Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ffa26b35-dc39-3a1e-bea2-44dde9288ca9.roa
File: ffa26b35-dc39-3a1e-bea2-44dde9288ca9.roa (raw, json)
Hash identifier: oAdV35AlyVoui1WMzgVLaTAoLkzqgMEIPLsRzzUp5f4=
Subject key identifier: 1C:CB:EA:15:85:BA:5A:ED:A1:5F:FF:F3:F3:94:59:3E:78:48:46:AA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A6C35B9ECF7898D08CD4C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ffa26b35-dc39-3a1e-bea2-44dde9288ca9.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 208.76.68.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a6:c3:5b:9e:cf:78:98:d0:8c:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=eb0f46c5-e330-4cfe-bf79-cb40504f0983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6e:38:ec:4d:ab:07:65:b0:1c:e2:b0:54:84:
72:fb:7a:a3:0c:19:61:98:23:ab:85:d9:c1:fb:61:
6f:c8:39:21:bf:a5:7e:94:98:28:85:58:4e:de:72:
cf:b7:c2:fa:6e:34:73:dd:6c:36:14:be:df:56:27:
6a:5e:e5:0f:fa:38:5e:b1:44:6e:0b:b0:7e:2e:1d:
e9:23:8d:f5:20:2d:0e:d5:fd:15:23:cd:e7:3d:5b:
59:c3:53:97:fe:16:d2:d5:0a:50:08:cb:a1:03:25:
47:ac:a9:7d:9e:e4:a7:f0:c4:b9:8f:1e:9c:db:ce:
a5:16:ae:84:14:38:22:f6:2f:6b:0a:48:bb:c4:5e:
b9:16:3b:9d:aa:b6:73:7b:84:65:81:95:ed:84:75:
54:8a:39:d0:ee:f1:e6:cf:b5:db:bc:2f:f4:a9:23:
19:26:29:43:5d:b1:73:56:65:dc:e4:5b:b3:f3:42:
d2:f0:df:9e:00:22:63:3d:73:96:8e:1b:86:1e:21:
44:e2:ca:01:d6:a5:54:3e:c2:87:66:0e:81:67:32:
da:51:ce:9f:a7:9a:b9:6b:54:5d:9d:7b:df:50:59:
15:1b:97:4f:78:7c:b9:ff:63:24:00:fd:8a:2f:34:
46:5a:83:78:5b:d7:6e:8a:69:e1:91:dd:7c:5a:bd:
ee:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CB:EA:15:85:BA:5A:ED:A1:5F:FF:F3:F3:94:59:3E:78:48:46:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ffa26b35-dc39-3a1e-bea2-44dde9288ca9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.76.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:8e:de:1d:b5:29:fd:e4:a5:81:44:7c:40:26:b8:b2:d1:a6:
9b:b0:ad:93:63:d9:ab:9c:ef:f9:a4:db:6c:5c:dd:85:1b:49:
52:f2:00:2c:38:ae:3c:70:4e:73:88:78:bb:e5:06:ca:40:a7:
45:f4:9a:bc:89:02:57:9b:ac:0b:54:f3:f5:a0:ce:fe:9b:5b:
5d:86:48:31:cb:5d:55:7d:32:e8:93:5e:b7:da:8f:85:cc:46:
20:db:ea:90:41:25:c8:03:bf:ae:41:c2:16:22:b7:03:fe:bb:
88:6e:44:92:bb:50:9f:9e:7d:9f:fc:13:0f:22:6b:50:06:29:
2b:1e:d1:be:c0:83:7a:91:fa:76:38:e9:25:6e:b7:e2:ed:99:
db:84:67:d2:66:67:8f:e9:e3:32:67:fa:26:e2:65:37:6f:20:
f4:83:12:9e:67:c0:78:dc:6c:8f:c1:34:fa:47:f5:9b:35:cf:
f3:f2:5d:cf:0d:34:5e:be:d6:89:31:5b:db:7b:fe:ed:f9:c8:
b7:ad:9c:f7:f4:45:91:3d:ab:d2:9d:81:20:55:ca:09:25:25:
cc:a8:be:65:3d:63:36:a4:3b:b7:bc:d0:6a:4f:ca:99:b5:d4:
b2:89:17:ca:0a:ee:aa:a9:18:0e:a1:de:9a:58:47:c2:a9:f1:
1e:bd:88:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org