Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6311aa61-66c9-3b4b-8180-57fec9ec45d9.roa
File: 6311aa61-66c9-3b4b-8180-57fec9ec45d9.roa (raw, json)
Hash identifier: kVRn7UvAvYMH9r4HraWRI50cwX9iTa7Mh8jU29KODsg=
Subject key identifier: 4F:AA:94:0D:BB:3A:F0:19:78:BD:8C:96:E0:48:74:3D:C9:AE:6B:FD
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B3B6AD3A66997EEAA02480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6311aa61-66c9-3b4b-8180-57fec9ec45d9.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b3:b6:ad:3a:66:99:7e:ea:a0:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c204d12a-0a9a-48fc-8eb9-a16b99d40777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:8f:70:58:1a:a1:4a:dc:a7:9a:00:57:6a:
c8:44:49:fb:98:19:14:49:48:3a:07:44:31:2b:5f:
4a:72:76:13:85:74:df:b9:73:e6:9e:0c:1b:36:26:
4b:33:a5:84:64:d4:2a:0a:72:d7:3e:21:c7:66:66:
1a:1c:d0:ab:87:14:1c:c0:1d:7e:e4:ba:c3:58:8a:
90:47:99:60:0b:f4:31:99:85:9f:2d:8e:2f:48:7b:
08:48:5c:2f:a5:f6:33:1a:99:3f:60:60:a8:ae:d2:
9f:d8:74:82:3e:b5:22:50:86:1d:5d:30:61:20:45:
1f:84:c1:23:14:23:87:a9:c0:9c:c7:10:ef:4d:95:
30:73:f5:8c:af:74:a0:4d:24:a3:d1:bf:51:48:43:
01:d4:d6:a0:8c:29:de:be:21:16:21:7b:93:5d:80:
1d:da:9d:9b:7e:2e:85:78:c8:97:0c:0c:5f:b4:ba:
52:a1:41:20:eb:0e:0b:a8:0e:77:6d:00:09:6c:14:
a9:d3:d9:c2:e9:03:9a:29:d9:86:80:c3:ea:b0:59:
3f:93:fd:93:bd:2d:00:da:7f:27:c2:fd:ac:31:2e:
81:f3:ec:04:54:92:02:f3:c4:83:d9:56:29:b3:c7:
1f:8c:f7:8a:79:c4:0c:de:9c:9d:46:b3:b3:ee:86:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AA:94:0D:BB:3A:F0:19:78:BD:8C:96:E0:48:74:3D:C9:AE:6B:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6311aa61-66c9-3b4b-8180-57fec9ec45d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:fa:2b:c7:a7:86:00:3c:38:87:5b:d1:07:ae:04:5c:29:07:
9c:8d:e8:22:47:54:ae:43:9a:33:12:02:c9:24:73:7a:3d:48:
3e:38:92:43:b0:87:01:4e:d9:ed:60:5c:b5:a8:2a:08:d9:74:
ed:5e:b4:64:42:b3:60:85:a9:18:61:a5:97:20:90:08:0b:74:
7e:73:9f:1a:f1:3d:df:f3:06:d2:08:50:37:3d:85:06:a3:b2:
6f:61:13:fa:20:77:d4:e9:7f:60:43:1b:62:e5:1f:75:bc:19:
c8:0f:56:97:63:70:23:74:10:e6:32:f9:bb:8b:89:21:94:54:
9f:76:fa:29:2e:fd:82:61:17:d4:af:80:f8:42:70:78:47:22:
93:cf:bc:62:35:79:e4:91:41:cd:53:d0:40:64:57:7d:a4:11:
7d:50:21:16:a6:1a:99:03:4e:78:57:31:c7:ee:7a:57:db:a1:
33:b3:48:59:b3:de:44:bb:ef:c9:4b:39:4d:e8:e4:6a:54:e9:
4c:fc:51:11:6b:84:70:3e:5d:fa:c0:39:5a:d2:76:4c:93:47:
0a:6b:0f:34:bf:c0:c8:bc:52:6a:9a:d7:30:e9:5f:06:0b:53:
05:8f:e0:81:8a:49:92:0c:d1:9e:19:92:2f:2e:c6:8d:27:c6:
c8:aa:99:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org