Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a170447-8288-316a-92da-b21e4fb4dee8.roa
File: 5a170447-8288-316a-92da-b21e4fb4dee8.roa (raw, json)
Hash identifier: NybNqE0CQP8DGE04WGHjWQCC7WWofR6UI1sQkRLwazQ=
Subject key identifier: 9C:00:97:D4:04:30:9B:57:75:34:A1:63:33:88:C3:72:56:AA:71:AF
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A3EDCF01BAFF9CAA640780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a170447-8288-316a-92da-b21e4fb4dee8.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a3:ed:cf:01:ba:ff:9c:aa:64:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c850005d-f36a-4bbf-84c8-ca74392a8ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:08:b9:d5:e7:90:72:64:1a:98:2e:4e:3b:
06:d0:55:61:7d:42:b2:bb:b0:ee:a7:30:24:36:3e:
ee:6e:70:29:9d:86:8a:77:b4:ed:3d:4f:66:a0:89:
03:25:71:f8:36:b7:e8:94:82:1a:d4:1e:86:0a:2b:
3e:0f:67:01:10:a5:39:0c:86:58:9a:5c:30:9f:0c:
53:10:7d:65:2e:6c:b6:af:f2:3c:93:50:c7:a9:a4:
fa:20:05:bb:2f:ec:c6:89:40:01:26:3d:e8:27:2c:
be:ba:3e:d6:0b:e9:56:31:47:8d:b4:ed:14:09:37:
57:03:28:55:b4:58:3d:86:b9:30:2c:f3:1f:67:96:
80:4a:07:5f:ce:eb:5f:24:09:c4:3e:37:93:31:a6:
94:01:be:3e:57:ec:53:11:67:47:c2:60:19:9b:92:
0c:3e:b6:22:ca:1f:fc:30:39:7c:2b:a9:6e:94:84:
32:8a:56:29:85:40:f4:b0:c9:21:8e:3f:a0:28:dd:
06:eb:3b:cc:cf:94:33:26:76:dc:a9:ac:1b:3c:02:
d3:e0:fa:0d:0d:8b:b1:80:88:d4:9c:d1:7f:c5:63:
bf:b4:ad:67:c8:a0:50:4f:1f:20:da:c7:54:43:d5:
c0:ee:d1:b8:32:06:35:70:7a:13:d1:c0:7a:4f:fe:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:00:97:D4:04:30:9B:57:75:34:A1:63:33:88:C3:72:56:AA:71:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a170447-8288-316a-92da-b21e4fb4dee8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:b6:1c:c7:fd:d0:49:60:85:af:4f:8d:9c:9e:dc:71:99:4e:
13:ac:da:9b:30:54:15:7f:49:0a:c9:a1:8b:4b:c1:84:70:13:
d9:60:1d:79:35:fa:95:bb:13:f1:02:d8:64:e5:ee:16:47:27:
dc:59:c5:bf:d6:9f:c7:89:f4:65:96:e4:09:c1:4d:fe:b6:4b:
4b:71:97:65:b7:8b:84:9f:f3:79:15:e5:54:ed:09:33:e6:93:
a1:39:a4:2b:9e:03:4f:aa:57:d6:77:ac:7d:f9:a9:aa:f9:2c:
e1:11:ad:a0:5e:b0:dd:43:b6:08:a6:e9:03:19:1f:7c:8e:78:
5f:07:12:65:a1:f3:f1:56:4b:a6:97:11:bb:e5:01:bf:c5:75:
8b:c7:92:48:1f:c3:90:e7:a5:b3:6e:72:5d:6b:01:5a:ac:67:
df:33:9d:11:45:f1:63:5f:22:44:7c:ed:f4:65:cf:26:ce:c1:
59:ac:14:4c:1a:a1:dc:a4:73:31:b5:a0:a7:0f:5f:5b:d0:0b:
86:1b:a5:b4:b7:51:88:dd:08:e5:b8:88:8a:31:b5:82:dc:ff:
21:8b:09:6a:75:8b:ba:40:74:ef:6c:e4:a2:cb:bb:17:94:4b:
73:77:2c:5f:6f:38:24:40:b4:e5:d6:ed:33:24:74:1a:0d:84:
d2:2b:08:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org