Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9ea4b23-a562-3d30-b292-ba331f88a7c9.roa
File: e9ea4b23-a562-3d30-b292-ba331f88a7c9.roa (raw, json)
Hash identifier: 7hyaSkd5VdomLimfv/3TgYV1CAK7n4qkwOBY47dZRBo=
Subject key identifier: DB:78:BB:B1:31:55:FA:9C:3A:18:1B:E6:62:6E:0C:23:A1:74:B1:4A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA79ED54B8D07C6CD310F5080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9ea4b23-a562-3d30-b292-ba331f88a7c9.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 108.177.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:9e:d5:4b:8d:07:c6:cd:31:0f:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=892ecfc9-605e-4c9d-aa44-f06350ef70aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:7c:77:a5:0f:d6:33:76:ec:f2:1b:e8:65:
f6:4c:6d:ab:e2:5a:06:26:35:f0:c2:79:a8:da:fb:
ac:1d:20:06:13:aa:86:da:e9:3a:8a:a7:6b:29:27:
d9:21:03:b9:46:a9:dd:9b:f7:c8:e1:33:7b:2b:fd:
70:c5:c8:c2:57:b3:a0:f0:02:39:ab:58:5a:ff:9d:
5c:9e:5e:73:f2:8e:78:31:75:ec:f5:96:5f:74:b9:
08:5e:96:31:b1:fc:f5:86:7c:c8:68:56:7a:4b:32:
e5:7d:cc:85:95:cb:a0:f7:30:d3:0a:f7:8c:d4:69:
49:fa:6c:07:4a:e9:ad:30:4d:59:b1:d1:9b:fe:3f:
f2:9f:36:b5:5e:72:f4:5f:cc:6f:55:51:6e:ec:09:
1e:5f:32:11:b7:7f:8a:97:d3:35:0c:d9:4b:5d:52:
25:4f:34:d4:42:26:b4:ca:b5:07:46:44:b0:d4:7d:
f9:71:ef:92:78:df:30:98:43:47:7b:59:4c:2c:65:
50:5a:a5:3f:3d:38:aa:fb:8d:0f:52:06:71:bd:d0:
55:d0:94:f4:9a:05:3a:e9:a8:45:26:29:a3:92:ec:
95:92:53:04:6e:98:1e:32:cc:21:6a:a4:14:9d:08:
96:27:68:6e:04:67:63:03:30:fa:d6:46:f6:6d:a7:
be:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:78:BB:B1:31:55:FA:9C:3A:18:1B:E6:62:6E:0C:23:A1:74:B1:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9ea4b23-a562-3d30-b292-ba331f88a7c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:d5:9e:b0:c2:da:2d:46:ee:37:73:bd:ac:4e:a2:21:26:5a:
94:92:b6:e0:68:e0:7d:2e:67:95:06:a4:8c:14:14:d9:82:52:
4f:2c:dc:c1:1e:8a:e0:24:0c:51:4d:7d:10:dd:ec:c8:48:7f:
1b:c8:5e:82:c0:32:74:ee:97:a8:76:f8:62:5a:c9:d3:50:22:
8c:82:05:1a:08:99:b5:f1:40:1f:05:94:f3:51:d9:1f:8e:79:
36:62:c6:a0:a0:52:e8:b0:0a:b6:79:1d:c1:f6:af:c2:96:84:
7d:e0:7b:c4:13:6f:53:b7:24:31:c0:dd:3e:59:d9:bd:33:19:
bd:12:31:8e:ff:21:06:a1:4c:d0:01:57:74:36:c3:4c:d1:99:
ac:b0:98:b7:a0:46:6c:bd:ad:ef:13:08:b7:76:da:8e:4f:ba:
b6:27:b6:b7:12:ea:c2:03:b5:0b:23:2c:52:8c:b8:e4:55:a8:
5a:0a:ac:f8:de:d9:b3:e3:a2:d7:cb:26:34:25:3e:7a:1b:64:
51:47:e3:79:b9:d1:74:e9:7d:a8:4c:6c:a3:13:bd:37:f9:a2:
33:4d:80:90:93:8e:1b:9d:33:d4:20:7f:fa:94:5c:2e:92:43:
43:c5:52:96:0f:8f:94:7f:7f:06:d7:5c:08:d7:59:f1:ac:fc:
a4:7c:0c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org