Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fbc9410-db38-3b96-922f-465ca70ce4a9.roa
File: 7fbc9410-db38-3b96-922f-465ca70ce4a9.roa (raw, json)
Hash identifier: YeyLysjH9GLMPshptzCF/B3GyadiNzLu1/ioaoFVD5Y=
Subject key identifier: 9F:93:14:2D:2D:64:C9:D9:2A:73:9F:7F:89:8D:DD:00:4A:7A:37:BD
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B1CA79EE93178B2BFF26C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fbc9410-db38-3b96-922f-465ca70ce4a9.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b1:ca:79:ee:93:17:8b:2b:ff:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=28c4d674-12ee-40a4-b333-8437412f3f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:32:12:20:83:32:9f:bc:ef:d2:09:d9:4d:
0a:2d:25:b5:b3:b1:b2:ed:86:21:05:21:5d:d2:07:
c4:99:54:b6:9a:fd:81:36:3d:81:45:43:d1:b4:ff:
09:61:15:bb:bd:63:40:c0:47:01:a0:9a:a0:91:23:
a4:ca:a1:ee:c6:33:47:03:54:bd:9d:83:74:f0:31:
60:8c:80:0c:5c:4b:57:17:6c:25:f0:dc:ec:d4:ee:
47:7e:51:54:36:34:a2:71:64:5e:50:96:ec:75:ea:
40:e2:41:0f:42:f7:9f:45:69:5f:2e:14:36:ea:6e:
1a:5b:76:c6:7d:19:53:5e:30:65:23:44:7c:ef:79:
c0:1b:e4:cf:59:1a:a5:b3:50:59:c0:1c:c3:b5:78:
a0:f1:b7:f5:57:20:f1:c9:c6:9c:c7:16:90:f0:c8:
b4:c3:58:07:bd:28:07:d8:22:3c:01:ed:65:b7:c0:
48:dc:bc:7b:a9:15:f4:46:bd:8f:d4:cb:0d:4d:93:
f9:eb:cc:04:d5:24:89:bf:ab:e6:51:94:99:7a:8b:
9f:7a:41:7c:05:bc:04:34:de:66:b4:17:51:62:f2:
83:07:9e:60:ec:48:79:31:f9:7a:19:27:89:fa:d4:
51:e2:01:00:7b:e2:0d:85:f4:38:c4:08:e2:e8:44:
e4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:93:14:2D:2D:64:C9:D9:2A:73:9F:7F:89:8D:DD:00:4A:7A:37:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fbc9410-db38-3b96-922f-465ca70ce4a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:ed:e0:91:07:38:83:0c:7e:24:a9:d8:a0:3f:11:21:2d:c1:
f5:9e:6c:d7:f1:f8:f9:87:bd:0c:5b:14:8c:b2:fe:21:1b:ad:
6a:f5:43:55:3d:2b:2a:3e:3d:fd:87:93:e4:2e:83:28:6b:63:
9f:53:52:6d:92:25:6f:ea:b7:67:13:ae:4f:e2:ce:be:d7:3f:
b8:7a:7d:9c:b0:8d:10:ec:3e:47:8d:4a:31:c8:82:ea:e2:db:
2f:a7:f0:6c:9a:e3:cd:39:66:e4:21:a3:4a:94:7e:07:6d:d6:
1a:c4:17:ff:c6:17:f6:96:ac:9f:a5:fd:85:4a:a8:22:c2:83:
2c:e7:8d:37:13:80:ba:45:57:d0:a1:f6:9d:cf:9c:53:08:9e:
ae:2d:b6:26:c1:e4:cc:7f:aa:eb:9b:c3:c9:62:81:79:1d:e7:
e2:60:42:23:7a:14:70:e2:ea:27:75:92:39:d1:b2:bf:1c:b3:
85:34:bc:12:92:2f:6f:9f:bf:9f:7a:1b:60:f9:00:d0:ac:8e:
4e:80:a4:d6:0e:52:82:4a:71:76:66:14:6a:6e:78:f4:d9:c1:
a0:28:a1:f6:42:33:cd:f9:e0:c9:da:87:eb:d8:de:d3:e7:bf:
82:98:a2:59:c9:db:43:31:e1:e7:e3:b7:53:19:91:18:e7:5c:
8b:44:f9:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnscp57pMXiyv/JsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MjhjNGQ2NzQtMTJlZS00MGE0LWIzMzMtODQzNzQxMmYzZjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql8yEiCDMp+879IJ2U0KLSW1s7Gy7YYhBSFd
0gfEmVS2mv2BNj2BRUPRtP8JYRW7vWNAwEcBoJqgkSOkyqHuxjNHA1S9nYN08DFg
jIAMXEtXF2wl8Nzs1O5HflFUNjSicWReUJbsdepA4kEPQvefRWlfLhQ26m4aW3bG
fRlTXjBlI0R873nAG+TPWRqls1BZwBzDtXig8bf1VyDxycacxxaQ8Mi0w1gHvSgH
2CI8Ae1lt8BI3Lx7qRX0Rr2P1MsNTZP568wE1SSJv6vmUZSZeoufekF8BbwENN5m
tBdRYvKDB55g7Eh5Mfl6GSeJ+tRR4gEAe+INhfQ4xAji6ETknwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+TFC0tZMnZKnOff4mN3QBKeje9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2ZiYzk0MTAtZGIzOC0z
Yjk2LTkyMmYtNDY1Y2E3MGNlNGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHrt4JEHOIMMfiSp2KA/ESEtwfWebNfx+PmHvQxbFIyy/iEbrWr1Q1U9
Kyo+Pf2Hk+QugyhrY59TUm2SJW/qt2cTrk/izr7XP7h6fZywjRDsPkeNSjHIguri
2y+n8Gya4805ZuQho0qUfgdt1hrEF//GF/aWrJ+l/YVKqCLCgyznjTcTgLpFV9Ch
9p3PnFMInq4ttibB5Mx/quubw8ligXkd5+JgQiN6FHDi6id1kjnRsr8cs4U0vBKS
L2+fv596G2D5ANCsjk6ApNYOUoJKcXZmFGpuePTZwaAoofZCM8354Mnah+vY3tPn
v4KYolnJ20Mx4efjt1MZkRjnXItE+bQ=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org