Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab04453a-4947-357a-a174-c1be296ca04d.roa
File: ab04453a-4947-357a-a174-c1be296ca04d.roa (raw, json)
Hash identifier: C4v1W6EOoLTmF0D8hj/4eE7yBgMU1m/WKZvXLkLi6TI=
Subject key identifier: 3F:BD:09:6B:B1:A7:9A:32:EF:AD:D0:FC:56:F0:78:F5:02:BF:39:2C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A35B5C552A923770E8B040
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab04453a-4947-357a-a174-c1be296ca04d.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 108.177.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a3:5b:5c:55:2a:92:37:70:e8:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=603dbb94-a1d1-4367-9ea0-9c6a081c7274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:11:0c:1e:8c:24:66:3d:70:54:22:26:cc:
37:ce:f4:5e:ba:c1:24:6c:13:2a:a5:49:d6:5d:cc:
78:57:dc:55:b3:a4:82:b6:ea:e5:7b:91:7a:ea:88:
5d:b8:36:0e:cf:e8:2e:b8:bd:0e:f8:70:cd:9e:58:
ba:1e:88:63:a9:d1:76:44:63:52:76:5c:90:ae:50:
50:1f:e9:be:24:ea:41:62:b6:27:da:56:59:4d:67:
78:56:e3:99:57:b7:45:de:47:79:c0:d7:63:58:f9:
1a:ca:4c:7a:03:4e:ff:ec:86:bc:f0:6c:66:0c:6c:
15:ad:cb:e1:83:f3:a9:1c:3e:a6:6d:55:29:34:75:
0e:52:9e:69:88:4a:15:3e:84:7d:16:b4:a0:ae:55:
f0:a7:67:d5:be:09:cc:88:5d:ca:83:90:e7:4d:ec:
4d:9b:90:bf:47:03:f0:8d:94:5c:8c:2d:f8:d2:de:
71:35:54:b9:73:9e:6f:6c:0a:23:1b:43:c4:5b:56:
70:6b:77:6c:3f:8d:96:61:7b:28:59:a5:d4:89:25:
e7:8c:ac:eb:e2:ff:fc:68:13:15:28:bc:06:de:af:
e9:0e:c8:1d:5d:b6:25:aa:fd:a8:61:b4:76:92:df:
3a:df:77:d1:66:56:fb:44:fd:4a:67:04:e7:b9:c9:
90:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BD:09:6B:B1:A7:9A:32:EF:AD:D0:FC:56:F0:78:F5:02:BF:39:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab04453a-4947-357a-a174-c1be296ca04d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:49:ba:33:3c:bc:9f:c9:85:ff:68:ee:90:95:92:c7:19:9a:
81:1d:d3:5e:f7:9d:13:1f:6c:79:7e:61:8b:f5:97:cc:39:28:
f5:fa:f7:1a:99:9a:39:41:1e:f8:2f:1c:5f:c5:7f:5e:90:4f:
5a:e3:3d:e6:85:bf:b5:55:20:ee:46:7e:09:6e:f1:f9:66:7b:
56:78:aa:d4:c6:fb:34:16:5e:74:8d:a2:20:07:7f:bf:f0:ea:
15:16:2e:59:c0:92:28:6b:2e:fd:56:59:85:9e:f2:1d:59:f4:
4f:21:ed:15:fe:9b:64:ca:8a:c5:0e:7f:51:56:02:64:eb:16:
c3:ae:b2:2c:12:2e:91:1c:75:96:a5:22:51:46:7d:e1:81:35:
e8:81:53:f5:ea:24:a2:28:3c:be:af:8a:72:d9:39:ec:b3:17:
60:45:76:a8:64:1f:bb:97:b3:d4:f2:2a:91:51:e9:1c:bd:95:
e3:59:d4:77:d2:a7:20:77:a6:c9:7a:3d:42:99:23:c8:3b:a8:
6b:5f:6c:b5:2c:98:0a:2b:a7:6d:c2:7a:e8:b8:e4:c6:f0:3b:
47:5d:04:eb:d8:b7:50:5e:05:62:4f:44:3f:88:84:cd:ba:b2:
b1:c3:53:95:20:39:30:1a:c3:58:ba:36:e8:ff:20:b8:0b:55:
f7:06:9b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org