Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b4987409-c15f-36aa-8fe2-3937d3b9ab2d.roa
File: b4987409-c15f-36aa-8fe2-3937d3b9ab2d.roa (raw, json)
Hash identifier: Wg/rVJv0gpbgOxhr4npWlBgSh9aTuIxum7KMh1OONzY=
Subject key identifier: B1:59:A2:0A:6E:B4:99:D5:0E:94:58:0D:D1:0D:CD:9B:A5:AA:45:BB
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7C12FF1F9522845AC2A9900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b4987409-c15f-36aa-8fe2-3937d3b9ab2d.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c1:2f:f1:f9:52:28:45:ac:2a:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=67904df9-eee2-4390-a2df-7828d0d666c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ea:21:de:18:50:59:f4:ad:27:c3:a1:0d:b5:
0e:b2:ad:6f:b1:d3:93:87:92:66:18:57:08:95:67:
b0:cc:db:1e:c1:f5:13:17:eb:1b:0f:e3:e0:36:ac:
24:70:f7:e1:d4:6b:5e:ea:ab:b9:4e:04:f1:a7:e9:
58:a7:a8:54:07:27:c5:7c:9f:e6:cc:3c:5d:63:c6:
93:52:7f:3a:37:da:4a:01:59:49:f3:b1:68:3c:5a:
ab:e6:06:e2:f5:65:01:4c:71:60:45:49:79:17:38:
1b:e3:41:62:6a:c1:22:5b:cd:07:8b:95:f5:dd:83:
e0:6c:f1:35:5a:b1:65:9a:f0:2b:a0:d6:2c:64:bc:
76:68:85:e8:b1:12:48:d6:f9:ce:5e:63:73:85:45:
9e:2f:e1:fa:ca:c6:d2:ac:0e:bc:46:b8:6a:45:d1:
8d:76:4b:66:b4:05:4d:7a:a7:a3:04:5f:03:71:37:
d4:d6:3b:a3:e8:cf:ed:96:b3:68:aa:b2:6d:32:f8:
61:66:64:9f:c1:46:0b:71:ed:8b:46:01:bc:5a:00:
7e:4b:57:21:bc:22:e6:1d:56:80:57:7f:d7:42:c0:
36:34:ae:6f:01:4c:60:e4:c5:e3:84:54:a5:fd:f1:
19:12:51:36:9d:57:8a:14:5c:f4:24:e6:a1:a4:24:
40:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:59:A2:0A:6E:B4:99:D5:0E:94:58:0D:D1:0D:CD:9B:A5:AA:45:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b4987409-c15f-36aa-8fe2-3937d3b9ab2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:6c:a1:92:fc:d5:e2:20:39:b0:f2:dd:03:1a:0c:28:07:12:
2c:dd:b0:52:cd:91:09:25:ad:1a:87:65:22:bb:20:93:3a:6b:
95:de:1c:fe:8f:10:78:09:a1:33:ce:e6:63:95:93:50:9b:3f:
1e:86:ec:1f:67:f4:15:46:e5:78:10:26:50:fb:f2:9c:ff:a2:
e6:a0:96:99:d0:11:b2:bf:25:fd:00:da:c7:2b:a8:66:ee:44:
08:04:3c:a3:ea:2c:87:71:29:a9:73:6c:f0:1a:e5:15:3f:7e:
a0:40:e1:a0:95:93:de:6e:03:27:d9:54:a9:a7:43:86:c1:90:
a7:f2:ce:1b:96:e2:6e:8c:03:88:a4:3f:91:38:88:93:ed:90:
f4:b8:a1:98:67:8d:ce:1c:d1:6b:4c:de:53:a2:8e:95:81:05:
af:7f:0f:2d:af:b6:8b:88:15:ea:24:9a:ac:d3:4b:c8:f8:ab:
b5:74:a1:84:aa:6f:a0:cc:3e:da:e1:77:ee:56:38:0a:db:4f:
a8:4f:2e:2b:0e:46:4f:7c:87:d5:27:af:a3:b2:55:70:cd:7c:
9d:30:a2:37:8b:9f:cc:1a:01:97:23:b4:f6:72:90:35:de:3e:
15:ed:22:89:88:3a:0f:f4:8e:ea:1b:80:61:2a:b3:23:24:76:
7f:80:bb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org