Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43babb8a-e5cc-3921-a6a5-b22f5b92f181.roa
File: 43babb8a-e5cc-3921-a6a5-b22f5b92f181.roa (raw, json)
Hash identifier: Gbig0NzVcYRC0ZK/nHCZoQg8cTtIJIABMKDQPWutBOU=
Subject key identifier: 9C:B8:BC:92:79:B6:DF:69:F5:33:94:55:AA:CB:3B:F3:0E:76:7C:2A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309FA49FCD1C9E5CC3FAAD380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43babb8a-e5cc-3921-a6a5-b22f5b92f181.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fa:49:fc:d1:c9:e5:cc:3f:aa:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2b3d8fcc-cd6d-49f5-93f6-b092dedc2292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f4:12:f1:59:95:8a:d7:c5:44:70:0c:71:d6:
e2:32:b8:80:eb:31:54:09:03:d7:ae:8a:db:4c:5c:
42:2c:a6:81:aa:a9:73:c6:21:f8:0d:3a:58:20:27:
a4:c8:bf:e5:a8:c2:54:4f:0b:a9:57:9e:a9:33:f4:
23:60:36:ea:92:06:4c:73:6e:0d:82:a6:4b:41:73:
03:75:6d:17:d0:db:1a:87:89:5f:cc:b3:99:3f:3b:
b0:18:ab:57:2f:87:da:d1:2a:f4:19:af:65:33:3d:
e4:a0:f8:ce:db:07:55:cf:2c:91:6d:94:31:f4:4c:
c3:5d:36:4f:25:52:53:a5:fa:e6:54:25:16:69:05:
61:33:ca:ce:8b:a7:9b:0e:1d:3a:ca:ea:64:b6:67:
a5:e3:28:9c:d9:e9:60:57:13:d8:72:2f:1e:bf:34:
aa:ef:6d:e9:2c:a6:c5:90:60:0c:c3:0b:4c:7a:65:
8a:43:12:09:15:fa:39:d1:f3:6b:e0:4a:4e:6d:81:
7a:ad:50:c3:67:da:44:04:64:bf:0c:7c:f4:f4:8f:
d5:be:5a:7a:1f:1b:71:fd:ad:62:86:68:29:81:08:
6f:a3:6a:58:40:97:62:df:ff:f2:8d:4d:84:64:f6:
ff:0f:78:4a:d9:89:d2:cf:23:36:94:d7:3c:d0:ed:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B8:BC:92:79:B6:DF:69:F5:33:94:55:AA:CB:3B:F3:0E:76:7C:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43babb8a-e5cc-3921-a6a5-b22f5b92f181.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:d3:4f:48:8c:56:3c:f6:17:73:7f:5a:a8:55:10:1a:e2:83:
31:ab:83:2e:4e:60:3b:33:fa:39:e8:1f:39:e2:92:c2:a3:2a:
4a:a1:ed:93:cc:ac:dc:83:50:97:3a:a3:28:94:41:1b:3f:e1:
1b:15:c7:be:b3:55:de:e4:9f:de:c6:ed:27:eb:66:42:96:ba:
6c:50:ea:b8:76:99:6e:37:72:9d:dc:0c:ba:a4:19:f0:2d:a2:
a8:81:3c:80:31:6b:c5:f9:29:8b:e2:3e:26:f9:d4:4a:3a:71:
fc:f0:93:34:45:06:98:67:8f:0a:f4:6d:38:11:28:09:a6:15:
54:6a:5c:ae:0a:e4:e2:3c:bf:a6:81:7e:d1:52:5f:8d:7f:03:
75:86:49:59:54:d4:29:2d:c3:b6:2f:2d:95:e3:75:72:df:be:
3f:e5:72:28:8f:41:24:2e:df:92:77:03:6f:21:c2:f1:38:ef:
01:ed:34:cd:72:d1:32:3d:4c:7c:2e:df:c9:e0:fa:cd:7a:9b:
34:81:d3:f4:b6:23:de:25:39:21:c6:7e:93:9b:84:b1:9b:ad:
92:4d:1b:0a:8b:99:4d:5d:26:7a:c0:f4:77:fd:89:ae:a2:aa:
18:95:cf:1c:3f:bb:93:a3:20:e2:e7:6b:06:b9:dc:52:2d:2e:
07:0c:96:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:51:41 2025 by rpki-client