Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9834c705-2595-3090-913a-5f889c4a79e8.roa
File: 9834c705-2595-3090-913a-5f889c4a79e8.roa (raw, json)
Hash identifier: +qs63/6T43KE76Q95f9gZYEV+EkOH7hY9FHy/wHOJSE=
Subject key identifier: 7F:F3:4E:2D:38:1E:EF:42:DB:A8:0D:30:05:D1:3C:3D:4F:82:08:CD
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7BD557FB8D44B8B30136503
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9834c705-2595-3090-913a-5f889c4a79e8.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 208.68.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bd:55:7f:b8:d4:4b:8b:30:13:65:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=5b3c4829-0ab4-45a7-9999-3beb67a24137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:72:dd:b1:68:37:0f:5f:91:9f:95:aa:ef:
cd:ec:0b:d1:18:82:6d:3e:5f:94:3c:df:d4:21:1a:
2d:f3:e0:bd:cc:7e:50:1c:dd:b5:28:29:ce:82:3b:
b3:13:01:47:27:89:7a:cc:71:d9:46:08:ac:43:be:
00:26:4c:14:34:70:a9:80:ab:51:d4:22:da:41:99:
3c:4a:fa:19:f8:0a:40:4f:cf:02:70:b9:0b:b7:6a:
34:3f:34:f9:4f:9f:0f:78:99:66:e4:95:2d:3d:78:
b9:a4:19:b6:6e:8a:02:fe:17:01:47:ac:dd:30:01:
64:35:ec:05:9b:c3:63:58:4c:07:d9:1c:63:97:40:
2a:68:1e:b5:d2:41:26:af:c6:76:84:f5:ad:bf:9d:
c9:b9:5a:98:c4:46:83:94:59:ab:d7:1e:8c:70:ad:
b9:56:7f:81:3d:2f:1f:c7:26:aa:71:b7:07:24:93:
c2:b6:6c:c1:5e:18:a3:c8:71:1a:84:bd:b3:00:bc:
48:a9:81:53:99:e5:3b:cd:d3:50:cf:dd:26:d7:a3:
78:49:65:a3:c8:80:78:0d:87:5d:9a:93:24:73:d8:
5a:52:73:ba:47:29:39:ff:02:bf:a7:93:15:7c:fe:
d3:51:8a:e4:44:ae:6d:06:e3:e9:a4:91:46:ef:47:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F3:4E:2D:38:1E:EF:42:DB:A8:0D:30:05:D1:3C:3D:4F:82:08:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9834c705-2595-3090-913a-5f889c4a79e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:26:b5:30:22:a0:39:e3:a3:9a:ec:f6:12:f1:d4:c5:3f:01:
40:38:f1:be:c7:a2:43:eb:b7:6e:d7:35:d4:82:dc:ec:4d:14:
10:07:e8:30:ab:82:bd:22:de:53:30:a0:a3:69:90:e0:f1:57:
53:3f:77:31:3e:08:8e:6c:77:4a:86:be:de:70:eb:27:dc:5e:
dc:b0:2b:cc:b9:35:5c:4e:d6:0a:ce:fb:dd:27:c9:f7:32:b2:
e6:0b:a6:70:63:c5:92:78:92:f3:68:61:b4:34:50:b6:36:22:
59:f1:32:7e:fb:bb:52:85:ed:9d:31:a6:2e:5f:8c:3b:8f:ee:
35:0a:f7:9a:6e:69:a8:33:f0:f1:45:e5:6d:2b:ac:02:17:2c:
3e:8c:a3:96:36:29:5c:f3:b9:7c:ee:33:5a:af:0d:b7:c3:8e:
ef:93:e2:4c:a2:d0:ea:38:28:dd:a5:c2:62:0c:d2:44:04:68:
5f:dd:7a:7b:2c:b8:4b:bb:9d:01:43:b1:f2:b9:79:94:5a:d8:
82:fa:83:eb:9e:98:39:4e:2a:80:e9:c7:f9:1c:29:34:b7:b0:
ff:8e:93:50:2d:b8:05:bf:32:cc:2c:58:9e:d9:5e:d7:6a:43:
66:14:fc:e9:03:53:1f:b4:d4:ab:40:60:e5:f4:35:92:77:52:
4e:55:4c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org