Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/31429fb5-1581-3b9a-909d-e7b5ea7428ff.roa
File: 31429fb5-1581-3b9a-909d-e7b5ea7428ff.roa (raw, json)
Hash identifier: 65TWFKgZ5LjzuHLT6GkfUH+4lFr5yXlWFeauuN8qH2A=
Subject key identifier: 4A:89:79:0E:20:D6:32:0B:2C:17:63:E4:A8:6F:FA:1C:84:AF:3D:06
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7AC6A45B0672BE2BC0DDEC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/31429fb5-1581-3b9a-909d-e7b5ea7428ff.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ac:6a:45:b0:67:2b:e2:bc:0d:de:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=e82377f0-d3fd-48e9-a6bf-8cd38c333f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:88:c6:75:64:37:8c:97:ca:06:a9:13:82:
da:4e:9b:52:1e:47:9c:96:01:62:a6:99:4f:63:34:
00:21:df:0b:d1:09:74:ec:29:54:41:63:56:86:28:
b5:41:5a:f0:bb:6e:58:62:c5:95:3f:ff:10:a7:eb:
f5:20:83:5c:78:5f:08:e6:aa:82:46:30:00:bc:55:
f1:43:bb:cd:51:85:4a:16:a3:96:76:17:e3:6c:34:
66:33:b2:e5:00:fa:d4:7a:32:28:22:ee:0d:a4:1b:
32:e9:0e:ae:1d:f0:3b:99:9b:e4:e8:b0:d1:e1:b5:
56:1a:61:0b:03:9c:f6:ce:6c:58:20:09:98:f1:09:
c4:fb:49:44:89:a4:e0:a2:9a:9c:ec:34:aa:ad:10:
66:6c:80:ef:4a:b1:fc:ec:43:14:36:9f:d7:2b:7d:
39:93:1f:51:1e:41:de:77:3a:1f:b1:70:3e:08:9b:
24:d8:3f:1b:d0:79:8c:47:6e:96:4d:c9:6f:6f:f0:
51:29:6f:be:31:ee:65:25:36:cf:2b:28:85:b0:a2:
00:48:23:93:25:1d:3c:16:4d:34:12:a1:66:8c:d1:
03:59:b4:9e:a2:ab:e4:35:c9:cd:c8:6c:61:d7:71:
1d:ff:72:f5:53:7f:9b:dc:e0:36:7d:e6:9a:d6:b3:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:89:79:0E:20:D6:32:0B:2C:17:63:E4:A8:6F:FA:1C:84:AF:3D:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/31429fb5-1581-3b9a-909d-e7b5ea7428ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:05:27:85:fd:03:c0:cb:cc:fe:94:d2:5c:ba:68:4c:a5:53:
fc:ba:60:12:dd:d1:30:79:fc:4a:c1:32:74:3a:94:88:4e:56:
b3:27:94:24:5e:fd:bb:33:de:c4:e2:64:5d:2a:1a:d2:7e:d7:
3b:37:41:7d:ea:f1:d8:4f:34:be:5f:9e:9a:bb:65:de:60:4f:
e1:bf:31:71:f7:38:c5:76:cc:a3:0a:df:e9:01:f8:2b:e2:67:
37:5d:34:0c:2e:03:a0:6f:f2:1b:14:21:c6:9d:c7:6f:fc:cb:
43:8d:72:6c:a1:ec:fa:2e:66:ef:32:1a:2a:8a:98:ba:8e:1c:
29:98:f8:94:2f:c7:ae:d8:31:ea:d0:43:be:b1:56:ad:9d:fd:
17:3b:1b:65:9e:7d:ff:4d:d6:22:4e:16:7b:b9:d3:45:18:a1:
a4:de:c9:ed:2e:24:8f:d1:12:0f:7a:9d:a6:30:91:6e:c1:ad:
49:1f:81:61:67:9a:70:dc:20:6c:7d:73:69:89:5a:20:3f:16:
3b:0a:dc:c7:7f:20:30:c3:f1:4e:ad:11:a0:07:8a:c0:5b:c5:
d7:52:43:be:cb:fc:5f:44:23:a7:e8:88:83:96:cf:bd:58:3c:
02:d2:76:31:60:d5:88:16:b3:33:ec:e0:c7:b2:b9:99:cd:98:
e7:83:47:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org