Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ada7fe9-9859-37b0-9d1d-a056f1e112be.roa
File: 5ada7fe9-9859-37b0-9d1d-a056f1e112be.roa (raw, json)
Hash identifier: 2GNZfbB7uSEIOwWJ1vUapHKZcNXa4JmOyqwWDvB6CKA=
Subject key identifier: 3C:F8:03:42:62:9D:A0:53:65:F8:65:0A:0D:A0:70:F9:62:7C:9E:F0
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7C1691828BCD450617A0EC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ada7fe9-9859-37b0-9d1d-a056f1e112be.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c1:69:18:28:bc:d4:50:61:7a:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=9346d1e7-ffae-4280-8573-7ff756f9c868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:1d:8c:3b:3f:59:28:c0:b1:22:6e:65:f5:
b0:d4:aa:ad:b6:e9:5a:68:ca:8e:9a:90:7f:c2:c7:
61:9c:35:65:5f:ef:6a:a3:65:2e:03:02:14:ab:eb:
fc:40:49:a6:b8:35:07:4e:18:78:b4:df:b1:f8:d1:
a7:ec:c3:19:bc:58:e5:ee:47:7d:78:1b:cd:c9:e9:
69:1c:4e:d7:c7:ce:6e:ba:86:36:49:79:5c:79:54:
ea:69:3e:cf:e1:e5:18:f2:d6:f1:92:b1:ba:23:38:
72:ba:34:00:55:b5:ef:83:91:d3:03:22:fb:6d:b0:
e8:6f:fc:f7:ed:27:91:53:81:eb:74:5b:1d:a8:79:
4e:87:1f:42:d1:a5:b4:2c:11:3f:d3:76:ec:9d:62:
1a:10:4d:32:1d:12:b6:89:37:ca:c4:3f:ef:01:05:
b2:8c:69:84:2a:37:09:dc:81:9e:65:02:61:3a:4c:
a5:ff:01:46:05:92:06:ff:96:53:4f:ed:23:08:ad:
e0:f1:8f:d5:d6:76:cc:3e:3c:0d:c2:ad:5f:d8:fa:
fa:f0:eb:7c:47:9f:93:ae:89:bc:b1:30:25:ee:1d:
be:b2:76:9f:78:af:2d:d3:97:d1:75:57:64:d3:33:
26:ba:96:d5:d4:d8:34:da:f4:20:4f:25:31:7d:bc:
53:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F8:03:42:62:9D:A0:53:65:F8:65:0A:0D:A0:70:F9:62:7C:9E:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ada7fe9-9859-37b0-9d1d-a056f1e112be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:bb:49:ed:76:16:5c:ca:7e:aa:3e:81:72:ad:cb:6b:c7:6d:
75:bd:ba:fa:0f:3b:5d:f5:3e:f3:45:bd:be:08:ae:c5:08:30:
87:4a:67:18:38:3e:ce:be:0f:4d:d7:37:26:27:1d:59:75:1a:
f6:df:97:00:fd:41:6d:88:24:43:3f:e1:b0:0a:f3:5b:d6:35:
e2:d8:dc:ea:60:f1:3e:99:68:b1:74:9d:fa:57:d4:a2:8d:68:
a3:aa:54:26:4a:58:16:05:a5:2b:42:75:fd:81:d2:47:cf:f6:
fd:c5:c0:98:b3:98:23:02:60:39:19:c6:63:0a:e0:0d:72:f9:
99:e9:2f:a0:d0:8e:ae:1a:7b:d2:9b:66:14:c9:0c:b1:90:6c:
79:8d:07:5b:94:8e:44:38:c2:3d:99:f4:57:43:3f:35:d7:d0:
f1:ab:e5:aa:d8:92:66:2b:03:c5:b6:e1:53:ae:f9:bb:7b:21:
0a:dc:e0:c2:e0:a9:50:91:02:bd:98:84:4a:37:8c:d7:0b:0a:
c7:61:e8:17:4c:e8:29:bb:65:51:e1:41:e9:11:95:61:8d:f5:
bd:85:59:9f:e9:26:30:eb:cc:f3:47:b6:ff:91:69:91:d1:c6:
13:e6:7e:45:39:96:ef:f5:86:3b:e3:4b:ad:bd:66:88:1a:70:
ee:92:f3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org