Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c813515e-f097-35ba-a02f-44bbfb9b4be1.roa
File: c813515e-f097-35ba-a02f-44bbfb9b4be1.roa (raw, json)
Hash identifier: MYCA0/yEBbDCBXJMKIPRtwnVfNWh29ysHnTJmkQfavE=
Subject key identifier: 4E:13:2A:06:60:C7:EF:0A:A3:5A:06:09:4E:A0:39:C6:95:A7:F0:C8
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B382265FB4F7AE03A08270
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c813515e-f097-35ba-a02f-44bbfb9b4be1.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 108.177.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b3:82:26:5f:b4:f7:ae:03:a0:82:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=83850f88-c41b-4aba-bd2c-9f58074ca4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a1:9f:0b:ee:5c:23:84:30:bc:32:c6:cc:79:
5e:00:7d:09:d1:8b:dd:37:bd:9b:3d:a8:16:21:0b:
95:94:33:6e:e1:e8:a8:3f:dc:86:8f:8d:24:ec:bd:
00:47:61:a9:01:11:e9:6e:34:5e:a2:fb:3e:57:1b:
a8:9a:70:68:e3:fb:41:c1:f9:25:98:42:51:e4:36:
03:b6:7c:08:fb:bd:42:37:31:d1:9a:fd:a3:9f:9b:
83:07:69:05:00:a3:a8:b4:e4:7a:03:ff:7e:8e:63:
73:1d:ec:dc:01:0e:2f:73:28:d4:78:6e:b5:69:23:
85:8e:5e:4a:b7:a7:bd:6b:12:13:0b:58:d1:b0:26:
de:e2:2c:d9:37:70:60:c4:ff:a8:7f:e9:c4:c4:1f:
5c:83:59:56:00:74:b9:5f:f4:1d:8a:c4:1f:6f:f9:
45:a0:bd:43:06:cb:f3:64:bf:10:b5:1f:e6:98:3e:
f8:60:93:33:f4:e2:a4:ac:31:7f:68:7e:3b:6f:94:
17:ae:21:8f:19:65:9a:f1:b6:15:9a:cb:c8:d2:3d:
37:c7:bd:41:f6:b7:bf:29:40:0f:e1:93:df:2f:60:
72:48:c8:f3:1a:d2:89:eb:7c:9d:f4:e9:da:ed:22:
4e:e7:8c:fa:01:2b:87:08:1d:52:2e:72:f6:a4:82:
ec:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:13:2A:06:60:C7:EF:0A:A3:5A:06:09:4E:A0:39:C6:95:A7:F0:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c813515e-f097-35ba-a02f-44bbfb9b4be1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:49:cb:46:93:d5:60:28:6d:a7:6d:c1:ee:a0:6e:a3:15:73:
9d:61:b2:ff:34:a9:7b:8c:05:54:29:72:55:e3:f0:27:cf:85:
db:68:89:fc:40:cf:c1:1f:47:68:53:38:6a:e4:de:21:7a:fc:
41:26:8c:40:aa:79:fb:62:1d:f7:d3:ca:45:a3:78:6c:10:22:
a3:7a:b5:a9:ea:c5:cb:4b:a5:f6:69:e6:d0:e8:a3:fa:c3:2b:
5b:71:5e:78:0a:6b:f4:db:b9:d2:de:24:90:09:29:4a:f1:3a:
62:48:0e:7a:2c:96:b9:47:1f:c3:b7:cc:f6:88:9a:86:63:65:
9b:03:9b:47:d4:e0:69:00:21:fd:e1:6b:ee:4b:41:ca:3e:f0:
7e:c9:6c:24:8c:0f:cd:b9:95:09:f6:54:52:b5:d8:43:31:dc:
6e:33:25:cd:40:ac:48:3d:66:16:36:d6:83:97:eb:41:fc:7a:
64:75:78:8f:98:21:a4:da:7c:e4:76:32:40:a6:ce:f2:eb:a2:
dc:3d:71:79:ba:f8:f1:19:ac:b5:1e:a8:67:6c:a2:3c:a1:9d:
03:f9:c6:4a:8e:5e:1e:44:d0:c6:24:19:3d:12:a0:d6:79:b0:
9f:2d:57:40:9d:91:d3:f9:70:e1:a4:56:4b:0d:94:be:ec:45:
86:c6:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org