Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43461777-6097-3be4-b5ac-35de57820ec3.roa
File: 43461777-6097-3be4-b5ac-35de57820ec3.roa (raw, json)
Hash identifier: KQfvEoYyAchJIEHXx/Yz2GMZa5yrABJpWOF0ErilyKI=
Subject key identifier: 4E:6F:2C:FB:45:78:19:7F:33:E7:F4:97:A1:3D:7C:82:8F:05:E1:D5
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B5B95010DF7C2A7353B100
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43461777-6097-3be4-b5ac-35de57820ec3.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b5:b9:50:10:df:7c:2a:73:53:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=b8f9dcfa-91a1-4232-be81-21859bde2ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:f0:23:5b:77:bc:14:f6:f1:ec:45:29:ed:
07:a4:b5:eb:fe:f4:10:24:35:ad:ad:b9:a8:fe:c8:
d5:b9:bf:fe:7d:79:ae:bf:51:05:e7:8c:c0:be:29:
5c:47:34:1e:27:ce:f1:e3:a5:ca:0b:04:f5:79:78:
69:32:bd:bc:36:b8:8a:c4:b4:62:a3:9f:94:4a:55:
77:35:4a:cd:da:12:d3:2d:cc:3f:10:c6:32:1d:f6:
ef:14:51:f1:05:ca:7e:73:94:bc:0b:63:04:79:36:
2d:b1:62:c7:51:75:3b:34:87:a8:d0:86:91:76:5b:
1b:b9:d7:34:fa:c0:2c:e2:51:8d:81:96:0d:d4:26:
bb:61:de:24:2d:5d:eb:3a:2d:e3:92:83:46:05:be:
6d:f3:24:69:6d:62:c3:4b:f2:8a:44:3c:d8:a5:b4:
6e:12:f1:67:73:0c:52:01:25:b2:94:55:79:00:de:
33:ac:d2:08:30:40:d9:d1:ac:6c:23:00:91:12:7c:
de:13:00:09:1c:32:89:d3:a2:bc:03:28:61:64:81:
29:b0:fa:24:d5:97:ea:f0:86:15:5c:63:ff:65:42:
75:50:37:16:d5:2b:9d:bc:e8:5f:40:0f:02:93:1d:
21:ed:5f:3f:29:90:33:bd:67:fb:ca:6b:77:20:5d:
70:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6F:2C:FB:45:78:19:7F:33:E7:F4:97:A1:3D:7C:82:8F:05:E1:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43461777-6097-3be4-b5ac-35de57820ec3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:8f:d2:43:7d:18:8d:5a:de:17:23:ad:d4:c0:4a:45:a8:b2:
6a:a6:ae:f2:d2:9c:36:15:db:27:44:2c:7d:60:a3:a3:2a:9f:
9a:7d:a6:60:08:b4:4b:76:8c:fd:f6:9e:3b:7f:d9:53:7a:46:
4a:fb:57:40:95:42:e2:27:3a:f8:80:1b:b5:f3:21:3e:74:e0:
df:7c:b5:3f:aa:e2:3a:ca:f1:9b:21:45:0c:61:17:b6:0d:ec:
84:22:79:84:85:1f:98:a0:9a:79:ce:f3:ca:01:90:4a:5a:90:
e6:2c:d4:fa:2a:3b:7e:82:01:24:43:e3:e7:1f:53:e4:bd:b7:
55:10:7b:88:8f:85:84:fa:35:27:66:6b:ed:82:dd:ec:19:2e:
4b:37:05:b4:b4:b0:92:7e:9c:ca:ed:7b:c1:7e:5e:d7:56:1d:
2c:d3:e6:88:9d:18:a3:32:7c:ad:5f:7b:c7:c1:b3:ad:7e:91:
77:be:c8:d8:cd:fa:78:9f:5d:40:d4:50:80:4d:d9:d0:a8:b7:
58:ec:fa:17:2e:da:e0:55:78:2b:b3:cc:b7:4e:7a:3d:62:f0:
ee:ce:02:1a:cc:4d:09:95:8a:cd:14:8c:26:6d:6d:b8:09:7d:
bf:67:42:27:1d:e3:1f:73:07:ad:3a:33:88:e9:9d:05:72:f9:
06:be:1f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org