Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5f1b5544-6d6a-33e5-b88d-9b5699dcaacc.roa
File: 5f1b5544-6d6a-33e5-b88d-9b5699dcaacc.roa (raw, json)
Hash identifier: B5eUteUuaZXFgga7BpeKVFg8ZpjxbMumCsdqCqeZ4vw=
Subject key identifier: EF:A7:F3:7F:87:79:29:B6:25:F3:86:C0:D1:F0:28:45:10:DD:38:77
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583C5B39F76DFF5C65B99D8733C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5f1b5544-6d6a-33e5-b88d-9b5699dcaacc.roa
Signing time: Thu 23 Dec 2021 05:00:00 +0000
ROA not before: Thu 23 Dec 2021 05:00:00 +0000
ROA not after: Tue 26 Mar 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:5b:39:f7:6d:ff:5c:65:b9:9d:87:33:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Dec 23 05:00:00 2021 GMT
Not After : Mar 26 04:00:00 2024 GMT
Subject: CN=ab9ffc8c-b24c-4252-adea-05885fde6cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5b:b5:21:c8:fa:cc:a7:54:84:74:5f:40:4f:
9f:95:3b:98:df:56:54:09:5f:0b:70:53:54:58:15:
10:75:00:6c:c8:a1:66:84:e5:d0:91:f7:9e:7e:03:
ac:3b:03:f4:65:af:a8:e3:c1:8d:16:c2:7f:70:f7:
ae:94:6d:cf:1a:1c:17:b3:a2:c9:b3:5c:24:0e:45:
86:20:2c:08:83:5a:ff:53:b2:f0:77:98:8c:84:7d:
30:3d:94:fd:53:be:ce:2d:88:c4:ef:23:ad:16:5f:
fa:c5:38:03:3b:8b:f9:75:b3:3b:c7:36:3e:44:c5:
0e:c0:0f:4d:62:25:c7:70:13:91:dd:4d:94:5c:72:
13:31:93:47:b9:54:d8:57:59:aa:1d:fb:74:85:70:
a8:38:60:69:01:f3:b9:d8:4f:19:7d:00:1b:49:f5:
f2:6b:2a:c2:77:75:bd:02:17:10:fd:a0:55:f9:b2:
d2:be:ae:5a:fe:0b:98:e4:9e:63:4a:f2:b8:3d:d9:
46:ff:e2:8d:06:76:9a:46:75:a3:e8:73:9a:f5:01:
23:bc:9d:ea:a3:f8:fa:b2:52:2d:c4:06:06:8b:89:
94:d4:8d:0b:d0:54:21:77:c6:57:58:65:cb:f5:47:
3d:97:fb:69:ee:a7:d0:73:69:25:05:37:77:ae:4f:
2c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A7:F3:7F:87:79:29:B6:25:F3:86:C0:D1:F0:28:45:10:DD:38:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5f1b5544-6d6a-33e5-b88d-9b5699dcaacc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:e5:3b:cf:70:ab:76:15:76:49:d3:c1:16:24:c3:9c:70:ea:
3a:82:85:03:32:c6:07:77:83:f9:96:b0:06:1f:5e:14:da:a3:
a8:c7:de:b6:58:a0:48:ee:8c:af:8f:5c:a4:21:f7:91:43:95:
d0:59:33:7f:f1:c8:56:c9:40:8d:a7:b1:f2:27:06:f6:de:b4:
e8:87:d7:c5:2b:6f:08:dc:42:63:02:81:91:eb:b5:fe:08:ee:
5f:d1:ba:8a:03:b6:00:da:71:01:97:a5:5f:1a:3f:9b:9a:f2:
d7:ad:e1:b5:80:c8:88:15:9b:97:23:05:7c:bb:f9:47:39:65:
7f:c5:f8:b1:40:04:d8:3c:53:5d:ca:24:53:e1:f2:21:65:e1:
11:da:f8:7b:24:72:a7:d2:2c:ba:53:e4:a2:17:c5:96:cc:68:
a0:e6:60:d4:2f:ea:e6:49:f1:19:70:7a:a7:f8:ba:ef:e1:65:
0c:6e:db:29:3b:83:cf:72:e2:61:e2:94:bf:1e:55:bf:61:0a:
7b:22:2e:67:a1:54:fd:2d:d8:45:c1:3b:bf:26:5f:86:08:2d:
56:99:57:7d:03:0f:61:5d:45:c9:67:84:2e:9d:27:a8:34:64:
71:45:de:11:71:95:1e:cc:22:da:7c:53:8b:09:7f:71:c6:71:
45:9f:19:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:11:36 2025 by rpki-client