Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32ae934a-54d0-3fe1-9d80-705dd0ba8afa.roa
File: 32ae934a-54d0-3fe1-9d80-705dd0ba8afa.roa (raw, json)
Hash identifier: 9tNSJ7ea23S/Opsf0DGCujf7S4kOp46B13j5H6oI12I=
Subject key identifier: 7E:A4:8A:0B:6B:A8:70:95:E7:B9:70:5C:CC:7E:BD:F6:C9:36:F2:02
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B50184622281EEFB4FD700
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32ae934a-54d0-3fe1-9d80-705dd0ba8afa.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 108.177.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b5:01:84:62:22:81:ee:fb:4f:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=a6fbcd3f-529b-4666-9711-59bbaf162ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:b6:9d:97:83:12:1a:37:4e:b0:25:5d:ac:
be:27:e4:93:74:2c:12:f5:4c:20:3a:47:0e:38:85:
de:00:68:07:f6:19:59:23:a2:b2:38:a1:54:8c:4a:
dd:73:dd:3f:6c:61:8f:6a:f7:d7:75:95:a7:72:ba:
a1:9c:6a:97:c2:f5:cd:78:31:f4:50:43:55:c2:7b:
19:ff:df:60:53:0c:12:c5:78:ab:22:cc:6e:51:0b:
44:ac:9e:50:a1:fa:96:05:85:79:04:97:23:4d:0b:
5d:29:b6:8c:b8:4b:83:21:d2:b9:0c:7c:88:d2:07:
1a:d4:95:ac:59:13:aa:87:58:c7:ba:ec:1c:c5:28:
66:e4:df:9a:b9:a3:48:c5:fd:db:c0:19:48:cf:f2:
49:76:b1:2b:b6:b4:a6:ef:b7:56:f1:41:7b:b8:71:
e1:24:a8:4e:f3:e4:24:6e:12:33:65:b9:93:75:de:
28:fb:7b:3f:69:2a:93:d7:a7:e5:f3:dc:90:2c:99:
ba:b3:4a:85:65:01:90:b4:9e:ea:5d:41:1d:ab:28:
dd:12:a5:4a:58:d0:a8:29:c1:3e:ae:1f:0e:ba:31:
14:6e:ce:e0:6b:79:2e:ce:6f:a0:32:56:9b:e6:a2:
b2:73:9b:d1:30:9f:be:de:fd:b3:4f:1f:52:78:43:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A4:8A:0B:6B:A8:70:95:E7:B9:70:5C:CC:7E:BD:F6:C9:36:F2:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32ae934a-54d0-3fe1-9d80-705dd0ba8afa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:44:d3:6f:ba:2a:de:2c:19:65:29:0d:14:e3:6d:62:8f:e7:
17:4c:4b:20:2e:d6:c8:bc:e8:c8:a5:dc:5f:2f:12:5c:fa:d4:
03:66:01:65:58:12:8c:83:39:56:b0:ef:56:ed:dc:7a:8b:7e:
19:80:88:22:1d:d9:f1:f3:2d:c3:24:f9:51:dd:32:72:cb:40:
40:6f:f2:5a:34:c3:59:ce:71:3b:09:24:45:ef:00:b2:94:91:
e7:9e:b2:de:af:7e:3c:8f:87:97:24:79:4d:cf:b9:1c:8b:dd:
31:62:ea:73:d5:f0:42:82:a0:c3:08:fa:b1:8a:86:db:47:a5:
db:5c:e4:65:45:39:ab:b4:9f:fc:a1:12:32:f0:93:c1:aa:0b:
bd:ef:da:15:75:45:2a:8b:18:75:10:14:6c:c7:65:13:31:2f:
07:dc:85:be:80:ae:28:12:1c:17:51:37:b9:4e:ae:4e:6b:20:
56:df:70:5c:04:56:e5:da:6d:5b:c1:55:b8:21:63:1d:2c:9c:
28:79:d0:32:d2:23:b3:1e:4b:16:4b:8e:9e:40:f5:20:40:5d:
cb:e4:6f:c9:4f:9d:eb:14:9b:16:f4:40:da:f4:65:75:8c:6f:
30:13:48:6f:6f:15:fa:42:d4:d5:29:b2:25:89:66:57:50:e3:
fe:8d:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:24 2023 by rpki-client on console-ams.rpki-client.org