Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a3e3fab5-e782-3d5c-8a18-b399eb2b2923.roa
File: a3e3fab5-e782-3d5c-8a18-b399eb2b2923.roa (raw, json)
Hash identifier: aDbo78ft6yevNadMoW3PakzLvZCkKUbzuBZU5OASnx8=
Subject key identifier: 30:05:D0:4D:4B:0E:2E:3B:4E:3F:8B:DD:59:5E:49:E8:52:52:44:44
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A466BD4ECF0F6A5C018B00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a3e3fab5-e782-3d5c-8a18-b399eb2b2923.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 70.32.159.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a4:66:bd:4e:cf:0f:6a:5c:01:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=df4b1015-cd5c-4586-8722-e2a3846f689a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:03:a9:0d:2b:8a:f9:b7:1c:48:95:5a:a4:e2:
8a:9b:7e:c6:d1:40:64:fb:f0:50:46:6b:5d:9a:ee:
22:3c:78:b9:19:89:9c:ab:cb:cb:1d:f7:f6:9c:38:
50:54:b0:13:bf:d0:b2:ba:2e:f1:2d:5b:20:33:d0:
03:9c:bf:c7:90:de:81:a1:6e:ee:25:ab:c6:92:c4:
55:0a:d1:13:5d:45:50:bf:18:0f:86:cb:c6:f9:26:
26:f0:ef:66:de:1b:bb:8e:ca:10:38:4d:03:1b:dc:
85:4a:8f:36:43:24:c1:a7:76:44:56:6d:cb:ba:bf:
9d:99:fc:73:59:02:62:a0:e6:4e:1b:f1:16:4d:b4:
4d:db:ab:b8:50:55:ff:de:db:2d:b4:a0:f3:9a:17:
ae:de:ae:20:7a:80:61:70:c0:0d:95:d2:bd:0f:06:
ba:59:dd:f2:c2:4c:b8:a7:98:f1:5f:ac:c1:1e:45:
26:2c:51:ca:7b:12:fe:e9:a8:10:99:3c:dd:20:86:
d3:eb:71:33:72:46:77:64:94:ac:40:cd:b2:8f:a9:
58:d8:c2:87:07:71:65:5a:6d:3a:0e:3b:ea:5b:6b:
c8:92:36:1f:65:4c:c6:0f:cd:36:f8:58:79:99:33:
39:1b:4c:0f:45:2b:ca:8b:8b:dc:dd:fa:24:44:e5:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:05:D0:4D:4B:0E:2E:3B:4E:3F:8B:DD:59:5E:49:E8:52:52:44:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a3e3fab5-e782-3d5c-8a18-b399eb2b2923.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.159.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:8f:36:38:95:9f:c4:2d:f6:66:15:e9:d9:32:67:1f:d2:86:
c1:94:94:f1:81:b5:1b:0b:87:f8:7a:8b:1f:9c:78:18:a1:ac:
36:b0:b1:39:cc:f2:23:a9:59:f1:11:e4:ce:3c:83:17:ab:4f:
2e:a3:0d:4a:be:d4:cb:3b:39:3d:d1:c9:c3:ed:05:51:b2:d7:
00:76:df:bb:c6:bb:33:53:fd:08:1c:85:8b:4b:64:fd:c5:89:
7d:ca:e4:64:9e:e3:5f:d2:80:94:f4:e7:70:17:49:2b:25:67:
54:23:d7:b5:a9:90:4f:4c:00:b1:50:67:c4:99:bf:ec:5b:e1:
e0:33:ae:6a:f6:76:80:68:8b:a1:b5:86:b9:fa:07:66:15:ed:
e8:f0:aa:ac:bb:c0:2d:74:cd:01:ef:48:b9:87:47:66:07:03:
07:81:ee:88:0d:c6:a6:64:94:c0:b9:f0:74:3c:59:8c:80:a2:
be:a7:3c:ff:86:04:de:14:d0:3c:67:cd:7e:55:8c:3a:14:d6:
8d:cb:54:52:34:85:5a:1b:3d:fc:ac:ab:bb:72:00:0f:d3:3f:
5a:3c:1e:39:79:ba:f8:24:8f:24:22:42:78:63:b4:91:b0:64:
60:97:54:da:10:06:25:52:84:50:cd:f7:71:18:30:72:e2:2e:
9b:29:9c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:49 2023 by rpki-client on console-fra.rpki-client.org