Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc6f5c2a-3f18-315d-a270-a304ead48192.roa
File: cc6f5c2a-3f18-315d-a270-a304ead48192.roa (raw, json)
Hash identifier: X7Mpf3D3Q7o+CDNsJP+WJ+VR7+eMJckMTzRvVCsJCbE=
Subject key identifier: 84:69:82:BB:7A:8C:C2:A9:17:AB:77:21:32:40:04:AA:D1:1B:A4:76
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7C0E4BD3D545D5A8680DD00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc6f5c2a-3f18-315d-a270-a304ead48192.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 66.102.8.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c0:e4:bd:3d:54:5d:5a:86:80:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=fa92b258-4b49-484d-a33e-d7114398062b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1e:ff:40:96:8f:64:1d:52:74:76:a3:b6:7f:
1a:01:1d:dc:1d:86:32:47:8a:6d:ed:bd:e5:5f:e4:
18:b6:d3:8f:3a:d0:ba:92:9e:b7:13:fd:37:f7:cd:
a0:b8:57:12:59:3f:e0:e3:b5:bd:16:27:6a:e7:90:
e5:ef:83:f5:92:92:02:cb:b1:7c:8f:be:18:15:24:
3f:0a:99:14:80:8e:4b:14:4d:3d:a8:7d:bb:8a:6b:
30:ad:ae:06:6c:cd:7f:1e:4f:4d:9c:1f:1b:0c:4c:
6a:98:0e:e8:24:62:a9:de:76:1a:92:72:68:a5:66:
bf:9b:e3:eb:57:93:aa:a5:9f:31:6f:26:f4:de:c6:
3e:37:1c:f8:4a:c1:2f:a2:b1:3a:e3:1a:ff:e7:0e:
af:3e:63:df:c4:62:20:e0:08:1f:2a:e7:7a:a1:d7:
cb:00:ab:75:80:13:4e:4d:6e:80:51:c3:15:97:61:
fa:98:b5:29:56:11:5b:31:a4:fa:eb:84:4b:85:9d:
99:fb:84:1c:ba:79:35:1c:2e:ae:98:9c:aa:54:99:
44:a8:74:3a:ed:b1:6c:18:b6:27:59:41:c7:a7:d0:
33:3d:4e:90:41:68:2b:0c:ef:79:4b:23:ba:40:f7:
c7:49:c2:0a:79:7c:03:65:63:a4:38:fa:b3:b7:1d:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:69:82:BB:7A:8C:C2:A9:17:AB:77:21:32:40:04:AA:D1:1B:A4:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc6f5c2a-3f18-315d-a270-a304ead48192.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.102.8.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:1f:44:bc:4f:08:ab:aa:04:51:6a:6e:fa:03:c1:23:a6:c8:
65:cb:15:e1:cf:4a:2e:24:db:5c:3f:96:1e:4e:77:a0:23:55:
bb:66:8c:3e:55:c0:3c:07:69:a7:20:92:c5:06:31:d9:c2:b7:
47:7d:f4:35:7b:1c:6c:b0:22:d2:31:4b:f6:32:ae:d6:d8:9a:
97:fe:dc:de:d7:93:07:c8:83:5f:07:60:6f:d7:7b:ff:88:0f:
36:e4:ac:51:c0:9c:7f:cb:90:8f:aa:8b:03:33:ab:8f:c3:7f:
db:88:31:da:ca:17:d2:1f:d1:4b:b6:c4:94:88:d0:88:1e:31:
b8:6d:1e:2a:96:f1:7b:62:bf:38:0c:86:8c:b5:24:22:de:6e:
de:e4:d0:a6:4b:d1:54:04:40:17:04:52:87:b0:71:9d:5e:4c:
b1:9f:b0:f4:5a:09:fa:cf:96:5e:5f:ea:05:71:4e:30:a2:4c:
1d:56:60:f1:c8:0a:25:3f:cd:df:9c:e6:b0:9c:60:e9:00:f0:
76:71:c3:88:fc:37:ab:bc:21:17:b7:11:d5:e5:63:3b:bc:09:
2e:72:cc:e1:78:3c:4e:a3:c1:c1:dc:b9:82:43:07:c6:3b:00:
af:3a:fc:b1:76:99:f2:15:66:e9:c4:58:c6:ee:ad:68:60:0b:
91:b4:8f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org