Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8400116-ae06-3bb1-be86-456e08e5ab1f.roa
File: c8400116-ae06-3bb1-be86-456e08e5ab1f.roa (raw, json)
Hash identifier: FseFF+IDqR+tITPr8PraPgDyUvyilJeMHnkjcKc/2Ro=
Subject key identifier: EA:14:B8:29:79:95:CC:9B:1A:0E:01:FD:37:7A:C7:43:C2:45:74:A8
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B2D19575F32A50951C5240
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8400116-ae06-3bb1-be86-456e08e5ab1f.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 64.233.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b2:d1:95:75:f3:2a:50:95:1c:52:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=ef1a5bb6-f851-403a-8318-51b75b797cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:ee:36:55:e0:6d:ba:bf:5a:a7:7a:31:52:
18:85:d7:ca:f5:4f:fb:a0:3c:f7:c2:af:fd:f2:2d:
6f:76:71:2f:8e:1a:77:51:8c:0a:7c:86:6d:a0:1c:
04:62:62:3d:2b:29:a8:f2:6d:d1:5b:b4:93:80:bc:
e7:ac:f4:21:55:e8:ba:bb:c9:95:94:25:86:7d:93:
ce:5e:84:b7:a8:07:4b:cc:8f:67:ff:90:94:7f:d8:
98:f5:39:98:45:ce:e8:69:6b:fc:ac:8d:3b:34:f6:
13:46:8a:ba:4a:d5:e5:37:30:3c:05:89:57:df:eb:
71:c0:ce:49:24:dd:fb:c6:e3:5c:f8:d7:81:05:42:
57:0e:63:65:ce:83:f7:c2:83:d8:81:e2:9e:12:86:
b0:3e:24:4e:b4:2f:3b:22:03:b2:f5:53:1e:49:99:
fa:3b:0b:6e:bb:0c:d4:4c:ce:94:00:b0:ab:02:b8:
f4:cf:6a:0e:ff:cf:c4:6c:f9:0d:e0:e4:30:71:bc:
a2:23:8e:32:50:6a:22:93:f9:4c:aa:1d:62:74:23:
01:1c:46:b1:b1:d1:d6:8c:59:fa:0b:56:fa:fa:77:
e9:e8:ae:d0:0b:e7:62:25:8e:cc:fd:fe:81:88:64:
17:bf:b4:2a:c7:f5:f3:c9:ca:9f:69:30:14:b0:85:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:14:B8:29:79:95:CC:9B:1A:0E:01:FD:37:7A:C7:43:C2:45:74:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8400116-ae06-3bb1-be86-456e08e5ab1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.233.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:3a:58:84:75:f3:41:ff:04:70:04:41:7e:59:25:1f:f9:57:
5d:35:8c:48:b4:e3:8e:e6:6d:ff:f6:4a:0d:81:eb:59:d9:4d:
1d:a9:29:c1:04:bc:ac:18:58:59:4e:3a:f5:07:49:04:10:d0:
0f:60:61:49:6b:c2:fc:ef:8f:10:9d:be:ea:04:ee:68:83:9d:
f6:19:3c:99:b2:11:f9:1a:ed:2a:9f:4a:08:6b:36:cf:1a:2b:
86:89:9a:65:c8:3d:f2:57:99:50:56:88:c0:bd:ee:84:41:38:
e6:8a:fe:d1:79:fa:55:1c:11:6a:1f:f2:e7:b1:a8:ec:9d:6d:
02:b6:72:33:2b:72:15:6f:8c:68:87:47:2a:47:1e:5f:23:66:
4a:3d:02:d7:50:9b:b0:bc:09:da:0c:a9:98:9c:7a:76:7a:64:
37:dd:ea:10:dd:d9:37:67:3f:f2:a5:eb:d4:74:5d:03:3d:c6:
26:28:3b:58:b4:79:a5:b9:ca:cb:83:23:5d:fb:f1:ca:dd:7e:
c7:ad:18:03:3c:a1:b9:52:67:ab:55:9d:11:04:78:ed:d5:4c:
0f:59:ee:c2:e9:7d:52:03:95:7e:9b:c2:a4:b3:69:df:1b:dd:
5a:01:62:91:c1:93:fd:b7:e1:4b:0f:75:55:59:56:b6:c8:2b:
d2:f9:57:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org