Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6012f42a-4a44-3d9c-adef-9f56677c6bb9.roa
File: 6012f42a-4a44-3d9c-adef-9f56677c6bb9.roa (raw, json)
Hash identifier: EiMaG0f5A8Hec6bz4FHM+k+7Bu8LvmfmdQDorZ6x5Gc=
Subject key identifier: 66:C6:99:F0:BD:87:78:FE:B2:70:DB:38:46:BE:0E:FA:5A:41:8C:4E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B8367ED20ABEADECF93180
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6012f42a-4a44-3d9c-adef-9f56677c6bb9.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.253.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b8:36:7e:d2:0a:be:ad:ec:f9:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=aa7394bb-2258-4907-b231-26bb348ead55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b4:85:22:28:7e:58:e8:4d:a3:19:1b:08:ab:
e9:24:1d:fc:1d:ff:c6:1e:93:15:c7:ed:81:27:62:
9a:9e:e3:57:e4:45:8d:92:63:65:4a:31:25:41:cd:
e9:fb:bc:bc:11:d8:ab:95:75:7b:47:27:ae:ff:71:
fd:b4:d1:e0:fb:02:fb:1e:9e:b2:2c:ca:61:45:db:
df:63:98:11:76:a2:8d:86:13:8a:54:46:75:5b:3e:
f4:0a:a3:22:96:1e:8a:32:3f:da:48:36:2f:68:b2:
dd:c2:99:67:a4:ff:4c:01:11:8c:a1:8b:05:5c:bb:
a8:6f:05:4a:fb:db:53:1e:d7:fb:c5:bd:a5:ac:18:
0f:d4:49:16:d2:b8:8f:a6:ac:34:24:fc:d7:3f:f1:
e5:5e:43:97:a6:c7:de:7f:21:70:06:b1:58:65:6e:
76:66:2b:b6:c4:b5:d8:08:0e:2a:16:46:f4:1e:78:
16:81:89:d4:f8:34:2b:fa:48:eb:92:0b:98:af:73:
39:7b:f4:8e:b5:00:d9:36:33:56:b4:8c:00:4e:dc:
d8:9c:3b:3b:d6:15:fd:cc:aa:d0:d9:1c:c1:0e:d2:
83:8b:54:b8:be:38:b8:2a:86:d0:29:b3:30:e0:ef:
fc:c0:6e:67:3e:b3:0c:b4:1f:59:c4:6d:d4:7c:7d:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C6:99:F0:BD:87:78:FE:B2:70:DB:38:46:BE:0E:FA:5A:41:8C:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6012f42a-4a44-3d9c-adef-9f56677c6bb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:ca:2c:f4:57:c5:bc:d2:2b:7b:37:fc:bc:da:77:65:dd:a1:
b6:af:75:b7:bb:f5:b2:b2:99:00:17:a1:0c:81:10:68:80:91:
87:26:84:1b:3a:4a:78:40:d8:0b:47:3f:26:c0:b4:d2:01:1d:
ee:ee:67:5c:6a:c6:5c:78:40:e2:7b:87:78:e5:7e:3d:c5:54:
70:1b:e6:b5:54:72:bb:e2:db:f2:8e:f2:44:44:58:66:11:a4:
ba:71:97:c8:8b:d1:44:06:8d:94:f4:5a:e6:fa:f8:87:6e:fd:
8d:79:51:8b:d7:4e:a9:4a:a1:db:11:04:51:94:d1:92:99:6d:
59:7e:38:ca:8c:05:bc:ba:da:58:82:3d:44:86:23:23:8f:6e:
e0:72:73:a8:89:d4:ca:a9:2f:1c:0d:08:d6:60:21:a2:5a:df:
34:34:dd:48:d5:24:89:cf:8e:16:6c:c4:33:8a:c6:4e:5c:2d:
11:2b:19:14:de:b9:fd:18:d6:53:0a:aa:98:a0:76:e8:fa:73:
8e:b4:56:c1:3e:1e:7b:c1:3c:23:e2:37:0e:8e:80:15:2d:0d:
cd:25:bc:51:f2:a1:1d:48:41:8c:09:eb:59:cd:b8:0b:d1:a8:
70:67:ed:fe:08:19:8b:ab:14:ac:06:af:e2:c5:2e:c8:c1:0f:
46:3c:54:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org