Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/940bd020-70d4-3368-a18e-3953664ec1a5.roa
File: 940bd020-70d4-3368-a18e-3953664ec1a5.roa (raw, json)
Hash identifier: k394wyybRNKPwsCoYCrQ2kCV6UX2budmmoYwbE/6TXw=
Subject key identifier: 39:9D:9D:B3:18:FE:85:49:26:4A:B0:AF:CC:81:EF:D1:61:90:0B:FB
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A518D7C38FE4C1CC83C270
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/940bd020-70d4-3368-a18e-3953664ec1a5.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a5:18:d7:c3:8f:e4:c1:cc:83:c2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=40f2a54f-deeb-4a67-acf4-c47c8059a700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:00:c9:2f:dd:e5:53:59:80:47:9a:21:91:
08:fa:78:fb:ee:1c:9d:07:55:41:6b:95:81:f1:f0:
b0:d0:a3:1e:f2:f0:be:88:d4:d8:bb:31:93:8e:96:
e3:7b:17:50:a6:3c:1e:3c:0b:6d:ae:90:ce:d4:76:
56:e9:48:7d:7a:65:29:5f:a5:33:a5:2b:fd:7e:38:
89:ad:3e:af:21:59:ec:69:7f:da:ad:ae:9e:a0:4b:
d5:ba:4b:ff:5d:a0:45:da:d5:1b:d0:14:68:cd:12:
7c:ca:bc:87:0a:b7:1e:f3:3c:a6:b6:ea:ff:ec:31:
f7:1c:68:a1:7d:2c:04:9d:37:c4:2d:55:c9:7f:2d:
73:a2:c9:d0:b5:e6:f6:bd:f1:25:46:f1:4c:44:dd:
fe:bf:bc:01:a9:94:4c:7e:36:aa:5d:5b:6f:78:07:
6e:9f:08:e7:3d:ee:70:78:da:c5:7c:26:91:d8:71:
86:bb:9c:cf:14:d2:bd:96:1c:96:e7:7f:55:f6:43:
e3:43:d8:08:fc:d2:80:98:02:15:5f:f8:dc:33:55:
03:11:31:a7:1c:ab:64:11:9c:5b:97:cf:c6:1d:6b:
65:2b:4d:45:ce:93:47:2c:6e:e1:5b:9f:92:5e:f4:
12:ff:35:65:97:e1:7e:af:a6:d3:14:d7:4d:ee:31:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9D:9D:B3:18:FE:85:49:26:4A:B0:AF:CC:81:EF:D1:61:90:0B:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/940bd020-70d4-3368-a18e-3953664ec1a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:ae:1d:14:84:e6:a3:da:bb:bd:31:9c:c4:38:1f:43:75:64:
86:2d:e5:a6:c9:6e:96:e6:95:e1:2e:ff:f6:66:63:3d:11:65:
a6:f3:66:ef:15:71:18:4c:ff:b9:f1:63:ba:b6:11:c5:f8:bd:
36:1f:5e:1f:c0:0c:d4:d8:85:7b:9b:59:12:58:62:f1:34:66:
7a:67:d8:8f:f1:41:ba:43:ac:85:28:26:8d:bd:94:d7:32:b9:
f4:66:ed:99:59:f2:3f:4b:1b:5d:63:66:a3:f1:a7:e4:65:9b:
e8:0e:a1:b5:de:0c:6a:a6:02:a5:89:99:c8:aa:48:8d:fb:ee:
fb:7f:4d:76:17:da:5b:3f:b0:ef:1a:a9:ac:e7:c5:56:36:9d:
64:e0:1e:20:f9:52:34:24:c6:a7:be:ed:fb:09:43:22:1f:88:
5a:36:be:5f:cb:fa:3f:13:d6:6f:32:b1:66:00:31:59:69:7f:
4a:25:11:53:31:c4:8e:d8:21:30:cf:76:5f:18:0c:b8:03:ad:
d4:52:c0:e3:a0:ff:4f:c5:79:a6:40:75:be:d2:19:24:78:f8:
c2:89:45:60:d8:55:7c:b2:bd:03:55:5c:58:0b:c2:b4:e4:6e:
a0:b4:68:f0:64:c5:0d:db:ea:62:1e:6f:af:b6:cd:20:11:f3:
ec:b8:64:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:49 2023 by rpki-client on console-fra.rpki-client.org