Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/618b91dc-ac0d-3f09-bc3e-41bd6569861b.roa
File: 618b91dc-ac0d-3f09-bc3e-41bd6569861b.roa (raw, json)
Hash identifier: zXigIp1UbI+J9z02rrXgOSgFV7saVXycvm5VWiWgGqw=
Subject key identifier: BF:F3:40:CE:EF:7D:BB:2F:A9:CF:C2:26:48:1D:58:6D:BD:F1:87:F4
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7C19C2C359CAE29D0BBEA80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/618b91dc-ac0d-3f09-bc3e-41bd6569861b.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.253.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c1:9c:2c:35:9c:ae:29:d0:bb:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=9981b864-2f18-4506-887e-cab5d5f43c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:30:d2:9c:ab:9a:c6:b6:e0:b9:ee:bf:26:83:
c8:e2:95:82:4e:dc:ac:a8:a0:ae:ab:89:9f:11:72:
b6:75:ed:da:09:8e:d0:3d:8d:09:9d:f1:5a:32:39:
2c:e2:18:7f:66:1c:d7:fd:8f:29:5f:10:22:b5:3a:
ef:51:1c:77:48:02:18:f1:45:a7:8e:7b:5a:49:d7:
dd:2a:af:93:c2:93:3d:e6:e7:7d:59:26:d3:3a:77:
1b:01:64:7a:72:25:d9:ee:3f:c3:11:a5:7c:fb:8a:
5f:9b:f8:f3:ef:d3:bf:56:d8:1c:61:80:68:a9:5d:
67:92:79:8d:15:6b:97:27:33:ce:4c:d4:52:fd:d8:
3f:c9:03:cb:cd:c9:71:a0:fb:67:a8:5b:33:f0:f5:
b6:7f:cc:47:c1:88:d5:4a:56:21:c2:27:39:83:16:
6e:c7:9b:b2:b1:eb:38:db:18:92:ea:85:19:d8:27:
f4:6d:fa:36:75:90:ce:65:99:e2:e3:20:6a:fa:f5:
be:e6:6a:fe:2e:36:f8:ca:d4:50:99:7b:ba:fc:c7:
a0:ff:16:55:8a:fa:08:b5:40:0a:90:a2:31:58:f7:
78:90:23:6f:b3:e2:e7:52:b2:ae:32:7e:25:79:ef:
99:b4:dd:08:c2:a8:36:31:7b:45:14:16:b9:cb:be:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F3:40:CE:EF:7D:BB:2F:A9:CF:C2:26:48:1D:58:6D:BD:F1:87:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/618b91dc-ac0d-3f09-bc3e-41bd6569861b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:66:4e:6c:8d:84:01:c1:06:1c:82:76:cc:9f:58:3b:7b:0d:
62:47:d8:8e:07:79:21:e9:18:f4:3f:d3:71:9d:3e:1f:50:45:
28:5b:10:30:85:03:0c:50:94:9b:a2:7b:20:71:60:98:db:89:
2e:6a:ab:df:79:f7:b9:76:37:89:6a:50:ad:ab:de:01:4b:94:
8a:6d:9a:56:a5:0b:36:ea:66:eb:12:45:68:72:e7:d1:fb:a4:
65:7a:77:08:1f:da:64:c4:69:60:89:3c:af:4d:b9:b7:0a:99:
1e:6f:d9:38:15:34:96:41:ba:e3:73:35:0e:b3:db:3f:40:30:
a4:54:24:9f:be:1d:ec:b1:0d:0d:68:74:73:af:b7:e7:36:94:
76:20:0d:ae:85:5f:11:9d:08:55:d8:b4:fa:5a:4d:80:08:5b:
b5:31:f0:3a:aa:3e:95:37:97:1e:91:30:94:8b:a4:c7:2c:64:
b6:00:71:78:7d:1a:0f:7d:8a:41:e2:c1:5d:6b:50:56:8e:5e:
f6:6c:67:87:4c:61:c6:26:66:bc:d8:20:9c:c7:f6:54:fa:d9:
57:29:42:b9:bf:c0:df:94:ef:62:2f:60:b7:72:1b:d0:70:63:
00:b3:94:ca:94:a3:bb:ef:e1:55:49:b5:68:f0:21:d9:7a:52:
d5:e6:92:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org