Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ea06542d-c1d2-3067-8648-472a74813d95.roa
File: ea06542d-c1d2-3067-8648-472a74813d95.roa (raw, json)
Hash identifier: fTlpcV4/vF9jVAOUusu9dQyNtdm8HCg84teYcKy5p44=
Subject key identifier: 1D:EE:36:E0:70:57:DF:6F:24:B8:7F:85:98:E3:2B:C2:BF:89:AB:E1
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A5E4B1AAF5AD0609CB81A0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ea06542d-c1d2-3067-8648-472a74813d95.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 108.170.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a5:e4:b1:aa:f5:ad:06:09:cb:81:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=d0be627a-dfe2-4bcd-b31a-d35c41097ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:20:97:2e:20:2c:23:54:ed:9f:3a:fd:00:
8d:06:6b:19:a2:e5:ea:e3:ff:e0:f8:8d:15:b7:95:
b7:af:14:28:24:50:8e:df:11:87:51:4f:e5:3a:15:
0a:1b:50:c0:37:77:b2:85:8e:3a:c3:d2:09:98:46:
bc:80:03:7d:f9:e8:bc:dc:b4:21:66:63:cf:1f:b3:
60:1d:e3:48:f7:df:46:a2:8d:a9:59:fa:08:aa:27:
3c:a2:0a:f9:03:8e:f3:80:d1:db:fc:2f:c7:c0:66:
f9:41:b5:ec:38:89:4c:bf:9c:56:41:fd:45:82:21:
fc:7f:af:e5:dc:52:ad:07:dd:2f:9f:18:7c:ac:d2:
76:3f:db:43:a5:b7:2a:03:fb:05:ac:c1:98:84:da:
5f:4c:7d:d3:f8:d5:40:2b:12:c2:a8:b7:d0:89:18:
27:c2:25:dd:5d:44:61:8e:11:bf:f3:c3:bb:db:dd:
0f:69:a0:68:fa:fd:ad:32:dc:69:eb:14:a2:73:ef:
cf:35:25:a8:98:39:cc:02:29:66:69:b2:82:55:a3:
47:7f:f2:59:8d:1c:7b:da:46:53:6e:a9:64:35:13:
5b:ec:26:67:8e:d1:0f:9e:97:66:8f:da:59:7b:7e:
0e:19:59:45:3c:66:51:57:11:25:70:0a:92:ca:d9:
e0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EE:36:E0:70:57:DF:6F:24:B8:7F:85:98:E3:2B:C2:BF:89:AB:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ea06542d-c1d2-3067-8648-472a74813d95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:6b:03:82:72:22:18:b8:e5:36:bb:61:00:23:94:f2:28:7f:
a5:57:5c:7a:98:84:03:a1:fd:ff:3f:c4:fb:b1:ca:53:5b:6b:
f9:3e:3e:fe:1a:0d:d0:cd:90:ad:ff:b6:60:39:a1:0e:69:d7:
3e:07:c8:e0:64:01:f8:f7:fe:6e:8c:d1:85:d1:30:a1:05:c3:
93:bf:f9:eb:07:2d:79:b1:ef:0d:48:9c:15:31:b9:05:36:93:
02:ea:83:b8:2e:47:d8:e0:52:e7:4b:c6:1b:81:e8:7e:9e:94:
c4:e1:3f:d7:af:4d:7f:23:e5:b4:c0:9a:65:74:6d:bc:9e:a9:
97:fc:be:31:84:7f:1f:d7:a3:29:93:42:b9:81:2d:5b:e7:18:
c4:b3:0a:77:8d:f0:ee:dd:61:03:39:a8:0b:88:e6:0c:a9:8d:
c0:4a:c1:f8:9b:61:1a:dd:33:76:c7:7a:d2:30:55:84:2d:cc:
b2:d9:02:9a:ea:6a:b1:6d:23:ab:0d:da:7f:f8:24:d4:ee:b4:
f2:1e:38:57:31:25:7a:45:b5:cd:24:eb:04:0d:90:e8:d4:86:
12:a0:67:2b:1d:ae:79:f9:06:84:1f:85:5e:4d:0e:48:1b:97:
91:3d:34:c4:45:19:65:c6:63:4d:78:31:ba:ea:87:67:71:f5:
dc:5e:c5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org