Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8823a388-fce6-3c02-8f81-b17ad2d46fd8.roa
File: 8823a388-fce6-3c02-8f81-b17ad2d46fd8.roa (raw, json)
Hash identifier: DRSA2ywXzDQsY0pvhnfjT/E1nJYZ7wf3a7bPIeXFSko=
Subject key identifier: D6:1B:6B:63:A2:90:25:D3:7D:FD:A9:20:06:AE:3A:56:C9:39:7C:CC
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837BDB6B8CC55FA9153FAD165F0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8823a388-fce6-3c02-8f81-b17ad2d46fd8.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Sun 29 Jan 2023 05:00:00 +0000
asID: 21723
IP address blocks: 209.53.172.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:bd:b6:b8:cc:55:fa:91:53:fa:d1:65:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Jan 29 05:00:00 2023 GMT
Subject: CN=91e5c8a8-60be-4e1f-8fdc-9e9d20b5ce81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:9a:e9:80:c0:f1:e0:50:de:c7:9a:93:75:
1e:bf:33:c8:d8:65:c1:9d:9d:4d:62:c4:7d:2d:30:
7d:77:5b:25:d2:ff:52:7b:c7:46:b3:db:98:81:d2:
fa:5f:a6:0f:de:57:94:95:a4:3b:03:67:44:83:de:
a1:a0:87:d3:6e:d9:f5:d3:a0:71:e4:6b:ab:f5:42:
42:2c:00:98:45:12:5c:a5:ee:01:6d:16:e7:84:d6:
e9:27:e3:da:38:14:e3:13:62:34:5c:ba:d4:b5:21:
51:e6:6e:6d:18:27:55:36:51:98:2e:c8:e9:19:74:
be:72:32:e1:79:10:94:5d:fe:f6:6c:89:d5:9f:64:
aa:92:e5:e2:a5:9b:d7:03:8d:97:29:98:2a:71:b5:
fa:2b:f7:f7:c9:3c:46:97:a1:c0:04:3c:01:80:b0:
b1:3d:0a:b9:50:8d:2c:12:a5:88:eb:51:2e:8c:c1:
18:56:4a:b3:6d:40:91:8c:49:0f:ba:1e:10:b8:49:
93:a5:0f:23:49:cc:3e:3c:8a:52:00:37:ae:a8:d1:
2d:0b:56:1d:9a:d4:8b:5a:dd:29:a2:3c:36:e8:af:
25:db:a5:db:ed:68:f2:d0:1c:6d:3e:f9:5b:fa:20:
fb:18:a4:87:d9:6b:11:34:97:67:35:d1:85:4e:14:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1B:6B:63:A2:90:25:D3:7D:FD:A9:20:06:AE:3A:56:C9:39:7C:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8823a388-fce6-3c02-8f81-b17ad2d46fd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.53.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:51:0a:3c:48:61:13:61:98:b9:62:91:66:e4:cf:c5:b4:f1:
fa:b4:0c:e7:68:9a:06:d9:c2:7d:fb:d4:e5:45:d7:36:65:f8:
f5:a2:d4:0d:31:d3:99:ab:32:72:6f:48:c1:64:db:2c:8c:ea:
05:f0:f9:1a:b3:53:f7:77:7c:e9:77:7f:7f:81:9c:c9:dd:f0:
a7:5f:97:26:d4:69:2e:ed:f1:70:6b:6b:64:13:ff:63:3d:97:
43:ef:20:f2:8f:84:6d:6b:e4:6e:1b:d6:e8:23:b3:6c:c2:1f:
e1:10:bb:bb:e3:c6:45:58:fb:84:7e:7d:a1:0a:7c:4e:49:48:
36:7f:d2:29:95:e6:7e:28:d2:c5:c6:5a:49:29:89:77:ea:cb:
4a:4e:64:e5:6f:52:3a:29:13:a1:a0:1b:2f:bf:14:31:d3:15:
d0:4d:60:4f:09:1d:2a:e0:3e:5a:c1:b9:20:1f:fc:45:ef:a7:
6b:14:be:c9:f2:72:61:aa:87:c9:53:8e:96:13:49:63:8a:aa:
09:ff:9d:76:fe:76:c3:d0:05:3d:ff:c5:2d:c8:15:e0:53:bc:
1b:1a:79:0c:98:70:23:7e:a7:71:3f:c0:45:10:4b:bb:59:30:
23:1a:82:0a:fe:0a:87:ef:73:6d:34:e8:b4:b3:d4:00:4d:80:
b0:13:d9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:04 2023 by rpki-client on console-fra.rpki-client.org