Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cb5ab7f2-eb14-36b5-b628-9a8f1656aa7d.roa
File: cb5ab7f2-eb14-36b5-b628-9a8f1656aa7d.roa (raw, json)
Hash identifier: LU7ywunlvGGDLjKgIdTthMwlOBh//9TkGWTZM3WQsdc=
Subject key identifier: 36:67:32:5F:CD:48:2E:73:84:53:F5:41:28:36:7B:9D:40:61:97:5F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B8F5253B0A4D426A251AA0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cb5ab7f2-eb14-36b5-b628-9a8f1656aa7d.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b8:f5:25:3b:0a:4d:42:6a:25:1a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=54e37cfc-859c-4807-83ed-de243d397a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:21:01:34:50:bc:ba:82:56:4c:93:3d:5b:f0:
d5:a5:bb:53:5b:9f:84:f2:95:68:41:5f:13:dd:99:
c1:4d:b3:52:0f:b9:81:42:69:e6:e8:11:78:1e:fe:
29:e8:a9:f1:ae:70:31:32:16:e6:c0:25:43:3d:6f:
23:3b:44:d7:c9:83:e6:d9:44:e1:db:83:39:7b:d4:
6f:7a:e0:59:4d:c9:6f:14:6d:c5:4e:31:e8:fa:6d:
5b:5d:0d:2f:b8:41:df:a0:48:a1:35:8a:6c:da:d1:
3c:3a:12:72:03:49:f3:52:16:ef:04:ed:0c:d8:59:
f3:79:22:3c:b0:cc:3e:c6:f8:8f:14:d1:cf:8d:fb:
09:33:07:51:04:09:38:eb:f1:fb:19:58:94:2d:e5:
80:b0:9a:22:68:aa:89:27:1d:00:45:54:72:10:97:
cb:20:8d:9b:28:cb:80:c6:3f:44:d2:22:55:1e:20:
ee:9e:d0:97:92:3e:a7:22:c2:44:cf:ca:96:ca:48:
24:39:41:fc:f0:dc:3d:94:8e:54:ea:ce:b9:bf:5d:
27:ad:74:79:b3:84:59:cb:91:31:b4:e6:f8:75:60:
8a:05:b6:24:b1:08:6a:4b:1d:fe:aa:f8:30:53:22:
27:96:a4:13:cd:ba:16:c5:1f:97:f5:92:ad:79:a8:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:67:32:5F:CD:48:2E:73:84:53:F5:41:28:36:7B:9D:40:61:97:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cb5ab7f2-eb14-36b5-b628-9a8f1656aa7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:82:bb:f1:b7:7f:1e:83:09:91:af:3a:c1:f3:ae:6d:5a:1b:
40:65:d4:e1:ac:af:d0:3e:50:4b:bf:05:56:d2:73:c4:b6:a2:
db:9a:d5:fe:6c:b3:d9:a5:1b:b4:f1:7c:d3:12:7f:d2:a7:66:
13:f7:d4:fb:cb:fc:04:85:68:4f:fe:a9:c8:ba:26:77:d0:94:
25:f9:02:4c:71:bc:1e:46:7f:74:9a:ae:b1:e3:53:2b:69:f4:
90:88:c2:fa:3f:aa:b6:cd:06:b3:9e:cc:96:68:c2:3a:d8:3e:
de:8e:66:db:1a:86:44:c4:50:ca:fd:79:55:c6:bc:80:fe:15:
a1:66:78:7a:22:78:3f:66:42:38:b7:a7:8f:75:ed:84:62:25:
54:37:3e:bc:b3:7e:bc:9b:bb:ea:c2:8a:21:de:c4:bb:4c:82:
ec:e0:62:d6:e0:c8:26:cc:d7:79:e2:44:db:47:f0:12:71:3f:
94:38:78:32:fb:d8:fb:1b:0f:d6:f9:20:f1:7f:67:1a:c4:a9:
db:7f:1e:48:ea:e9:b0:ae:f0:71:0f:f9:b1:a6:c1:90:4c:0e:
2f:c4:c5:58:d3:d8:e5:05:c0:8d:87:c6:c1:a6:ad:78:96:e0:
53:1f:aa:6a:a0:43:92:a7:89:7c:bb:ab:6e:ca:72:dc:c9:55:
21:17:4e:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnuPUlOwpNQmolGqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NTRlMzdjZmMtODU5Yy00ODA3LTgzZWQtZGUyNDNkMzk3YTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSEBNFC8uoJWTJM9W/DVpbtTW5+E8pVoQV8T
3ZnBTbNSD7mBQmnm6BF4Hv4p6KnxrnAxMhbmwCVDPW8jO0TXyYPm2UTh24M5e9Rv
euBZTclvFG3FTjHo+m1bXQ0vuEHfoEihNYps2tE8OhJyA0nzUhbvBO0M2FnzeSI8
sMw+xviPFNHPjfsJMwdRBAk46/H7GViULeWAsJoiaKqJJx0ARVRyEJfLII2bKMuA
xj9E0iJVHiDuntCXkj6nIsJEz8qWykgkOUH88Nw9lI5U6s65v10nrXR5s4RZy5Ex
tOb4dWCKBbYksQhqSx3+qvgwUyInlqQTzboWxR+X9ZKteaj7NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDZnMl/NSC5zhFP1QSg2e51AYZdfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2I1YWI3ZjItZWIxNC0z
NmI1LWI2MjgtOWE4ZjE2NTZhYTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI2Cu/G3fx6DCZGvOsHzrm1aG0Bl1OGsr9A+UEu/BVbSc8S2otua1f5s
s9mlG7TxfNMSf9KnZhP31PvL/ASFaE/+qci6JnfQlCX5AkxxvB5Gf3SarrHjUytp
9JCIwvo/qrbNBrOezJZowjrYPt6OZtsahkTEUMr9eVXGvID+FaFmeHoieD9mQji3
p4917YRiJVQ3Pryzfrybu+rCiiHexLtMguzgYtbgyCbM13niRNtH8BJxP5Q4eDL7
2PsbD9b5IPF/ZxrEqdt/Hkjq6bCu8HEP+bGmwZBMDi/ExVjT2OUFwI2HxsGmrXiW
4FMfqmqgQ5KniXy7q27KctzJVSEXTo0=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org