Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d2505a54-d599-3696-a254-54bfe5228edc.roa
File: d2505a54-d599-3696-a254-54bfe5228edc.roa (raw, json)
Hash identifier: lbYD4QVht7lPa3IxPnYgfpGDXfZPvpwOUl9lV+XPvbA=
Subject key identifier: 6E:CD:F8:C2:F7:0A:D9:06:FC:5E:EE:7F:05:CC:5C:DB:44:E3:95:0A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7C1363AE6A71BF8C32DB880
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d2505a54-d599-3696-a254-54bfe5228edc.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c1:36:3a:e6:a7:1b:f8:c3:2d:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=54bbb903-8f94-4f31-be88-2d3ed5666971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:2b:3a:16:44:b4:8c:5b:11:34:19:c6:fe:
1a:8c:4c:92:d3:21:48:fa:ae:99:04:b0:bc:aa:39:
e6:01:1e:51:69:18:7d:9c:4f:23:d9:0e:0d:62:86:
9b:1a:56:67:fd:b4:c9:64:3b:78:a4:00:47:e3:1d:
29:1b:63:3f:ff:da:ce:78:07:3c:6a:7c:e5:b4:9b:
d4:c0:71:bd:46:e8:82:7f:fb:cf:7b:81:2a:c9:fa:
0f:9c:a8:77:e4:d9:1a:cb:72:fe:83:0e:9c:3c:0f:
14:95:14:16:95:18:e4:4e:83:c4:d3:cc:07:8b:e5:
fc:20:2d:23:23:94:c6:40:8b:bd:5e:fa:cb:44:77:
9b:a5:b8:9e:26:0e:59:31:ea:2e:d2:cb:a2:4a:d2:
ec:bb:5e:86:f1:99:1f:c8:a9:b1:1e:48:d4:af:50:
21:4a:7d:c1:ee:64:f1:17:b9:b2:ce:0b:0e:97:e1:
0e:7d:7e:9a:15:2c:81:eb:ff:91:d6:b9:93:a9:e7:
46:b8:0c:4b:49:aa:5d:7f:b5:c4:e2:d1:ea:f6:78:
87:4e:e3:e0:16:de:b5:d6:09:2c:92:f6:a0:74:11:
8c:f4:e7:28:8b:fc:92:e0:f5:97:c8:86:d8:05:7c:
63:a1:9b:67:9b:24:58:0b:cb:55:fa:e9:10:7c:d3:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CD:F8:C2:F7:0A:D9:06:FC:5E:EE:7F:05:CC:5C:DB:44:E3:95:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d2505a54-d599-3696-a254-54bfe5228edc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:5b:74:00:28:25:ff:15:6c:c3:90:aa:8e:b9:79:85:f0:85:
e5:92:0f:64:e3:f9:22:56:0d:dc:e6:c0:51:d1:fc:aa:41:aa:
0b:68:73:5b:77:8f:39:57:51:41:ca:fa:b2:e5:83:79:41:f6:
91:46:4f:31:c5:59:c6:8d:3e:91:d9:92:ec:5b:94:df:65:5f:
60:b3:ca:ec:90:8d:06:89:56:f6:41:c2:5d:4d:2f:33:7b:06:
e1:11:d7:90:fa:c4:14:be:83:36:03:cf:45:cd:81:0d:29:aa:
e9:cf:f7:fa:8d:7c:a1:47:30:5f:74:3c:90:9b:18:28:7c:99:
2b:53:fc:71:2d:6d:b7:b3:9a:1e:f5:ae:a2:43:9f:21:08:90:
f1:4e:41:6b:49:7c:b6:6c:e2:6e:a4:cf:04:ed:89:c6:fd:66:
11:f1:07:ee:fc:f4:4c:98:04:74:f3:0f:13:60:d4:f2:13:c6:
34:92:24:40:ee:a3:87:2d:fd:64:6d:10:6b:b1:46:52:9a:8a:
06:e4:cb:ec:d6:be:6b:89:08:3b:cc:9d:b1:6c:43:ba:1c:96:
ea:e6:de:da:ac:9a:24:0b:39:16:b8:86:04:83:ce:ac:48:e5:
70:a8:69:4b:ef:e8:9d:02:73:8b:2e:75:0b:b1:54:b2:0d:1c:
e3:22:b6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org