Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/636e8b1d-2994-3dd1-a7f0-8e5b557c96f2.roa
File: 636e8b1d-2994-3dd1-a7f0-8e5b557c96f2.roa (raw, json)
Hash identifier: uCAqqUB4EbojuKGjLfC3OIKCgA1R1xuMkBuze4rac28=
Subject key identifier: 23:97:2D:0C:CD:0E:E0:B0:A0:D5:41:D1:95:B1:33:BE:55:38:8E:AC
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B9E0B6BE555A0C55634F00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/636e8b1d-2994-3dd1-a7f0-8e5b557c96f2.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 216.58.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b9:e0:b6:be:55:5a:0c:55:63:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=65c4a735-7d57-41f2-a77c-b2ad4291e6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:ab:35:d5:9d:16:e2:65:d9:ce:2b:1a:bd:
47:35:86:a9:e7:d7:b5:a9:a2:2b:ba:a2:7b:a8:0a:
ba:d8:6d:6e:ab:e6:62:e3:00:14:6f:a1:de:48:0e:
4a:c0:37:ea:ef:71:f5:a5:c8:be:6a:06:52:25:d2:
0f:0a:16:56:9a:5a:4b:69:cd:4a:5e:df:7b:5c:8d:
16:1e:7e:7a:36:e0:91:a0:9f:06:95:4b:9b:d6:5e:
56:13:7c:4e:33:49:94:c9:f7:8a:b0:48:92:8f:4e:
d1:8b:82:a5:e0:6e:2d:f5:e5:d5:67:70:79:2e:9d:
cb:1f:06:8e:31:56:76:cb:df:e2:2b:a2:a6:7d:ce:
d8:07:65:ed:7c:ae:65:57:e3:20:d5:34:05:b5:f3:
10:c9:fe:22:df:f1:06:db:e4:13:93:0f:c1:91:25:
cc:58:1b:bb:e5:ff:7e:4b:72:a5:dc:ab:58:6e:d7:
43:1b:5f:cd:a8:f7:53:0d:2c:7f:dd:2c:89:ef:e6:
02:7d:5d:6d:d9:3d:a5:60:83:73:19:18:2c:78:d0:
79:67:19:b6:60:cd:d4:45:27:01:54:c4:a8:dd:2e:
d8:2a:04:46:33:b0:7b:4c:5e:86:2b:52:23:63:8d:
b4:ff:20:25:a3:fe:93:6e:66:0e:ec:76:7b:6b:fc:
ff:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:97:2D:0C:CD:0E:E0:B0:A0:D5:41:D1:95:B1:33:BE:55:38:8E:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/636e8b1d-2994-3dd1-a7f0-8e5b557c96f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.58.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:b2:4c:61:25:14:47:60:d3:ea:23:c3:aa:10:f4:aa:7a:42:
b2:69:f8:6e:03:c5:2d:76:77:9d:74:cc:13:aa:c5:53:48:83:
44:64:2e:a3:85:47:8a:1d:a1:1d:a9:2f:e2:8b:6d:e8:f0:16:
6b:14:55:5a:82:e7:e0:e5:f8:10:a3:bf:ea:50:f0:57:29:e8:
13:05:39:fa:bc:27:7c:c6:74:84:1c:78:55:c4:39:47:ed:94:
bb:71:84:59:28:c3:cc:21:11:98:52:78:f7:3c:95:d4:d4:b8:
f0:54:f4:87:87:1e:ce:1a:e1:b6:da:85:18:4e:02:06:cb:83:
4a:32:16:4f:8c:13:44:b6:a3:95:96:1f:34:b6:77:36:49:a7:
72:95:92:71:5e:7d:6c:e8:85:ed:49:de:56:70:24:ed:dc:ef:
54:dc:90:db:16:93:18:2d:4f:8e:d9:93:ce:0e:53:63:68:44:
23:1f:ba:e2:36:6b:a0:9a:30:d9:52:5a:c3:88:90:20:70:94:
7f:3b:a2:8c:d7:f1:3d:3e:24:e1:23:66:ae:6b:30:07:3c:62:
01:fc:c7:f2:80:0c:62:08:2c:ce:65:ac:9e:da:7d:7f:ab:05:
91:79:fd:b8:77:90:f8:eb:77:5b:9d:55:09:96:55:0a:d9:7b:
ea:9b:66:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org