Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a5c3bcf-df66-389f-a308-185025cda951.roa
File: 4a5c3bcf-df66-389f-a308-185025cda951.roa (raw, json)
Hash identifier: 9rDEiVzEkOA0aadPmcJepPJmKO2HJOwKP4Tnw0YT+lM=
Subject key identifier: 22:13:BB:87:06:4E:D4:79:84:92:A4:D0:07:85:D7:4D:A9:64:D3:1B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B57FD175E4909168F35D00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a5c3bcf-df66-389f-a308-185025cda951.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b5:7f:d1:75:e4:90:91:68:f3:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=a6bf8027-aa58-42ef-ba3f-9750e5b7aced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8d:c4:7b:d6:30:4b:8d:84:49:c3:aa:6e:cf:
e3:9f:b7:84:5b:a9:2f:8f:33:70:bc:93:80:5f:ae:
84:bb:df:5f:c0:6f:04:4d:a2:86:b3:42:2d:1e:8a:
5f:ee:ed:0c:20:a6:19:71:a0:dc:59:fc:0c:3a:d2:
83:35:f6:49:37:39:70:85:5d:8d:10:f2:80:ae:8a:
3a:42:56:94:be:12:be:19:96:9a:17:c2:11:c0:2a:
01:33:d7:68:ac:c5:c9:ca:25:bf:d3:b2:59:48:1a:
e2:ca:7c:a6:ba:ab:d0:c4:23:ec:f7:3f:e1:27:3a:
63:47:13:66:d5:4d:40:b9:3c:49:dc:9e:28:88:4a:
95:85:54:38:24:7b:a3:ee:74:56:27:ce:dc:04:72:
df:f6:aa:fc:34:25:26:40:1b:75:65:1b:a7:0a:5b:
a0:19:d3:4d:86:11:2d:93:74:a3:2a:21:7b:60:f5:
4d:30:29:c7:bd:73:ea:54:7c:de:6d:52:b2:d5:20:
1a:2c:42:3f:58:a2:ce:a8:c4:ba:01:b2:4e:eb:7c:
c4:43:13:28:f7:e6:06:4f:19:7f:6f:2d:fd:0c:90:
71:b1:92:4d:95:d6:d2:3c:3f:1e:5c:aa:22:a3:40:
69:b7:91:1d:10:40:52:cb:c0:00:14:2d:a4:7e:09:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:13:BB:87:06:4E:D4:79:84:92:A4:D0:07:85:D7:4D:A9:64:D3:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a5c3bcf-df66-389f-a308-185025cda951.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:e7:14:11:27:d6:a3:4a:24:61:61:b8:20:be:78:45:69:94:
a7:9c:9e:49:3c:4d:ce:e9:87:ea:79:d9:a8:6a:b7:f1:8d:b7:
92:8f:42:bf:ed:b8:48:59:e8:6e:d9:58:81:57:83:8a:27:3a:
0b:46:c6:07:68:12:63:2b:80:03:2b:2d:3a:1c:21:7c:0d:31:
9c:51:61:73:37:9c:62:2d:9c:8d:4b:da:c1:43:e0:73:5b:9a:
da:3d:95:01:50:1a:9b:ee:6c:df:7e:b0:fb:e5:75:32:13:f4:
72:62:94:46:46:55:9d:5a:e6:1e:3f:14:a7:f4:de:b6:a0:9f:
74:37:6a:5f:1f:d1:c3:31:b9:f6:ac:bc:6d:c0:e7:b4:b3:e8:
77:f4:a2:35:ee:a9:54:e8:2a:28:25:05:5d:69:3a:23:0a:75:
22:7f:f0:18:ad:22:fd:1b:73:fa:f2:54:e3:a5:8c:0f:f9:ea:
69:04:0f:57:31:7f:ee:3a:57:81:a4:8d:f1:e0:8a:f5:86:d2:
0c:6e:1e:14:4a:52:70:81:a3:92:24:8d:d8:e8:d2:12:ba:42:
50:e6:62:1d:85:ad:0a:fb:43:31:21:d4:92:05:98:2a:8e:b8:
5d:95:10:7e:d2:55:80:c4:0f:a9:4f:a2:88:3f:a6:74:ba:49:
0d:9a:34:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org