Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9cea491b-289a-3c62-abf2-8323bd4990bd.roa
File: 9cea491b-289a-3c62-abf2-8323bd4990bd.roa (raw, json)
Hash identifier: MOZxY2zdX5T0st92wV+ABACy5wcBbI9sWnm1dwSOSEU=
Subject key identifier: 1D:1B:9B:FB:AC:68:DC:D3:93:10:4A:96:E8:60:E5:5A:5B:5C:CF:93
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA79EF45BA71AD204C70DE440
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9cea491b-289a-3c62-abf2-8323bd4990bd.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:9e:f4:5b:a7:1a:d2:04:c7:0d:e4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=cda3e77e-1aad-4283-ae4a-1677cf094d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ab:d1:75:17:cd:86:9d:7d:ad:54:6f:b8:a7:
65:51:a2:4f:1a:70:5a:51:c1:15:50:d8:39:e3:a5:
ab:14:a7:f3:68:6d:f9:5c:5c:d0:a7:b8:95:1e:41:
6c:a4:9c:ef:a8:f9:d4:cd:c1:64:db:e1:41:7f:8c:
18:58:01:36:b3:cb:12:61:73:33:e3:cb:c5:a8:a2:
c5:c9:c2:76:da:35:ef:1e:8b:fe:aa:81:4d:d6:9c:
26:03:44:6f:36:7b:81:cf:da:fa:bf:ff:99:78:04:
2d:cf:f4:ef:31:cc:dc:93:fa:a6:59:d6:f7:c2:9b:
38:51:23:a8:01:dd:40:88:71:8e:86:b4:9b:33:53:
3f:86:68:2a:1d:9c:d1:71:e9:3e:f2:b1:69:07:48:
25:68:06:ae:cd:2b:21:96:84:3c:26:9b:f7:25:68:
e6:ed:4c:85:35:a6:b2:4f:60:17:f0:e5:00:27:3a:
1a:94:be:f4:e6:67:5d:99:3b:d8:25:ac:cd:c4:a6:
ea:f6:f5:16:3e:81:f3:f1:63:e9:57:92:c9:98:73:
53:2f:28:ea:fd:fc:96:8e:ce:d9:2f:31:4a:2f:c4:
92:73:4b:55:96:4f:56:f8:66:54:83:10:7b:26:70:
2c:ae:d3:fa:d2:0b:1d:54:5b:ef:d3:78:76:94:73:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1B:9B:FB:AC:68:DC:D3:93:10:4A:96:E8:60:E5:5A:5B:5C:CF:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9cea491b-289a-3c62-abf2-8323bd4990bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.26.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:c2:bb:d0:51:7d:a2:d1:ae:37:58:77:34:a7:5a:e2:bb:30:
59:38:eb:76:34:98:e6:59:4f:74:e9:19:67:0e:4f:e4:ce:09:
35:88:82:82:df:ef:3a:66:67:ae:cc:d7:e7:b3:e4:67:23:fb:
7f:e5:4b:f9:32:1d:a1:84:95:f0:1d:d4:d3:0b:de:2c:9f:cc:
06:9f:8a:20:03:de:4b:2d:14:e1:3b:85:7e:7c:f1:30:e9:42:
07:e3:55:b6:1b:81:56:e4:da:68:11:c0:a4:4d:d4:ed:54:66:
f3:1f:da:5a:a3:08:25:ef:01:0d:62:02:fa:11:42:3c:6d:97:
e9:95:85:06:41:88:f7:76:b3:56:03:98:ba:3a:8b:37:ae:87:
3e:6a:0d:3f:6c:8f:45:88:c6:75:e9:59:91:03:58:8c:37:a2:
89:7a:2f:5f:fe:38:8d:c1:b9:3e:d8:b5:ac:f6:0e:f0:f8:12:
ca:11:04:dd:e4:9a:76:5e:49:58:d5:00:ac:34:bc:d6:0a:0c:
f1:af:0d:d1:4d:2c:c1:23:49:47:94:6a:42:47:93:a0:dd:09:
1b:c1:cf:4c:51:cf:62:c7:28:4e:79:da:92:4f:12:0f:9c:80:
ce:e2:2c:b7:7e:f1:3e:17:00:b0:84:23:77:43:4e:69:a7:4a:
19:80:ac:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:49 2023 by rpki-client on console-fra.rpki-client.org