Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e9d6294-33c6-38f5-b392-8ba777cff9cd.roa
File: 8e9d6294-33c6-38f5-b392-8ba777cff9cd.roa (raw, json)
Hash identifier: Osb1q1oc/tYJwcuIHz7ulHjYyhiOkT0bjaRJQEKZG0c=
Subject key identifier: C2:7C:9E:00:00:9B:0C:AF:49:E9:C5:7E:0E:64:E1:0D:DA:13:75:B7
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A0F22CA2190B24F7D02540
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e9d6294-33c6-38f5-b392-8ba777cff9cd.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a0:f2:2c:a2:19:0b:24:f7:d0:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c85296ce-5e4c-4c5a-8afb-433214b9f5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:96:cf:75:d8:f6:78:2a:6b:3d:27:8a:e4:cc:
15:5c:ac:54:29:ca:fc:b4:e9:63:15:46:ed:9b:29:
00:65:77:2c:b8:e0:92:e4:78:cd:57:42:c3:ff:bc:
b0:37:29:bc:ee:92:84:93:d8:a0:3a:c0:e5:7b:77:
5c:c9:dc:a1:11:33:48:9c:12:d8:6a:c4:51:49:a1:
24:d1:a4:cb:cc:bf:b5:20:8d:2b:d7:78:ae:91:db:
f4:1e:e8:ad:8d:1e:d3:a7:63:dd:27:dc:1f:23:0a:
14:fc:77:db:2f:c2:b5:61:8e:12:bd:38:8e:96:d9:
98:65:95:dd:a4:04:aa:bb:cc:4c:d3:01:6c:c5:f8:
c3:32:f6:e3:19:cb:fd:b0:4a:8d:8f:a4:1d:eb:90:
c7:50:8a:63:2a:69:3d:fb:a7:d6:f6:30:3e:ac:42:
40:e4:e7:9e:81:2d:ad:98:ad:30:bd:e3:42:4c:62:
07:28:9b:66:66:f7:11:6e:cd:ec:ff:f9:00:35:7e:
1a:a9:22:e5:85:40:fb:9c:4c:23:fe:75:9d:a1:28:
2e:53:4d:e6:11:70:6e:03:cb:17:7b:9b:61:03:d8:
2f:29:ce:65:e2:05:37:96:ec:9f:2b:c7:8b:ef:5a:
b6:5b:5d:c1:b3:f4:f4:7b:25:6c:74:a5:6e:d3:ff:
e9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7C:9E:00:00:9B:0C:AF:49:E9:C5:7E:0E:64:E1:0D:DA:13:75:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e9d6294-33c6-38f5-b392-8ba777cff9cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:9a:1d:44:d7:6b:a4:a6:14:ec:bb:e5:99:ed:62:85:c6:f5:
7f:36:85:fe:a2:47:31:fa:89:cf:1f:c8:ad:7e:65:91:7b:03:
80:eb:0b:e7:08:97:88:3a:45:13:10:6b:88:7a:a0:1d:21:18:
2e:cb:db:28:65:e3:e0:54:24:4b:54:cb:80:cd:5d:7f:33:37:
f1:f9:33:97:7b:1a:4a:70:5f:17:9a:b7:4f:fa:fc:34:f0:3f:
4b:fc:f5:0b:7b:37:10:e7:9a:13:c4:6a:a7:ea:b8:92:b0:9a:
b5:4b:e0:9a:69:cd:9d:fe:bb:28:f2:a4:35:a9:de:6d:e5:b2:
c5:aa:29:72:f8:98:ff:43:3b:b3:5b:07:9f:e2:41:eb:05:9e:
7a:3f:96:24:30:2e:ed:c5:59:43:27:03:91:3a:9d:17:47:74:
02:cd:7b:66:fe:b2:33:21:d0:24:ea:09:7c:31:8c:e3:35:cd:
b9:ac:40:a3:33:7e:bb:e6:0f:be:fe:f0:2b:2f:80:7e:11:71:
ae:4e:5f:8e:68:e9:65:dd:89:6a:ed:c5:ed:f6:17:92:83:10:
4d:46:e2:fa:29:0a:2b:26:23:29:e9:5b:db:0c:d1:fa:64:fe:
bc:62:2a:2c:f5:72:62:db:6c:8b:2e:06:19:a6:3c:35:15:2a:
0c:19:6c:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnoPIsohkLJPfQJUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
Yzg1Mjk2Y2UtNWU0Yy00YzVhLThhZmItNDMzMjE0YjlmNWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5bPddj2eCprPSeK5MwVXKxUKcr8tOljFUbt
mykAZXcsuOCS5HjNV0LD/7ywNym87pKEk9igOsDle3dcydyhETNInBLYasRRSaEk
0aTLzL+1II0r13iukdv0HuitjR7Tp2PdJ9wfIwoU/HfbL8K1YY4SvTiOltmYZZXd
pASqu8xM0wFsxfjDMvbjGcv9sEqNj6Qd65DHUIpjKmk9+6fW9jA+rEJA5OeegS2t
mK0wveNCTGIHKJtmZvcRbs3s//kANX4aqSLlhUD7nEwj/nWdoSguU03mEXBuA8sX
e5thA9gvKc5l4gU3luyfK8eL71q2W13Bs/T0eyVsdKVu0//pRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMJ8ngAAmwyvSenFfg5k4Q3aE3W3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGU5ZDYyOTQtMzNjNi0z
OGY1LWIzOTItOGJhNzc3Y2ZmOWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKaHUTXa6SmFOy75ZntYoXG9X82hf6iRzH6ic8fyK1+ZZF7A4DrC+cI
l4g6RRMQa4h6oB0hGC7L2yhl4+BUJEtUy4DNXX8zN/H5M5d7GkpwXxeat0/6/DTw
P0v89Qt7NxDnmhPEaqfquJKwmrVL4JppzZ3+uyjypDWp3m3lssWqKXL4mP9DO7Nb
B5/iQesFnno/liQwLu3FWUMnA5E6nRdHdALNe2b+sjMh0CTqCXwxjOM1zbmsQKMz
frvmD77+8CsvgH4Rca5OX45o6WXdiWrtxe32F5KDEE1G4vopCismIynpW9sM0fpk
/rxiKiz1cmLbbIsuBhmmPDUVKgwZbJg=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org