Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8347f3b2-bcad-352e-8d99-4bc710fef8b7.roa
File: 8347f3b2-bcad-352e-8d99-4bc710fef8b7.roa (raw, json)
Hash identifier: 4gscOyNeDlSZRkYlSB37XanZ7nH2QqsdQnkf/5rfF1A=
Subject key identifier: C8:3F:E9:F6:73:36:8B:2E:8F:F8:A2:9F:82:62:6C:0E:71:CA:D8:FF
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B30F7F6443D465D06B1188
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8347f3b2-bcad-352e-8d99-4bc710fef8b7.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 108.170.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b3:0f:7f:64:43:d4:65:d0:6b:11:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=901c1706-2997-484b-ab69-422430629a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2e:3a:7f:ad:35:e0:ce:5c:02:6c:1e:53:57:
f0:cc:d0:a4:28:24:00:12:dd:48:60:39:96:d8:59:
92:ad:72:0c:db:d7:36:7c:9d:d0:76:8b:a3:98:1e:
09:83:ae:68:2e:3b:40:21:58:2b:e2:e1:50:a7:f8:
b9:ee:3e:e0:d1:bb:57:2a:76:90:75:7d:04:3a:9b:
50:15:e4:29:18:a9:0a:71:c0:70:1c:7e:1f:15:17:
e9:b5:b1:c7:50:c2:12:cb:00:ec:cf:a9:46:6e:9e:
9f:15:04:dc:a7:7e:33:90:5e:5e:20:1c:84:e1:73:
e5:09:b2:82:c4:7c:4e:85:e8:05:2d:b6:e4:a7:ff:
c9:42:67:27:fe:e0:5a:b1:cd:ee:7d:82:b6:12:2d:
04:08:44:84:f1:33:30:34:85:21:f9:64:6b:33:d6:
ec:8b:32:28:f0:00:1d:dd:b0:d8:86:37:5f:83:0e:
81:7c:88:52:a0:5d:21:6a:6f:9f:9f:ac:10:83:be:
aa:03:39:a2:df:b2:a6:ab:a3:a8:0b:98:5e:98:01:
13:71:0f:6f:be:ec:4c:c8:7f:67:5b:3b:dc:72:27:
a1:68:8c:59:21:b6:c1:77:a3:6d:6d:ae:b8:5f:1e:
76:4a:53:6f:c2:9d:83:f2:1b:57:26:7b:a0:da:aa:
3e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3F:E9:F6:73:36:8B:2E:8F:F8:A2:9F:82:62:6C:0E:71:CA:D8:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8347f3b2-bcad-352e-8d99-4bc710fef8b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:0a:94:64:9b:2c:1d:f0:84:15:66:c7:e6:3f:c4:18:80:a2:
18:56:e3:ac:a1:5b:8b:c9:35:7f:ad:d8:75:bc:7c:5d:bb:f4:
c9:8c:68:82:18:28:22:61:6d:eb:c9:86:27:b2:c2:ab:e9:22:
0d:92:4a:e7:8e:a5:9b:f8:05:a2:7f:3a:52:9e:58:d6:e8:e2:
1f:84:33:95:8d:0c:d5:0f:62:2e:51:43:d5:10:6c:cc:12:85:
d7:78:02:5c:b6:92:cf:17:4e:20:3d:11:d1:56:0a:17:13:80:
68:54:94:7c:5e:c2:9f:d0:a8:12:78:15:0e:52:8b:b7:ea:a7:
65:14:1f:d9:ab:85:61:2d:1b:39:fc:f1:f3:c2:33:47:0a:36:
de:82:f9:04:04:78:e3:b2:a3:1b:52:a2:33:e3:fc:50:16:74:
f1:fb:92:6f:08:ae:c6:71:00:07:25:aa:26:78:0b:86:01:da:
c6:d8:42:40:06:c9:c2:0f:ac:14:63:f9:61:3d:a2:f5:03:4b:
61:ca:6a:f3:70:32:d3:d6:a0:a4:4a:a6:47:f3:83:30:1b:84:
68:74:71:bf:4d:3b:28:93:3b:27:6c:6f:b5:af:12:14:9c:33:
6d:47:60:3e:56:23:2f:ce:3f:e4:33:ef:81:80:16:71:96:2d:
5d:1b:df:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org