Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f842cd42-d36d-3348-b2eb-b74927ef693d.roa
File: f842cd42-d36d-3348-b2eb-b74927ef693d.roa (raw, json)
Hash identifier: C/9hYX459uRy4W+hDxAHNdlbYw4CgEq4ykFw3vQ9eQ8=
Subject key identifier: EC:E4:5F:B5:1E:2A:A2:C5:93:7E:D4:27:18:65:88:4B:89:69:11:B6
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7BA8C8C1844A0ACAEC86E00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f842cd42-d36d-3348-b2eb-b74927ef693d.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ba:8c:8c:18:44:a0:ac:ae:c8:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=36e18904-7ac1-4cd0-aed4-8b7ed62c986b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:db:be:fe:c5:57:24:3c:bc:31:10:3f:00:e0:
f7:db:fa:0a:d1:78:ab:a2:27:65:d1:4e:cc:e9:9c:
fb:74:df:3d:f4:f4:1a:5f:68:e2:6a:c5:49:d7:59:
8c:01:d2:bc:45:d2:ce:8c:78:8c:05:cd:99:d8:b5:
10:ce:a9:75:1a:db:06:dd:bb:3e:b8:61:f1:47:b7:
8e:c3:04:08:66:44:d7:ea:5b:33:c4:a2:70:1c:c2:
7a:72:84:e5:fe:76:0f:98:c4:4d:23:5f:41:4b:0a:
12:0a:7e:ff:01:43:57:07:d6:c0:1e:62:cb:7e:69:
b1:66:93:ed:a5:60:77:31:67:10:15:eb:46:86:8d:
9f:5c:ad:fa:02:e9:c7:75:dc:d4:86:53:63:7b:9c:
8d:0d:26:12:00:4b:cb:17:0c:0c:22:90:ea:7d:f6:
4f:b1:16:24:75:26:80:49:96:a4:d4:4c:a1:14:c4:
6f:2f:52:e6:c4:da:c3:bb:f5:99:31:fa:a2:7f:9d:
0a:35:11:a3:f4:41:27:8e:07:32:84:3a:ef:74:4d:
37:9d:d8:64:f5:13:74:a2:ca:19:c7:9a:57:2e:84:
a1:92:60:24:dc:f5:9e:ac:2c:cf:9a:b1:83:fa:c2:
4f:0f:0d:92:ef:ec:79:51:2a:42:d1:94:9a:48:35:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E4:5F:B5:1E:2A:A2:C5:93:7E:D4:27:18:65:88:4B:89:69:11:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f842cd42-d36d-3348-b2eb-b74927ef693d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:cd:82:a7:6d:48:eb:61:4d:e3:d6:37:4b:64:da:54:86:8f:
2c:ee:bc:6a:59:b9:08:f7:4c:e1:40:5a:a6:e6:d1:98:3f:14:
b4:7a:1f:52:d7:e6:53:31:45:af:5b:c3:ed:ad:82:0a:96:9d:
1b:4e:88:5c:ab:20:0d:b3:76:ec:d7:99:8b:64:e6:a2:7d:8c:
e8:63:1d:c8:30:a2:f8:32:1f:4e:af:0e:c1:c7:ff:03:46:38:
2a:61:89:17:76:e6:ea:56:6e:b4:01:33:73:4b:55:82:81:f5:
b5:63:e4:84:d5:92:52:dc:37:1d:14:c8:30:4c:ab:3b:2c:46:
f1:31:18:2d:5f:74:72:30:21:9d:a3:be:8b:7e:12:18:28:89:
cb:f2:8b:ea:08:ca:89:37:6e:13:ca:11:75:07:b4:e5:86:83:
ad:dd:9e:85:39:fc:2d:f2:61:a6:cb:68:5d:8e:db:86:af:2d:
c8:a7:d1:84:9d:88:cf:f6:e5:a0:19:db:c8:0b:9c:51:c6:26:
7d:49:c5:99:31:bf:f6:41:8a:37:00:1a:af:22:0a:e3:95:81:
ed:5a:9a:1c:79:be:11:40:14:e2:d4:bb:e9:19:01:e3:ef:d7:
7a:fa:c9:c1:d4:07:eb:76:db:d7:5f:21:c4:1b:70:4e:c2:e5:
14:f9:eb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org