Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99230aca-9edc-33c5-938e-504e46f8b5cd.roa
File: 99230aca-9edc-33c5-938e-504e46f8b5cd.roa (raw, json)
Hash identifier: cmSeaFvPyjw+WwrtseeX4gpxn3fIkxov9a+EaAulL0w=
Subject key identifier: 38:04:72:E7:FF:1A:8A:91:97:49:95:C5:17:1A:77:02:7A:BE:58:0F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B4478C849579EDA56249C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99230aca-9edc-33c5-938e-504e46f8b5cd.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b4:47:8c:84:95:79:ed:a5:62:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=6489010a-06d7-4fb9-be35-d0b184191023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:5b:a7:d2:54:c5:f6:f2:7a:29:c2:cc:2b:
ae:5a:c9:c1:82:e5:8f:c2:0c:2a:67:ce:80:ae:53:
1f:6c:3d:d8:92:9e:e6:f4:84:16:46:2d:7b:ed:82:
0b:3d:7a:60:08:10:bf:06:5a:4a:91:aa:d5:b2:22:
aa:7a:39:93:47:a0:94:9a:c0:7b:ac:78:0a:06:84:
ad:f8:f8:f1:28:e1:6e:78:b4:58:40:49:76:2a:cf:
13:cd:e5:fa:ee:0d:4c:7a:9d:c3:94:87:c8:3a:8f:
49:89:d2:75:6d:70:67:a1:ec:4f:e2:04:15:5c:f0:
09:5c:03:b9:a9:31:3a:dd:b5:37:31:c9:f4:a4:9e:
c3:1c:49:f4:86:02:b3:2d:6f:bc:af:6e:98:dd:3e:
52:61:40:66:6b:1c:b8:10:b3:86:88:77:af:6f:ac:
b1:a9:ef:9a:eb:22:e5:c0:69:a8:41:fa:f0:d8:77:
9f:60:09:f7:5d:58:61:0c:bb:e1:60:52:34:44:88:
9b:b9:a6:ee:6c:55:65:21:99:7b:2d:15:54:fa:96:
4b:f4:79:db:06:2c:9d:c9:20:fb:6b:8e:33:3f:74:
69:e6:e9:8a:29:9c:fe:61:18:e1:24:9f:fe:91:ec:
47:2d:87:06:95:0e:59:a4:ff:19:24:f8:be:e2:57:
7d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:04:72:E7:FF:1A:8A:91:97:49:95:C5:17:1A:77:02:7A:BE:58:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99230aca-9edc-33c5-938e-504e46f8b5cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:63:e3:9f:7c:49:2c:3a:a1:a0:7a:8b:14:af:d4:fa:1e:e0:
42:b8:dd:be:bb:81:0f:1c:b0:45:32:ca:bf:a7:63:dd:6a:19:
2b:7a:d2:90:f1:32:f0:36:c2:58:f9:eb:21:09:f9:4d:f1:39:
1e:c7:e1:cc:ef:6f:6f:77:bc:d3:f1:3c:2f:36:b4:77:d9:27:
da:40:49:0e:25:02:d0:86:af:90:97:e8:94:76:8e:91:7d:a7:
e4:a7:54:c3:24:f8:45:d7:de:67:c8:6c:ea:06:b9:e9:43:f4:
2b:d8:79:46:78:62:a4:28:a8:96:f3:bd:51:86:d2:0f:9b:f2:
a4:79:46:ff:12:9e:59:52:5d:62:cc:c9:ca:44:e9:f7:83:96:
7b:d7:c6:c6:ba:bc:14:db:1b:d4:85:c3:5b:ff:01:95:ae:5c:
f3:a3:58:f0:8f:e3:ec:d7:99:72:88:46:8d:af:c4:f4:26:b6:
b0:1c:ad:a1:0a:ff:87:21:42:91:36:0b:9c:b5:a9:76:2f:40:
51:fd:15:5c:1d:50:7d:5d:91:19:80:0c:b9:5f:41:64:72:95:
2d:2f:2c:1c:00:84:9c:f8:9c:8c:75:8d:83:43:55:13:0d:e4:
6c:09:ea:05:e9:65:64:0a:97:30:8e:b2:f9:aa:e6:e3:9c:3a:
49:1f:cd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:49 2023 by rpki-client on console-fra.rpki-client.org