Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/09663837-bdfc-3992-9bf2-69c0785d3275.roa
File: 09663837-bdfc-3992-9bf2-69c0785d3275.roa (raw, json)
Hash identifier: OW8e/X63kQq+fqskfKrdhU9O/mCuoC4hPTyhbrB7N38=
Subject key identifier: EE:9C:F4:B9:3C:66:E8:94:F3:AA:09:76:AE:19:6F:9E:4B:10:7A:CE
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B51394791BFB2DC90135F0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/09663837-bdfc-3992-9bf2-69c0785d3275.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.253.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b5:13:94:79:1b:fb:2d:c9:01:35:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=4aa8658b-2251-4665-a2ab-957272fdab1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:5e:3d:73:85:60:59:3e:3c:38:d5:2e:93:
a6:75:fb:39:6d:f2:2f:91:8d:77:f5:75:9e:74:8a:
d2:c1:c9:53:5a:f0:f6:43:36:da:9a:6c:3c:fe:6c:
57:ec:68:19:18:96:b3:e7:c8:04:46:95:dd:dc:65:
c9:5f:ea:1e:dd:35:a7:ce:68:bf:ad:99:80:2a:aa:
c8:4e:e5:fe:50:a0:d3:e4:a7:ed:07:8f:21:fa:f0:
67:ba:c9:f5:ec:03:4c:ee:97:83:f1:07:26:72:ac:
90:d6:82:f2:d0:55:c9:c6:87:9b:fd:d4:54:22:25:
0f:a1:e5:3e:ee:ad:23:d2:b5:36:fb:78:78:89:f6:
41:5e:3d:e9:eb:e5:20:52:a4:82:17:22:4c:db:7a:
7d:8e:be:11:75:a3:a5:06:1e:bb:0c:c2:79:52:0c:
68:43:f4:99:02:e3:b1:49:bf:fb:8a:2c:e2:fb:c8:
80:3d:4e:35:3e:3e:5e:8b:08:c3:70:27:cd:a3:65:
be:74:9e:4e:70:1d:6a:b9:12:c4:3d:e8:c0:c9:cb:
0d:9f:cc:f4:b2:50:75:e6:62:69:3a:9f:3e:38:65:
59:eb:e0:73:86:b5:31:45:1f:9d:a8:09:96:e5:48:
fe:0a:55:9f:a9:6d:33:24:64:62:36:fa:ed:b9:b0:
dc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9C:F4:B9:3C:66:E8:94:F3:AA:09:76:AE:19:6F:9E:4B:10:7A:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/09663837-bdfc-3992-9bf2-69c0785d3275.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:6e:92:c0:14:c7:90:00:8f:a9:03:f4:e0:6b:2a:a8:5b:a0:
de:58:70:83:29:d0:d6:db:2d:60:a6:fa:0b:7f:50:4e:22:b1:
f2:48:1b:a5:2d:94:70:c0:e1:9a:39:50:28:f9:e0:f0:b5:1f:
9b:7d:1b:30:3e:34:8c:f0:83:5c:bf:c2:72:54:fd:31:97:53:
1b:3b:96:f6:a7:85:f7:a5:09:eb:23:87:5e:3d:c6:e3:c7:2d:
ac:50:b4:9d:e2:4c:78:0c:75:b2:25:a9:94:78:9b:ed:6e:94:
d4:a4:ed:60:8e:3f:bb:e8:1c:11:ff:dd:2c:ba:be:c5:a4:3d:
78:e5:00:a2:90:5f:21:7c:4e:5e:e4:8b:a4:cc:74:f9:6b:16:
d9:75:4f:ac:c9:57:e0:9a:e1:f9:5b:cd:e0:7c:e8:c3:15:76:
7e:fa:49:17:57:41:bd:7a:54:6e:03:46:13:8f:29:8d:ba:3a:
7b:e6:d1:74:8b:c6:5a:39:4d:71:a8:41:ff:5b:01:02:c0:3b:
13:d6:e8:c3:c5:bf:45:4e:0f:76:f0:97:a3:68:51:bd:52:d9:
0d:a2:89:ce:21:9d:42:27:ec:89:55:89:90:cb:8a:8b:b2:a9:
ff:d7:20:82:de:63:30:1e:ea:2f:7e:b7:2d:ba:d4:07:64:77:
63:c3:4f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org