Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5b45850-73ee-33d6-93fb-74a55402aa58.roa
File: f5b45850-73ee-33d6-93fb-74a55402aa58.roa (raw, json)
Hash identifier: srKeiEUBgBYqVdruI7SqJnsueCjfXyUrZ7A/pmKc9Qg=
Subject key identifier: 1B:74:C8:54:D1:06:60:2F:83:92:27:1B:A9:6A:89:64:DD:26:E1:FD
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7BDAE663821712CB6A88CA0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5b45850-73ee-33d6-93fb-74a55402aa58.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 74.125.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bd:ae:66:38:21:71:2c:b6:a8:8c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=d254ffb3-f047-42f4-92aa-88cfe45ae96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f3:f9:3d:36:0f:de:f4:05:bd:c8:5b:a1:8b:
30:c0:95:8f:7c:d2:17:8b:10:08:5a:44:83:f9:6f:
f2:77:7a:1d:e6:82:75:2e:49:d8:b1:c7:4b:df:9f:
36:d4:fd:9f:7c:27:1b:c7:30:d3:a9:51:6a:fb:ce:
0c:a9:2a:66:70:3a:c8:fd:c2:12:12:bb:1e:eb:5d:
be:d2:f5:b5:cd:e2:dd:94:35:02:e9:21:34:ab:92:
ff:00:4b:71:cc:79:27:6c:9b:ef:36:5e:ff:07:ec:
1b:fa:cb:0a:24:08:b6:fa:fc:bb:06:05:8d:eb:3c:
89:47:44:39:00:c1:67:86:bc:2c:24:58:9e:d1:5f:
64:fb:cd:06:67:f1:8b:f7:0e:de:4e:e4:1d:3e:f4:
76:a4:23:63:b6:2a:08:29:d0:b1:f2:d9:a9:91:16:
7a:1d:d9:87:11:ca:1a:44:4b:b2:c9:c0:7a:98:15:
7b:c5:db:dc:38:2e:9c:ba:ed:86:a8:6f:00:57:23:
f8:3d:f2:2c:44:a6:ec:8c:98:97:76:e9:cf:5b:c2:
8a:7c:8f:6f:a3:c4:8f:3d:65:4a:8a:d5:e4:16:b4:
fb:43:b1:42:e1:2b:98:80:7b:02:d7:d0:cd:1b:0f:
27:82:60:55:54:02:f6:55:a3:90:76:37:fe:9d:44:
16:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:74:C8:54:D1:06:60:2F:83:92:27:1B:A9:6A:89:64:DD:26:E1:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5b45850-73ee-33d6-93fb-74a55402aa58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:a7:ff:87:70:71:82:5e:1a:ae:1d:3f:a2:a3:97:a3:cc:b9:
4c:97:d2:ab:bf:59:a7:f9:58:79:7d:61:77:2d:fd:4f:87:3e:
db:e1:9e:c7:00:91:3f:8c:f6:2e:97:b9:e6:d8:4c:a9:7b:cc:
87:ac:19:61:bc:b6:4b:6f:09:ac:a2:36:f3:81:96:d5:c4:27:
01:d1:b2:c3:ba:68:63:5a:92:f7:b4:bc:c2:22:63:aa:f3:30:
0f:2f:b7:b7:bd:d3:39:f7:ed:1d:b1:8d:0c:de:e5:28:ff:0c:
bc:2c:03:21:89:50:5d:5d:7b:d4:81:a7:8c:54:25:3e:4f:24:
01:ba:fb:a2:69:d2:12:11:6e:77:2d:ef:5a:7f:4c:d0:e2:a8:
3e:05:66:10:e3:e7:98:23:0a:03:af:08:19:dd:75:12:01:40:
b1:5a:10:df:d1:67:8c:4d:10:5f:32:8d:17:d6:aa:77:44:9d:
df:3e:e2:5e:34:9e:8b:32:83:d8:52:60:8f:9d:15:23:21:ac:
ed:c9:1b:6d:5b:fd:d8:b1:de:00:e9:7e:79:5f:74:60:4e:ae:
32:9e:91:b7:8d:83:12:9b:1d:35:45:f1:c1:ac:05:89:05:a3:
62:b9:64:12:f6:d3:bd:1e:ee:d6:90:5b:de:ea:56:b6:02:5a:
a3:f4:01:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org