Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1327624c-af9b-3904-bb2a-059a328d5f72.roa
File: 1327624c-af9b-3904-bb2a-059a328d5f72.roa (raw, json)
Hash identifier: gqdy5nWQUJxv2pp3pUje6I0nUrDbMMav0j+wqNCmno0=
Subject key identifier: FA:4C:BF:60:6D:26:23:7E:0A:0B:41:F1:81:FF:05:62:D7:FC:7F:F5
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7AF274C42D3010AC0FBD480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1327624c-af9b-3904-bb2a-059a328d5f72.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:af:27:4c:42:d3:01:0a:c0:fb:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=584d8191-7af1-42ec-8bd7-9d39173dd54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:44:ec:e5:c0:c1:b0:12:24:c9:b6:91:f3:
1f:e2:19:8f:28:26:de:3d:9c:49:bd:f9:e7:d0:33:
d3:ca:b9:43:57:ee:43:6e:a1:f1:22:c3:3c:9d:6f:
94:38:cc:4d:0f:cf:6d:c8:dc:52:73:9d:ea:82:9c:
54:88:86:f8:09:2c:e4:04:38:c4:af:f6:fe:27:28:
66:47:f6:e2:20:f0:4e:cd:10:d1:60:5a:f3:a6:f4:
3e:17:c6:3b:0e:47:e1:ad:46:81:71:e2:04:44:3b:
18:ef:b4:fc:6b:a9:b1:e7:ae:98:a1:83:70:39:33:
fe:32:0a:1f:5e:15:d3:c3:e0:1f:6c:12:49:6f:0f:
49:a7:96:30:28:49:08:a1:ff:99:d5:09:61:0b:a5:
1b:b0:c2:7a:9f:69:21:1a:1c:7c:aa:6a:45:ae:5e:
72:23:fc:f4:4e:c7:21:27:52:dc:72:65:8d:8b:32:
ea:b8:1f:ce:27:ff:0e:93:d7:e2:be:ab:a6:a7:f2:
14:d0:8c:e5:0c:a5:31:30:46:de:ba:db:21:45:28:
7f:30:91:53:25:96:88:da:4c:47:03:a0:f0:a4:fa:
d4:6f:84:f4:8c:b3:30:92:4e:aa:08:04:ee:7a:49:
d1:64:c3:ac:4b:d6:33:79:5e:88:a4:9e:eb:04:72:
ad:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4C:BF:60:6D:26:23:7E:0A:0B:41:F1:81:FF:05:62:D7:FC:7F:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1327624c-af9b-3904-bb2a-059a328d5f72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:ae:97:b7:f5:61:91:b6:fe:e2:c4:85:fc:1b:d5:fc:28:ee:
94:05:27:bb:ef:64:f5:0f:b9:fc:fb:0a:be:04:6a:81:a4:78:
73:91:c9:61:66:f8:40:7b:1f:f5:fb:d2:b9:3a:a8:f5:6c:64:
06:8c:5b:22:12:88:93:8c:f8:8e:30:2f:aa:b3:f2:a6:28:65:
31:17:e7:42:05:4e:86:68:1d:da:28:62:8c:d5:8c:8f:ef:1a:
47:a7:40:8f:02:35:28:28:8c:43:9a:c6:88:e5:43:5f:ff:b4:
ac:26:6b:69:3a:6a:5e:b9:5d:6a:23:42:a3:ad:8b:bc:bd:58:
e5:13:e5:1d:a1:6b:7e:f6:ee:a3:c9:90:80:5a:41:cd:5c:2c:
20:72:c7:3e:2f:77:8d:40:dc:8d:b9:71:22:0a:21:15:d6:f0:
a3:29:a9:60:1f:ae:e2:51:2e:64:a7:f6:44:c9:c7:9d:a0:aa:
bc:53:c2:2c:a6:4c:8d:4b:6b:ab:4e:de:b6:bc:3d:9c:39:f1:
83:da:db:3f:97:bb:57:59:da:e4:b6:ae:b2:16:95:5b:a4:70:
32:c7:14:fd:65:ed:9d:5d:d7:12:93:2c:46:2a:d1:ce:e0:fc:
52:bf:25:62:cd:d4:f8:c8:d9:33:4e:8b:0f:8d:7d:f9:28:1f:
dc:98:54:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org