Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8bb3456c-ae74-3140-ae1a-6bf0b723b848.roa
File: 8bb3456c-ae74-3140-ae1a-6bf0b723b848.roa (raw, json)
Hash identifier: oSKvnkKCFb49wJwaGr87XyGrsOd+q2xz2H/5GRByIpE=
Subject key identifier: F8:92:DF:A5:6C:6F:82:DB:25:DA:C4:51:48:53:93:2E:BE:0A:75:4E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B2899AE3561FA4A54BB0A0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8bb3456c-ae74-3140-ae1a-6bf0b723b848.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b2:89:9a:e3:56:1f:a4:a5:4b:b0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=07ae4f7d-4ba6-42b7-b35b-1612235a0860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:03:93:bb:11:07:3e:76:ed:52:c5:3d:49:19:
cd:18:12:a8:a6:94:08:a2:21:1a:09:e3:c1:42:b2:
03:45:24:fc:ca:56:94:30:6c:db:47:79:d8:ab:c1:
f8:3d:e3:03:0b:1a:e9:1c:9f:97:e4:a4:63:47:dc:
ad:bb:c2:bb:c7:0e:db:37:e4:7b:01:7d:bf:0b:ed:
23:f7:77:ad:1e:d7:e8:d3:1b:b4:ec:b1:a1:bb:98:
86:d4:ea:35:f7:d3:56:3d:69:71:f2:88:1d:bd:60:
14:6d:b9:86:21:bd:6d:23:1a:e9:5c:37:19:7a:61:
54:f3:45:6c:ac:af:06:9c:50:3c:7b:46:3a:09:ca:
d8:0b:c5:c7:d0:41:f8:34:2a:3b:2f:0f:7e:6a:ba:
06:6f:15:06:bd:2b:56:d2:28:92:c2:b3:ae:9f:2a:
49:0f:33:a9:a3:34:7a:8f:99:f4:be:7e:98:c5:95:
b8:32:62:1d:14:19:da:fb:8c:8b:3c:74:89:cb:91:
b5:9c:84:21:fa:ff:ae:f4:f8:09:a2:e2:51:ce:70:
64:90:e4:db:90:b3:fa:24:76:fc:22:26:23:fb:29:
d8:8c:30:73:40:67:dc:e5:2f:3f:c9:45:21:91:0a:
15:07:be:93:fe:32:4d:98:8d:d1:4f:38:41:47:60:
47:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:92:DF:A5:6C:6F:82:DB:25:DA:C4:51:48:53:93:2E:BE:0A:75:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8bb3456c-ae74-3140-ae1a-6bf0b723b848.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:ba:ab:d8:b2:74:f1:cf:9a:a0:45:1b:33:a9:21:c2:f1:97:
8f:46:95:12:dc:88:4a:6e:b9:6a:8f:28:8b:37:39:4e:38:5a:
c1:b9:32:84:4e:4b:89:58:34:92:8e:f6:7b:64:28:e1:ea:01:
58:b4:71:e7:63:33:fd:85:d1:5a:b2:79:26:c2:fd:10:72:02:
0b:78:4d:36:b2:63:b8:77:c0:61:30:d8:cf:2f:9b:be:a0:9f:
84:78:c7:fd:6e:9f:08:0d:12:f1:6c:ff:b2:89:7e:e1:08:e8:
bd:d1:e1:5c:09:6c:eb:32:46:e3:30:35:8f:92:07:61:ce:4a:
ac:40:a1:24:ca:b3:f6:2a:07:f8:92:45:ca:0e:aa:c6:b4:ab:
1a:05:59:14:ba:50:52:72:7b:c1:f9:82:a0:1e:d4:1c:6f:66:
1d:95:b2:18:88:b7:4b:24:45:12:fb:d6:60:c7:46:64:f7:a2:
1d:7e:00:50:5d:30:2e:e4:ca:ff:b5:b6:64:ae:b0:74:86:71:
44:66:8c:7a:5c:4b:0a:e8:f3:96:86:68:1c:ae:d0:e5:09:19:
62:99:40:f5:92:f4:bf:76:03:38:fd:91:56:bb:43:2c:63:52:
98:e8:d8:09:01:65:a1:18:ba:71:8e:13:36:07:a4:a3:4f:48:
f6:79:ae:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org