Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6373e700-397c-360f-b4e9-b4c6a1cc104a.roa
File: 6373e700-397c-360f-b4e9-b4c6a1cc104a.roa (raw, json)
Hash identifier: 5BsY/+jFO/ydXCThBuAGaALujbpbY/G4GpclCQ0/kVo=
Subject key identifier: EE:0D:90:2C:21:DC:64:8B:6C:22:F2:84:F5:81:72:BF:C8:AA:AD:C7
Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
Certificate serial: 010D0C9F4328576D51CC73C042CFC173BB13C1A0
Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6373e700-397c-360f-b4e9-b4c6a1cc104a.roa
Signing time: Tue 04 Aug 2020 20:05:00 +0000
ROA not before: Sun 08 Mar 2020 05:00:00 +0000
ROA not after: Mon 07 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 170.10.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:bb:13:c1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
Validity
Not Before: Mar 8 05:00:00 2020 GMT
Not After : Nov 7 05:00:00 2022 GMT
Subject: CN=bbf1e299-a418-4783-b28b-9df3fd332cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:d6:a7:d9:5c:84:53:75:11:52:07:b1:04:
f2:9b:b3:15:e7:02:ca:3d:35:4e:d0:3c:8c:fb:94:
01:79:c0:8c:02:b6:b1:23:de:17:a7:f6:bc:eb:15:
7e:8f:f1:e9:ad:66:a4:e3:6d:49:2d:a0:94:f6:3a:
3b:70:d7:15:66:d7:34:38:00:3a:95:37:43:ec:59:
e6:b8:77:d7:5d:a0:fc:06:f9:78:99:a9:67:f1:5f:
76:c3:2f:20:21:08:d0:92:a7:8d:ef:38:0e:64:5b:
ac:3c:05:fc:69:b5:dc:85:b6:69:07:b8:36:4d:b3:
59:e4:01:c8:c2:47:ff:00:51:7e:e2:fb:11:1d:97:
91:ae:71:e0:96:44:7b:2f:37:7d:2a:98:ef:96:ca:
b2:59:13:0e:7d:4e:16:47:0c:2e:66:b6:64:db:53:
51:f2:5f:b2:fe:37:47:8f:5c:26:3f:80:5f:4b:dc:
6f:79:da:af:ad:c7:e4:79:eb:ca:9c:1f:3f:4b:71:
7f:e5:c2:50:aa:51:7a:46:11:9c:3b:80:76:88:a8:
79:53:c8:db:60:b2:53:16:6e:6e:4f:30:f5:53:96:
94:51:0c:54:f8:9e:36:ce:13:5d:df:da:9b:d4:ec:
7a:4a:86:eb:3f:6f:e9:49:bb:1c:57:d6:52:bd:86:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0D:90:2C:21:DC:64:8B:6C:22:F2:84:F5:81:72:BF:C8:AA:AD:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6373e700-397c-360f-b4e9-b4c6a1cc104a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl
X509v3 Authority Key Identifier:
keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
sbgp-ipAddrBlock: critical
IPv4:
170.10.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:c6:b6:1b:9e:72:65:1d:a4:0d:ab:c3:7b:a0:47:32:33:63:
32:b8:c0:bf:ae:ac:ca:7e:d0:82:c9:06:d1:b7:6f:e1:c4:55:
de:bc:a4:ef:28:26:69:80:84:ec:c9:02:76:59:3b:56:ae:1d:
df:1c:81:25:a5:22:0b:e1:8f:e6:4c:9a:0b:7c:37:b7:8a:b5:
4d:ea:ac:1a:4f:af:23:ba:42:89:26:b2:92:47:ae:ab:bf:39:
ad:0a:62:cd:19:f9:bc:e7:c6:40:e5:6f:e1:cd:15:b9:20:71:
a2:5e:8a:f6:82:cc:88:81:76:3a:96:0e:31:f9:e3:25:9f:74:
28:7f:f0:86:45:0d:d2:44:2a:0b:d9:39:fe:62:77:ee:48:5b:
4d:0f:9c:0f:3d:ac:ec:0b:86:78:77:fb:7c:4d:36:02:27:29:
1a:f9:2c:c3:68:80:e0:d5:e3:7e:ff:fd:73:74:ac:5f:a6:28:
18:38:11:27:76:f4:fa:61:a4:ba:cb:c3:ad:b2:da:6b:7d:d4:
8e:e7:78:ab:f5:ec:ba:00:64:8c:c2:cc:4f:e7:12:ef:c0:09:
38:50:60:0a:0a:70:4f:d1:77:c8:2d:b1:67:5d:9b:04:20:24:
e6:2d:3c:4f:5d:a8:fd:f7:73:31:14:be:fd:27:cd:8c:af:8a:
44:fd:dc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:26 2023 by rpki-client on console-ams.rpki-client.org