Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4f00d75c-1a51-3443-bb87-100d448fdb97.roa
File: 4f00d75c-1a51-3443-bb87-100d448fdb97.roa (raw, json)
Hash identifier: whV6HFCYnWGOhQKCiYK6iQ3RCvYzfpqLkkDjGgOUHvI=
Subject key identifier: 7A:A1:40:B4:6A:08:4E:EF:7E:33:B6:FC:09:34:D7:1A:FD:A8:F1:EA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA79E9B209DE2E353D2172B00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4f00d75c-1a51-3443-bb87-100d448fdb97.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:9e:9b:20:9d:e2:e3:53:d2:17:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f7b82d2b-bc74-4374-9e0f-07137634cd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:96:7b:41:c3:ba:3d:f5:30:dc:97:40:46:a3:
dd:b3:66:23:6c:ed:fe:e9:e2:df:96:06:eb:f7:12:
ce:0d:31:2d:ed:53:33:5b:be:fe:0e:f6:dd:b0:88:
7a:f2:c6:3a:08:88:ad:60:f6:4a:ba:74:b8:09:34:
d7:c5:0e:b1:09:cb:c8:7c:d1:89:e0:d8:93:e1:80:
e5:d3:8c:2b:38:6c:03:45:2c:8d:51:01:90:96:9f:
d6:2e:6e:78:75:cc:a2:21:ab:62:7a:7e:77:06:07:
cd:42:b6:fa:b7:f6:a4:2c:95:89:d4:a5:7b:c5:77:
e0:85:56:ad:41:28:b9:a1:62:9f:9e:5f:0c:0c:60:
bd:6d:04:94:8e:04:83:fe:03:ba:54:f0:2c:7b:0d:
b1:f4:ed:96:b6:1e:5b:cd:a8:35:b6:15:fd:a1:27:
6f:0f:ab:ca:25:14:64:02:d4:76:8c:4a:05:f8:5a:
ca:d2:06:23:98:bf:e1:b4:35:32:f4:89:cc:15:06:
93:9d:51:d8:6d:ad:fc:48:b5:e0:04:60:a7:9f:35:
93:58:d2:59:da:84:da:3c:5d:18:61:41:3d:75:cd:
de:8d:48:12:df:24:87:a9:a0:48:1e:40:64:86:44:
3f:c7:09:b1:47:aa:35:7c:67:c7:cc:52:95:58:62:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A1:40:B4:6A:08:4E:EF:7E:33:B6:FC:09:34:D7:1A:FD:A8:F1:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4f00d75c-1a51-3443-bb87-100d448fdb97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:45:99:90:31:88:11:97:80:76:af:ac:69:a7:52:1b:99:24:
b4:c0:01:6d:df:c4:a1:89:4a:2a:5f:86:57:d7:17:29:23:79:
de:59:d6:b8:f6:e5:aa:d6:6c:8e:98:27:88:09:6c:7f:9b:a9:
fa:65:df:ff:5e:26:14:fa:cb:0e:4b:21:b3:89:21:92:26:31:
8b:f6:3d:31:04:44:ee:12:17:69:2b:4e:26:d8:f4:66:d7:7b:
d0:2b:e7:60:9a:dd:f5:da:64:6a:96:53:23:b0:e9:ec:25:62:
47:96:30:87:8d:49:79:7e:1b:fe:bc:b1:ee:86:90:47:f6:b2:
7c:e2:48:3c:0f:e2:a4:e6:fa:b9:4f:a3:b2:e9:c5:69:d9:e0:
6a:09:3f:80:13:a5:f3:1e:45:dc:a1:f5:89:0d:fe:27:38:bb:
10:3e:ab:bd:f1:2e:61:ad:cf:20:ab:84:56:76:ba:ef:99:d9:
3a:e4:04:0a:70:4c:6c:5c:aa:79:a0:34:17:42:29:07:a0:b5:
f1:07:46:f0:8c:cd:24:56:21:2f:39:3c:c5:a4:f3:bf:ea:82:
cc:d6:c4:95:25:31:dd:95:5c:8c:59:94:29:bc:b3:e0:ad:de:
06:9a:68:9f:fc:ca:6d:59:c8:72:7d:2f:26:45:43:33:37:c3:
80:fd:8d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org