Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/528c44c1-6260-387c-8cb6-c35a0d2982eb.roa
File: 528c44c1-6260-387c-8cb6-c35a0d2982eb.roa (raw, json)
Hash identifier: OukUmXgNq0euuCQLrjSX0DODX1Xvajz52FQxCq5TzbE=
Subject key identifier: 8D:11:2A:E8:42:36:CC:F5:B3:90:41:66:52:2D:B2:26:E0:10:41:A6
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A4A658E777DB7387123AC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/528c44c1-6260-387c-8cb6-c35a0d2982eb.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 74.125.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a4:a6:58:e7:77:db:73:87:12:3a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=39e58a5a-bd1e-4409-8744-08800a1ed4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:c4:9c:93:15:06:8e:5d:b5:03:f7:33:15:
b6:2a:28:2d:ff:44:66:c6:50:92:d1:b1:30:cd:dd:
81:11:a9:b3:df:83:8f:f1:48:3c:41:90:cc:95:dc:
bf:ed:5c:96:2b:84:f4:e5:97:03:dd:ee:ca:9b:96:
79:3b:81:ed:dd:90:13:f4:8c:57:09:31:08:99:de:
88:00:45:f9:82:8c:cb:bf:75:a3:1d:c2:41:ea:ec:
20:f8:eb:74:4a:d6:0e:2c:4b:0f:c7:65:20:7f:ac:
a8:3e:57:10:22:51:49:80:a6:f2:15:e4:5e:e6:00:
84:8a:fd:c8:2a:7f:29:4b:47:cc:1e:83:1d:f6:50:
85:f0:63:c9:cf:2f:d2:fd:3e:65:c2:03:99:16:fc:
2a:46:32:fe:4a:5d:49:c6:c6:85:e7:d7:bf:9b:52:
d3:68:f5:58:c0:22:a4:7a:d9:af:c5:d1:5b:c4:eb:
5e:55:25:40:5e:c7:e8:a1:b6:3c:1c:4f:c4:0c:e1:
7b:9b:ba:10:f9:ea:58:cb:79:00:80:e1:6e:4f:a6:
6b:f3:9b:db:71:24:1e:d8:64:95:f5:87:c0:43:94:
9c:4c:a9:24:d5:88:73:18:52:e3:00:8e:d3:09:47:
4f:e8:0b:20:76:3d:74:63:d7:47:02:5a:a6:da:fc:
5e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:11:2A:E8:42:36:CC:F5:B3:90:41:66:52:2D:B2:26:E0:10:41:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/528c44c1-6260-387c-8cb6-c35a0d2982eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:82:9a:97:8e:7a:4c:60:f4:75:7f:2d:0c:b8:c2:36:ce:7e:
1e:91:17:7c:eb:73:b8:d9:9f:6f:13:18:4d:40:c9:11:69:87:
23:8f:2c:79:6e:81:1c:44:c9:f1:78:d2:65:63:b4:ea:6f:b0:
75:b6:c6:be:29:46:33:07:ec:9d:50:25:4b:8e:36:05:08:a2:
a3:45:ce:8c:8d:1e:ea:da:8e:87:d3:e6:9c:8b:0a:9b:b8:06:
c3:05:5c:a8:14:22:20:d8:77:86:d6:31:bb:9d:cc:a7:e8:45:
76:73:34:03:1c:38:d5:8d:86:54:f6:e1:3f:bc:63:3d:92:30:
0e:ec:35:e5:dc:27:81:90:df:dc:cc:73:14:ae:79:da:57:18:
32:12:70:24:67:7b:5b:d7:1e:6d:af:68:d6:0a:5f:d5:e6:08:
cf:c3:7d:85:fe:50:75:a7:5f:79:fb:68:5d:e8:a6:07:08:dc:
8e:68:43:60:1c:51:f2:ec:8b:58:62:99:e0:87:d0:46:30:67:
e2:fa:7d:e4:70:b8:03:46:9e:51:75:1a:32:f6:11:cf:83:24:
bc:94:04:2f:36:3d:70:22:51:38:4f:76:e9:46:b4:ad:fc:30:
6f:49:2c:0c:56:bc:8f:57:91:6d:6a:5e:c2:de:d4:94:5b:07:
e3:0f:be:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org