Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d425f21-467c-3bc4-ad39-e6dd4112efc9.roa
File: 0d425f21-467c-3bc4-ad39-e6dd4112efc9.roa (raw, json)
Hash identifier: ERLkYPc3eN7WQTApbg9wgHobKSmpiAxKOOrTxoQO2cc=
Subject key identifier: B4:0C:3F:0B:4E:2B:84:56:DF:D9:FD:80:4F:41:91:57:2C:7F:FF:D4
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7BAB919E1963128EFBE1100
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d425f21-467c-3bc4-ad39-e6dd4112efc9.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 64.233.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ba:b9:19:e1:96:31:28:ef:be:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=8f3673a1-4d1d-4a27-943e-f5c0de77ed83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a9:f4:93:0a:fa:6c:d7:ee:33:fb:9d:de:b2:
35:83:3e:b7:14:49:68:1e:bd:54:0b:e1:d6:77:33:
8f:1e:15:e1:7c:3b:9e:0a:cf:ab:b4:c3:13:c8:ee:
a1:d5:b2:6e:6e:a7:63:c3:47:f3:cd:5f:35:76:2b:
f8:8a:c4:6a:ad:d5:52:5f:06:62:69:5b:af:bf:c5:
fa:7e:d4:4c:32:d5:ea:10:bc:bb:9f:5f:80:1d:70:
0f:bf:01:7e:74:76:be:ed:46:23:9e:52:88:dd:f1:
9d:2a:bb:7b:16:4e:18:76:c9:e7:23:f5:9e:a5:80:
ba:56:d3:1a:27:60:54:51:48:c9:db:37:05:56:d8:
01:17:8d:ad:be:58:24:11:ab:22:1f:96:80:ef:ac:
42:e9:d4:95:04:5a:72:b5:f0:c9:bd:c5:e5:fa:87:
5a:0e:04:ee:b4:fb:92:6d:1c:f8:12:5d:8e:3a:30:
54:7d:ad:28:6a:fc:e7:52:a7:10:77:4b:91:5c:d3:
ef:30:cf:b3:c7:b5:18:63:cd:2e:cc:6b:1b:3c:11:
fd:6d:85:25:a9:47:05:85:5b:08:2d:f1:46:7b:cb:
79:78:b0:df:fc:34:77:43:13:0d:aa:f8:6b:e0:84:
4a:ca:07:54:36:de:e8:7e:f3:dd:83:8e:11:39:bc:
48:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0C:3F:0B:4E:2B:84:56:DF:D9:FD:80:4F:41:91:57:2C:7F:FF:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d425f21-467c-3bc4-ad39-e6dd4112efc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.233.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:f4:cd:71:ed:4d:31:88:0b:3d:03:43:07:9c:90:3e:ec:6f:
a6:b7:2d:be:38:78:ef:e3:bd:b2:bc:5d:e8:26:b6:03:3d:d1:
a3:7f:63:82:53:5c:33:8f:e3:cf:53:92:46:a0:84:f2:b1:08:
68:e5:9d:16:33:f7:6e:58:7b:b8:d7:fd:19:49:6e:7f:df:af:
b0:1d:42:ea:64:ec:69:4f:fc:ab:52:0a:35:f9:6c:a0:11:16:
a7:9c:0f:0d:9f:7f:73:8a:7c:32:38:08:6b:b5:71:86:97:bd:
99:d9:6a:6c:cb:e6:7d:bf:2d:20:c9:57:fc:09:7c:db:05:1d:
0a:60:53:67:f3:54:e5:c7:22:21:3e:1e:ec:2b:b2:62:ce:83:
89:3d:2a:b4:ed:86:c2:6f:1f:b2:90:0a:f5:72:27:66:e5:e9:
29:e1:45:6d:05:46:ad:8c:22:dd:6e:b3:4b:20:e1:9c:c9:6f:
a0:ab:ad:a6:99:22:29:17:48:5b:19:41:6b:13:12:33:c7:cf:
a2:f6:b8:99:a7:06:99:3e:ff:c6:bb:8e:e6:8c:40:70:a4:11:
ec:29:be:2c:a1:56:4b:df:49:9e:a5:47:63:3e:68:28:24:4c:
bf:86:4d:2c:23:33:aa:c2:67:f6:5f:24:b1:de:19:0d:51:f7:
a5:bb:30:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:24 2023 by rpki-client on console-ams.rpki-client.org