Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7b8afd77-4e76-3a8f-bea7-46a2871a2671.roa
File: 7b8afd77-4e76-3a8f-bea7-46a2871a2671.roa (raw, json)
Hash identifier: Z6mjuwk4nNRUP2O5CI7dfxNmESnMlUGDEzXTJQReGd8=
Subject key identifier: C0:F2:07:A2:60:BC:B4:7B:C2:5D:F4:DF:AC:D1:31:36:B5:EB:BE:66
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7AC81493D6C778A4A65A480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7b8afd77-4e76-3a8f-bea7-46a2871a2671.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ac:81:49:3d:6c:77:8a:4a:65:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f4a106d9-0b1e-4b54-868c-c078f4aba98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:32:fd:72:b0:a2:f8:ff:ad:7e:73:25:1a:1a:
5b:26:9f:3c:86:5b:9b:6d:43:c0:78:19:3f:5c:ca:
77:ed:ea:cc:be:cd:63:69:9f:28:d8:ff:9e:51:25:
60:c0:ec:6b:d6:a2:8c:ea:5f:64:1d:a2:8a:32:4f:
84:f8:6b:68:0c:3d:07:bb:78:95:64:9a:44:5e:ed:
27:91:a0:40:d0:72:78:80:ed:8e:23:cf:5c:61:59:
f8:dc:2e:e5:a8:dd:fa:d1:d5:35:ae:78:fe:16:7e:
dd:71:7e:7c:02:84:43:8f:5b:b6:1b:75:38:fa:f5:
3b:08:b2:6c:e0:31:8e:0b:3d:e6:9f:af:1c:f1:42:
96:2a:8e:64:56:16:c3:8b:02:48:e6:d0:23:eb:b8:
8e:d9:39:6e:e6:4e:d3:a4:51:2e:a5:43:43:ce:3c:
dc:e2:b3:81:e9:28:da:f2:b2:19:19:dd:15:5d:f0:
b0:fc:de:19:f0:69:d4:7f:4f:38:40:74:56:79:e7:
f6:e4:59:99:bc:d1:a4:45:c9:89:94:46:9a:29:c5:
77:b2:47:6b:bc:1e:05:9a:8c:5c:c4:18:b4:31:5f:
d3:03:15:8b:2e:31:b4:76:ff:fc:90:b8:95:c1:1d:
06:74:5a:61:95:88:5a:59:82:e9:11:a1:65:5e:c8:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F2:07:A2:60:BC:B4:7B:C2:5D:F4:DF:AC:D1:31:36:B5:EB:BE:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7b8afd77-4e76-3a8f-bea7-46a2871a2671.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:6d:45:46:40:fc:65:fd:a8:1f:2b:fa:12:ea:8d:73:df:8c:
04:40:fc:2c:39:08:c8:53:c0:89:cf:82:27:cf:d2:88:0a:36:
ea:6b:e5:6a:3b:8b:38:7a:b3:62:f1:88:b6:79:2f:32:12:1b:
b9:e3:ee:16:44:55:57:80:9e:4d:5a:d9:29:ea:b1:db:50:54:
82:b2:34:2c:8e:80:8b:91:22:1b:e7:f7:62:a5:f1:e9:01:71:
1b:e8:99:75:43:2b:8c:48:38:ea:ac:1b:7e:98:94:9a:1a:84:
3c:c0:05:b5:38:c7:58:c9:d3:08:86:21:8e:af:c7:ed:23:3a:
94:be:97:ef:b3:9c:fa:3a:9d:4e:ae:ad:a7:9e:05:01:db:29:
47:e9:99:e7:ff:9c:95:f7:89:9f:03:bb:6c:3d:69:c0:95:bf:
22:58:2b:5a:2e:d9:00:2f:95:50:f5:0d:25:ac:08:f5:90:f6:
28:1a:e9:d7:68:5d:a0:11:67:ec:b5:6c:45:c0:a0:2e:27:fb:
b2:15:87:5e:6d:9a:76:a1:be:0f:df:2b:f8:4b:b8:4d:11:15:
83:86:11:5b:ab:46:3d:91:5e:5f:d0:88:86:2f:d0:f4:f1:a8:
7d:b4:b7:66:b2:8e:57:2e:85:e3:56:2b:08:07:7d:84:60:c1:
ff:3a:cd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org