Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5075a6d-fc37-31e5-a68f-52b2b7209161.roa
File: d5075a6d-fc37-31e5-a68f-52b2b7209161.roa (raw, json)
Hash identifier: x+uJrjaK1yJaQ2jYjTYkuKa8tx84SBwTuTfj73+AFlY=
Subject key identifier: 2B:3C:63:66:00:D2:54:9F:4A:56:52:4A:C2:0F:F8:91:E3:09:6B:EE
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B9F3E740E92C1ECBE702C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5075a6d-fc37-31e5-a68f-52b2b7209161.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b9:f3:e7:40:e9:2c:1e:cb:e7:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=359266e1-b96b-4851-8a09-ee5f6f7e70f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9a:bb:0d:4e:a7:bb:c6:15:f3:26:a1:30:e9:
5e:cb:cb:46:6f:1b:75:4e:d2:71:d5:3c:6a:00:55:
dc:75:34:0e:30:ee:c6:39:3b:9a:d5:d2:fd:9a:c7:
49:91:11:32:72:10:fc:43:a8:99:35:db:c4:e4:2e:
10:5c:5d:28:ab:94:a4:34:ea:a6:a6:4a:30:f9:fd:
2a:30:2c:d2:25:7b:24:63:df:88:ec:f7:33:fa:78:
6a:11:64:9c:8b:25:4b:81:e8:94:3d:ef:a0:bd:76:
05:60:1c:e1:2b:e8:05:66:07:20:32:c4:fe:a8:a6:
b4:d4:77:3c:da:c4:c0:8b:2b:bf:1e:5b:6a:8c:11:
f6:92:c2:b9:f5:f5:04:5c:4d:03:8b:bc:d1:4e:e9:
52:08:ae:cd:22:26:a2:21:0c:a7:f9:ef:15:32:af:
a2:9a:92:53:76:1b:da:b7:6b:c7:08:fb:aa:b7:a8:
86:09:05:5c:bb:e1:ec:f5:8b:07:52:aa:57:2e:98:
02:77:6e:15:17:ea:7b:ff:56:05:d2:99:90:ed:96:
4d:42:43:39:39:f9:5f:94:57:6e:52:b0:ce:f8:be:
d8:01:2e:b7:41:7f:32:be:91:ea:b6:14:da:a3:df:
9f:19:c3:d5:e2:47:71:87:a3:5c:41:f0:57:50:da:
c7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3C:63:66:00:D2:54:9F:4A:56:52:4A:C2:0F:F8:91:E3:09:6B:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5075a6d-fc37-31e5-a68f-52b2b7209161.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:05:2b:60:a8:e7:28:7b:33:da:a4:63:8a:d9:fd:2f:08:0b:
33:e4:40:fe:1a:77:53:a3:08:54:79:8d:a7:18:b1:25:fe:6d:
bc:dd:38:da:ca:ff:19:d4:84:a6:c0:90:cb:e7:7d:5f:8d:ec:
fd:78:28:e3:eb:32:11:b2:6e:75:0e:17:43:8e:44:43:dc:9f:
af:1a:e2:1a:0e:9d:fe:d6:a6:2d:6c:39:60:86:97:4a:48:a4:
02:24:f8:f8:0f:86:af:3a:27:e7:ba:92:b2:a1:7a:3b:82:c8:
1a:d9:09:45:31:85:f4:3c:c8:ca:91:a3:2c:bb:da:eb:19:3a:
54:36:a2:eb:37:6a:c5:62:7e:b8:9e:42:51:84:77:e1:aa:df:
98:9c:18:44:96:e5:07:fd:23:31:2a:94:72:c1:7b:54:29:0f:
bf:d1:ae:d9:29:3a:8c:0e:51:80:90:bb:51:fb:1d:a5:99:47:
83:9b:c3:62:5e:d2:79:08:23:ae:b5:0a:c5:76:fd:ae:71:bf:
2e:fd:37:d3:87:02:f8:b5:05:ac:af:77:ba:9e:82:e0:00:7a:
91:17:2d:13:ac:7b:67:51:67:ee:c9:9d:34:28:fc:2b:da:22:
fc:a6:ea:99:35:10:b0:c0:67:77:1e:62:81:f9:60:6c:27:e7:
9e:52:20:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org