Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9855e93-8d48-3c0e-af67-4197768f1a00.roa
File: e9855e93-8d48-3c0e-af67-4197768f1a00.roa (raw, json)
Hash identifier: v6B7ezkhFwcF3tHuHgTARTCdp0+9jYe0KUQmsG1r4c8=
Subject key identifier: DC:16:09:AB:37:B9:82:89:FD:F0:48:A2:75:B1:59:6F:BF:A0:81:CE
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7AEEAAFB19AEA944EFF56C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9855e93-8d48-3c0e-af67-4197768f1a00.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ae:ea:af:b1:9a:ea:94:4e:ff:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=e7a1e802-ffc3-4b96-8437-746b2bf247d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:13:1f:77:98:52:d2:3f:e3:ab:b5:df:4d:
c5:20:91:19:e5:05:22:a3:e8:94:77:10:bd:d9:49:
af:3e:0a:a8:35:b8:40:97:a3:3e:05:f7:8d:e3:87:
05:5c:2f:e5:9b:58:ca:58:35:35:b2:07:af:8b:34:
ad:ff:cc:d3:39:90:f4:d3:53:9c:c1:fa:11:5c:55:
cf:60:83:ff:42:78:46:61:e1:14:94:67:58:b5:0c:
df:74:db:a9:5d:97:1d:e5:e1:de:67:d8:73:35:40:
ad:6b:62:37:eb:bc:74:34:21:41:2f:29:0d:ea:6c:
bb:4d:a7:ca:3b:8d:c8:6b:c7:6f:b7:77:ed:77:19:
cb:dc:48:61:6b:86:04:e8:7c:c1:4e:06:a9:a1:03:
3c:a2:c8:7a:24:1c:a3:cc:a1:45:a2:e6:63:51:77:
56:60:fe:4d:82:56:97:6a:bf:cb:2a:f5:76:22:21:
eb:88:47:13:a8:b1:5f:6a:23:1f:b3:88:17:bb:8c:
39:29:04:19:c0:5b:21:5e:04:59:f5:59:20:3e:1a:
96:92:a9:4e:2e:3b:62:4c:6a:01:9a:da:8f:71:e5:
c0:38:65:eb:76:80:95:c5:a0:b3:ed:cd:e1:10:e8:
63:f9:36:81:25:75:d3:8c:1a:66:25:09:2d:41:7f:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:16:09:AB:37:B9:82:89:FD:F0:48:A2:75:B1:59:6F:BF:A0:81:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9855e93-8d48-3c0e-af67-4197768f1a00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:85:5d:e6:b0:b1:db:9b:69:db:a5:74:3c:1b:80:c8:34:5d:
02:07:81:24:34:1d:3b:e3:b5:d1:2c:e9:4e:54:be:5a:b6:65:
f8:c4:1c:18:bd:56:48:c0:a3:a3:77:49:a7:ab:07:eb:04:08:
78:56:df:c1:28:a9:13:9e:71:d8:1a:66:87:84:db:ed:c0:7d:
34:82:26:ed:51:a0:50:83:6e:90:c6:74:2e:dd:3b:d5:66:2a:
af:15:70:a0:81:9e:ec:5e:5c:f7:27:6b:33:98:ed:01:38:e7:
91:8e:92:f8:45:40:61:7b:7d:99:ac:35:38:2f:39:3c:f5:97:
0a:d6:b8:fc:87:e5:c8:7d:cd:ea:c0:5e:9a:d0:8c:e2:3c:e4:
63:ea:23:7c:46:72:f0:c8:6e:d3:60:64:2e:df:38:e1:b7:8e:
6c:be:4e:07:95:3c:d8:99:76:4a:1c:f7:aa:3c:d7:a3:fe:cb:
4b:5e:a2:be:0f:0f:b1:72:c9:53:8d:32:2d:ad:2a:6d:d9:20:
fd:ed:aa:12:ee:63:87:57:c5:33:79:f2:6f:a1:8a:54:05:1a:
c9:8d:66:ab:3c:d2:00:11:17:9c:2f:e4:1d:81:72:bf:88:37:
30:62:52:e7:e5:61:e6:de:d1:8d:9c:1c:3f:88:94:65:f2:3b:
22:7c:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:26 2023 by rpki-client on console-ams.rpki-client.org