Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5fb557a-1a24-392b-8a1b-0873d0519ba4.roa
File: c5fb557a-1a24-392b-8a1b-0873d0519ba4.roa (raw, json)
Hash identifier: 8Bb42dr7DnC4wgQSU/GfbRMrd5vfALCCxd93nzjSBF0=
Subject key identifier: 6A:2D:CA:CB:D1:D3:2F:91:C8:DB:DE:E7:B3:F0:5E:06:2C:75:88:5B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7C3F450844292B84702A800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5fb557a-1a24-392b-8a1b-0873d0519ba4.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 172.253.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c3:f4:50:84:42:92:b8:47:02:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=2eb2fe86-1b79-4309-aa40-45b0a2f6dd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:6a:9e:24:90:a0:0e:cb:b2:10:ef:ef:2a:
a1:7e:ff:b5:6b:f5:ad:a5:58:07:f5:a4:aa:d1:0e:
53:2b:df:52:45:13:2a:49:25:92:a3:71:79:51:fd:
1c:8d:cd:27:9b:f7:d2:25:f1:ae:58:92:69:ba:4b:
02:95:68:92:8b:3b:d5:83:ff:2c:b3:87:da:c1:3e:
8c:c4:1d:17:98:00:28:84:99:fe:8b:3d:1f:86:24:
ee:e0:e4:cd:93:72:55:5f:e9:14:07:37:fc:bf:13:
79:18:9b:0d:60:8e:03:06:c7:f8:36:34:e3:9b:57:
36:68:53:26:ec:6b:d5:bd:40:e1:a2:9f:5f:cb:33:
fb:eb:ab:51:9a:3c:84:35:79:62:bf:6c:8b:e9:72:
33:67:9a:20:e6:17:94:10:e4:1e:1f:b6:c9:d2:0a:
18:93:d3:05:b6:58:a6:01:a4:ae:0b:d5:78:67:91:
b3:40:ef:e1:e6:82:41:7a:aa:54:c1:e8:19:10:22:
af:ad:e7:1a:36:11:1d:ff:05:b7:ed:6c:b9:10:7a:
c8:28:f4:ba:bc:7e:06:3b:80:bb:92:d7:6b:03:19:
92:dd:4a:4b:5d:25:93:51:99:b4:3d:c5:7a:7c:86:
f2:a7:81:12:91:6d:3b:4e:3c:c0:40:91:f8:c7:c4:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2D:CA:CB:D1:D3:2F:91:C8:DB:DE:E7:B3:F0:5E:06:2C:75:88:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5fb557a-1a24-392b-8a1b-0873d0519ba4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:4a:15:1e:7c:4e:28:52:57:d3:17:f0:fe:ed:b5:89:9e:d0:
2e:9b:a7:58:9e:5e:48:91:f9:77:d9:01:26:0f:01:45:d4:3a:
c1:90:13:c9:60:a5:59:9c:74:d3:c0:20:4b:dc:79:c1:46:24:
2e:de:34:ca:eb:37:0f:49:a1:84:85:f1:7c:e8:f7:24:16:4e:
ea:cc:f9:cc:4e:8b:a1:f4:24:9e:d9:e4:ac:1c:6c:6c:39:93:
a4:1f:07:e1:9e:a7:e6:6c:1b:90:b9:8f:66:29:28:ea:4c:31:
78:9e:76:31:52:71:91:d8:11:41:8f:95:72:f2:54:6c:be:5a:
3c:66:e1:21:4d:8e:b8:94:aa:77:51:78:3c:4f:3c:bb:67:32:
17:39:04:21:42:ea:42:47:c8:94:e5:a5:f1:4b:bc:fd:a2:84:
70:26:c8:b2:f5:4e:f0:d2:6d:07:c2:51:7e:cb:db:d2:a7:9e:
6a:15:2d:13:33:e7:3f:03:d3:5a:9e:62:d5:8c:eb:77:19:a3:
90:90:85:cb:d1:21:78:6e:73:f5:f3:a9:01:32:0c:b5:cc:ba:
05:77:64:98:0d:8b:05:a6:25:5a:46:71:0c:1b:c1:bb:d9:7b:
03:c8:ae:31:55:01:91:2b:ce:3f:69:62:1a:b1:fb:f0:ad:fd:
d3:a2:35:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org