7b:db:e3:4e:ac:e5:44:e6:a7:
9a:28:ee:1c:ba:c6:82:f5:9c:f2:d9:10:0c:2c:bd:
1b:de:d3:08:05:01:12:fc:14:f2:7c:aa:80:88:5e:
5a:54:17:1d:8e:52:68:2f:f3:09:3e:53:07:f9:ff:
09:a2:60:9c:46:6b:a6:0e:ad:3c:e2:51:a9:03:35:
c5:01:94:f0:cf:99:87:e1:15:64:60:d5:e3:a3:cb:
40:e9:c5:54:48:f3:d9:e3:4e:6c:b9:c6:14:24:28:
97:0b:c1:16:89:49:29:ae:4a:f2:c6:02:19:75:7f:
93:b5:ca:24:73:e5:89:a0:a5:5e:65:a5:18:d6:a0:
30:b6:8b:db:06:bb:30:8b:ba:f1:e7:cd:6a:e7:e6:
83:36:d2:ea:b7:db:31:5e:82:6f:20:aa:02:eb:a1:
56:8f:38:d3:c0:a8:a9:10:d3:7f:c1:f1:b4:6b:0f:
e5:33:96:14:6d:5e:e0:08:d4:6f:56:70:78:55:f9:
eb:ab:35:97:a3:cd:c5:73:b7:ff:20:2a:03:a4:1e:
58:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AD:B3:D9:52:24:14:4E:D3:39:CC:11:3C:C7:DF:66:8C:9B:A5:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8ba676c1-acfa-3141-b73a-afe983af7a65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:ec:08:26:ca:0f:95:87:49:fc:43:25:ee:98:2b:74:25:4a:
6c:91:fa:e5:81:45:cd:57:ca:b0:e6:38:9d:ab:ae:98:fa:30:
81:d7:cb:cc:13:f5:ba:1b:13:72:f5:fb:55:c4:af:cd:95:18:
f7:01:92:df:33:a7:17:65:5d:99:4a:6a:79:70:64:7d:5d:0d:
be:f0:1f:3b:3c:a6:08:64:af:6f:1b:3b:45:b5:6d:be:a9:83:
5c:c8:09:56:9f:a8:bf:2c:e0:f5:e8:c3:85:6d:a5:fe:d1:fa:
e3:72:0b:dc:98:33:85:32:43:46:b7:26:0a:bc:4a:f1:a2:a4:
41:50:ec:44:56:14:6e:35:ca:51:7f:3a:53:3f:b8:35:39:bd:
a6:44:2b:19:e9:58:72:1c:a2:2d:aa:5b:56:46:0c:bb:69:88:
52:b2:09:e1:1a:25:57:e5:66:6f:c1:a3:73:96:ce:94:8a:e8:
82:82:ec:fc:23:df:b9:34:99:0f:20:6a:57:0a:d8:f5:58:63:
ac:3b:50:55:17:ae:c5:c9:98:98:57:7b:b7:ba:4a:ed:c6:c8:
7a:f4:c8:f7:cd:3c:6a:3e:1b:94:80:08:c2:e5:5b:0d:c8:93:
ab:5d:b2:c9:42:df:06:6c:d4:ad:a5:c4:44:00:94:85:c5:5d:
a6:88:7a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:15:47 2025 by rpki-client