Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4bcc0bdc-05d7-35cc-9c08-64e763621626.roa
File: 4bcc0bdc-05d7-35cc-9c08-64e763621626.roa (raw, json)
Hash identifier: +MSErejJ2/tJB6XxR5y112hAUyixN49Jxx/MK3GIFr0=
Subject key identifier: 15:D6:78:DE:C0:5B:79:21:B2:E3:0B:A8:3D:B9:8F:E1:22:61:D3:46
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B592F126C76B3D1FEA8020
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4bcc0bdc-05d7-35cc-9c08-64e763621626.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b5:92:f1:26:c7:6b:3d:1f:ea:80:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c233fc44-fc57-4566-9509-685b87950b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:57:32:68:fa:04:81:4c:fa:4e:08:9f:a7:7a:
b2:78:6c:3a:02:1d:17:60:31:15:fb:63:a9:6e:55:
86:ce:15:5d:49:fd:49:b9:e1:de:5b:66:0e:b3:2d:
d8:53:6e:ad:17:36:cc:91:98:02:3d:d2:0a:f8:5b:
d2:9c:24:3e:e3:7b:ae:dc:d2:4b:51:0f:af:34:8f:
b3:68:72:8a:de:53:83:f0:19:e5:0a:63:72:07:51:
80:32:df:d1:31:e5:60:2f:f8:ed:c8:12:4d:66:03:
0b:e1:46:9b:7d:cd:83:ad:ca:1b:fb:fa:70:e7:a0:
aa:f2:80:52:be:94:34:5a:fb:30:39:a9:97:bd:77:
e5:7a:0d:e6:5f:9a:8e:f8:05:10:f2:a6:75:48:8f:
8e:85:f3:eb:98:73:fa:0b:ae:b0:18:a8:56:8f:c0:
40:98:09:0d:38:c6:a1:ea:93:97:3f:28:df:b1:5a:
44:84:7b:a0:58:af:4c:9c:d5:22:2e:6a:fd:88:70:
e6:4c:e8:13:ed:29:23:c0:7c:a4:13:f7:c1:f5:d2:
72:db:c5:e2:d7:ac:40:df:a9:fe:17:ad:38:16:7d:
26:fb:7c:09:84:62:4d:16:4a:40:71:b7:52:dc:07:
8c:11:13:10:06:d0:60:cc:0f:07:f7:a8:02:c7:e7:
24:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D6:78:DE:C0:5B:79:21:B2:E3:0B:A8:3D:B9:8F:E1:22:61:D3:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4bcc0bdc-05d7-35cc-9c08-64e763621626.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:3b:31:8e:a8:6c:15:76:5c:6e:8f:76:dd:ca:9b:d1:37:9e:
1a:58:ed:82:22:f7:57:9f:a6:3b:05:a0:03:e5:82:a6:23:85:
b5:af:8d:e6:28:38:e2:03:08:92:af:e4:15:46:60:ea:29:51:
d0:a4:8c:2d:33:e1:4b:94:98:89:68:1f:ab:47:c7:ab:6a:b1:
5c:ee:c6:a2:e6:f7:9c:c6:41:88:f3:60:61:8a:0c:b4:d3:9c:
53:0c:49:33:7c:61:dc:35:97:96:9b:92:52:3c:9b:a1:16:58:
16:31:58:aa:b0:2d:27:89:4e:0c:8d:fc:1c:36:be:06:93:b9:
54:dd:76:03:f0:67:1e:84:b5:c7:30:23:4d:b3:d2:18:a8:bd:
76:c3:a5:0a:a5:cb:52:8a:de:6b:63:36:30:f0:a2:84:ed:22:
e4:4f:ad:8c:b7:84:e0:d2:c3:d9:01:bf:33:ce:47:5f:b2:01:
42:8d:06:81:8f:ba:fa:0e:89:a8:3c:51:5f:08:69:98:1e:54:
e0:92:ac:cd:22:94:dd:4e:4d:88:59:4c:60:fe:2c:c9:c7:d6:
2f:18:bf:be:b4:9d:83:38:3b:5b:fd:80:19:c5:74:b4:70:ef:
d3:61:4c:25:93:57:49:e9:6c:1c:73:5e:01:38:b0:5f:47:8d:
b3:0d:c1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org