Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a33ec39f-c12d-33f8-a56c-9e7a77a8df8b.roa
File: a33ec39f-c12d-33f8-a56c-9e7a77a8df8b.roa (raw, json)
Hash identifier: 1tL9ZhpneiG9kDUhR9sXTbyxWZy/vrT8d5LvQA6hQRs=
Subject key identifier: 54:9C:CE:F2:B7:37:76:BB:D6:A3:FC:76:8B:1C:4A:D7:9B:9E:6D:BA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7AF14120050D12916EA7A00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a33ec39f-c12d-33f8-a56c-9e7a77a8df8b.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 216.239.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:af:14:12:00:50:d1:29:16:ea:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=ef4650b6-463d-4297-b82f-0f7832db11a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:7f:59:d3:0f:fb:5e:07:e0:d1:6a:f3:91:
39:25:1c:81:a8:1e:9d:d9:40:dd:b5:bf:b4:a0:63:
0d:bf:0b:91:c5:7a:7e:26:3b:da:f5:36:b6:2c:cb:
3d:c0:91:0c:78:f1:da:e7:fb:aa:55:c5:95:54:6d:
95:ed:ea:0d:1a:34:b4:27:7a:c7:6a:f1:68:33:d6:
20:95:da:a0:f7:40:45:ea:c0:c2:9c:b5:4d:ee:a2:
cb:9e:5f:a5:ff:a6:6b:bb:c0:16:c7:c2:4d:2b:f2:
85:b4:4c:97:48:d0:94:db:23:e1:fd:1d:f1:c8:27:
d3:34:0a:7b:ca:a1:fc:49:7e:12:17:51:4b:b2:af:
fd:aa:26:86:ef:e7:71:04:2b:ec:8e:dd:6e:1f:29:
27:3f:27:66:49:75:02:45:e8:bd:cf:d7:5d:87:27:
c7:d5:69:5e:ba:c4:1e:b4:81:10:e6:95:7e:9f:cc:
96:37:12:dd:20:f7:ed:15:57:5d:c2:f8:db:0a:23:
64:ab:21:91:e4:86:a6:33:b0:35:4d:ca:3e:5b:66:
1b:92:68:d0:89:38:3b:58:65:6c:0b:ad:51:a5:6a:
0a:da:c2:2e:b2:ef:01:61:c1:ae:15:e3:d9:69:d2:
7c:bf:b9:5a:39:9d:0d:b3:d3:f2:49:e3:96:f1:cd:
a9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9C:CE:F2:B7:37:76:BB:D6:A3:FC:76:8B:1C:4A:D7:9B:9E:6D:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a33ec39f-c12d-33f8-a56c-9e7a77a8df8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.239.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:84:35:9c:88:66:67:44:4e:82:a6:88:0b:0e:8a:f2:ff:fe:
13:6c:87:0a:51:29:7d:00:3a:d2:cf:76:dc:12:af:74:65:55:
cf:df:9c:77:62:df:6c:4f:4f:1b:7b:cb:e0:f6:1e:af:0c:06:
91:75:cb:34:10:79:66:ac:0d:0c:74:0c:f4:a4:30:01:26:47:
41:8f:45:67:8e:6f:dd:d2:bc:31:e3:04:91:ca:cd:e1:7a:12:
d6:f4:43:fb:43:a9:1d:2c:47:4d:57:e9:40:07:77:f9:17:7f:
00:26:5a:73:71:59:a6:af:36:06:df:9e:65:70:73:0f:54:cc:
1f:28:ff:9b:a9:70:1e:8d:2a:2d:4c:20:0f:89:01:79:ce:cd:
00:83:77:4e:5f:cd:cc:21:79:d9:6c:d1:46:86:65:ca:4f:b7:
b1:97:cf:38:06:d5:a5:b6:38:1f:6e:90:1c:b5:66:6b:50:6b:
cb:79:f8:4a:89:1d:d2:a2:e7:bc:37:00:9b:9c:8a:9d:17:74:
a4:1e:fa:9b:65:7d:36:ee:d6:a5:db:9e:bd:4b:22:d2:8a:ce:
49:ee:33:f8:91:a3:d4:02:27:7a:54:0c:ec:7b:05:d9:03:2e:
68:db:3e:62:2b:27:7b:eb:b6:71:20:af:c3:f0:46:56:d0:29:
4a:76:8c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:49 2023 by rpki-client on console-fra.rpki-client.org