Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77bad5b8-f5e0-3708-b2ed-42c4bb8206af.roa
File: 77bad5b8-f5e0-3708-b2ed-42c4bb8206af.roa (raw, json)
Hash identifier: MnYN4gGmq+7wY1rab2kl900S/34Yjobbey3YtYo27RU=
Subject key identifier: 1C:AB:C1:6E:5A:7A:75:CD:9F:9D:80:CC:7D:4B:0A:A8:E3:AE:90:2E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7BD9501607F3A6D4CD9B380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77bad5b8-f5e0-3708-b2ed-42c4bb8206af.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bd:95:01:60:7f:3a:6d:4c:d9:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=41e2b1a3-c8d4-4bcd-a222-7429538028f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:3a:42:1a:a1:49:0a:71:0a:d1:a1:b4:12:
50:44:23:23:59:3f:74:3f:a1:bc:b4:fd:a6:df:2b:
9a:28:60:36:af:fb:42:1f:62:9c:77:2f:60:49:a7:
d2:9d:65:8a:d9:27:ce:ec:c8:84:59:73:ed:96:6f:
d1:32:b8:bc:db:c9:a2:40:75:d7:d8:94:5b:1b:8b:
3a:40:ce:ee:80:f7:d6:c8:13:98:b8:e0:6b:6b:88:
b1:48:d3:94:78:5f:f4:7c:be:6b:36:ff:43:87:9d:
91:ac:b3:e2:bb:00:0b:7f:a8:57:5d:03:04:d0:8d:
6d:10:3b:6e:45:23:fd:c5:75:21:56:c5:84:cd:5c:
f5:cd:54:b3:16:13:a0:c2:d5:9a:58:c2:be:a4:b7:
b4:92:e1:8c:d3:48:66:f6:4e:bb:2c:34:39:26:af:
6f:e8:29:33:86:b5:71:9f:b6:80:9f:ca:0d:4e:0f:
17:b0:6d:ca:44:0f:5f:88:14:09:1b:dd:66:04:79:
3d:e7:e7:ff:04:bb:22:94:30:c7:76:b4:76:86:d8:
d1:24:d3:55:86:e0:a7:c0:be:09:c4:51:4c:d2:bd:
5e:a1:06:96:71:24:71:b8:94:90:15:72:b6:fc:bc:
87:8a:b2:30:2a:b3:66:3f:7f:39:cc:d5:4a:81:d5:
fc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AB:C1:6E:5A:7A:75:CD:9F:9D:80:CC:7D:4B:0A:A8:E3:AE:90:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77bad5b8-f5e0-3708-b2ed-42c4bb8206af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:62:32:80:df:38:46:4e:b7:23:c7:ca:49:38:2f:f6:4d:b1:
0e:ac:6f:9d:f7:e6:a9:b0:2d:6c:81:ac:25:0a:b1:c9:62:d1:
9e:5b:1b:28:de:67:cc:4a:18:52:8a:d8:ec:03:b1:a6:32:cc:
35:b7:e0:a6:35:3d:a1:7b:6e:71:fa:40:e3:5f:99:6c:49:c4:
42:8a:b4:55:c1:35:62:a0:69:aa:75:1d:a5:a1:26:6c:d6:17:
d0:f6:09:3a:5a:44:1e:1b:58:10:a9:33:9f:f0:ef:80:5d:b2:
01:8f:ec:e9:bc:bb:59:79:08:51:fe:1f:21:89:5d:9c:6d:66:
51:a5:13:5d:04:ac:65:81:af:89:92:a9:46:62:1f:55:6f:0e:
7c:63:14:ce:af:72:37:75:f9:c1:3c:20:6e:d3:04:11:35:dc:
54:b2:cc:37:07:0b:10:87:72:ca:82:b0:66:30:6c:af:0d:e6:
66:73:e8:38:c0:f2:55:46:55:61:6d:d2:a2:e0:ec:df:24:09:
da:a5:97:2e:3a:40:e9:8c:83:e1:99:32:90:4b:a4:17:e6:26:
a6:08:89:81:40:65:a8:43:73:ab:e4:e3:21:57:18:39:83:21:
16:ee:26:fd:11:02:08:bf:a6:21:f0:c2:11:25:46:54:9f:3f:
f5:4b:69:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org