Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ba85316-1998-3bcb-ac99-cc07bf5a721e.roa
File: 3ba85316-1998-3bcb-ac99-cc07bf5a721e.roa (raw, json)
Hash identifier: jK8QytCeq6DSb2UtO6O55GUQ07TsBdBHsC54h2Iga7k=
Subject key identifier: 7D:61:F9:46:54:F9:71:94:B4:16:A8:A1:4B:96:CF:B6:4D:25:55:31
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B9B4040E89EC6BDB89E340
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ba85316-1998-3bcb-ac99-cc07bf5a721e.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b9:b4:04:0e:89:ec:6b:db:89:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=3daf043c-bcae-4319-afc9-d9897f318bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:be:59:4d:eb:6e:ab:37:0e:fc:af:fb:77:68:
b0:ad:81:94:26:f6:fc:d6:7f:8e:2f:3e:ab:ae:c1:
83:36:42:fc:4d:60:27:fd:0d:88:63:93:8e:2c:14:
69:f9:87:12:54:ed:1c:91:01:43:d1:e9:ad:ed:a4:
b3:3b:96:4e:33:a6:04:cd:4b:38:02:61:20:0f:36:
05:f3:a5:a9:e6:d2:b5:73:8e:1e:2e:2b:7c:76:1a:
c0:d8:5b:da:3b:82:8f:44:a3:7c:16:d8:bd:74:cf:
c4:0f:d6:c9:66:a2:49:79:54:9c:85:e2:3f:ff:1d:
86:ce:44:01:de:d5:99:26:7c:e7:88:fd:7a:6e:9d:
29:ba:09:9b:67:54:8d:35:af:ff:33:e2:77:ff:09:
63:1a:4f:36:99:23:39:e0:ac:30:fc:0b:ad:6f:e1:
43:26:83:03:cc:6c:72:20:9d:ab:87:e8:42:71:b5:
5a:f3:4d:c2:2d:28:d3:33:0a:3b:15:f6:15:47:e3:
70:d1:dd:ff:21:bd:ef:09:48:9d:59:4d:8e:9f:43:
23:55:f6:07:5b:1a:a9:df:ee:82:41:63:74:c6:bc:
cf:b4:db:6f:32:b6:17:6b:eb:56:80:02:28:41:45:
06:d4:9e:2f:3a:ce:c8:c3:35:55:0a:4b:c4:fb:95:
e4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:61:F9:46:54:F9:71:94:B4:16:A8:A1:4B:96:CF:B6:4D:25:55:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ba85316-1998-3bcb-ac99-cc07bf5a721e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:91:5f:44:4a:1f:83:c0:b9:5e:9b:78:6c:2a:11:d5:db:11:
1f:77:8e:57:34:df:62:be:43:ca:8c:5f:3c:24:40:d1:4f:ea:
88:96:db:be:02:4e:64:10:3e:f4:6f:ca:0e:24:b4:68:99:c8:
25:20:f8:84:2b:2e:bf:0e:7c:8f:2d:c8:83:81:b5:21:3c:5c:
18:95:e5:5d:c8:d1:26:13:7b:1f:14:54:a8:66:ba:40:a1:2a:
5e:e8:7a:8c:75:6c:8f:f1:11:03:ab:1b:ea:c9:fc:53:e8:44:
74:f9:d0:cc:89:33:a8:7b:d0:e7:8d:c0:61:fb:01:6b:11:10:
2b:e8:fa:f4:13:8e:8f:ca:56:dc:df:bd:05:43:af:1e:88:15:
10:ca:87:8f:ce:c6:29:cd:65:7f:73:ba:3d:66:a0:50:1c:a5:
17:15:1b:9a:d1:ef:24:60:64:93:1e:00:5a:62:73:f6:04:f6:
a7:9b:65:cd:72:8d:b6:a3:f1:58:65:0c:bb:3e:73:b8:f6:10:
b2:88:09:7d:29:1a:8c:ac:f3:a5:6e:56:9e:63:05:9c:89:8b:
36:05:7d:cd:bd:16:9a:47:e8:80:4e:c2:5b:ac:54:b4:87:57:
ea:58:ad:9a:6f:1f:16:0a:ac:a0:4c:92:8c:57:0f:80:db:e0:
f5:74:ac:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org