Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b7e7ca7a-d28e-3a9f-9340-1668cda4c211.roa
File: b7e7ca7a-d28e-3a9f-9340-1668cda4c211.roa (raw, json)
Hash identifier: pT5uaWXIn8ctAtDZ1efiBvQlgQZ7XjiPHPNbNjPOubY=
Subject key identifier: 1E:19:3A:81:DE:4B:08:92:D3:0E:12:CA:AB:BE:04:AA:E9:3F:F5:A7
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A1E40BFAA7CCC5DC6B28C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b7e7ca7a-d28e-3a9f-9340-1668cda4c211.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a1:e4:0b:fa:a7:cc:c5:dc:6b:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=1b12356f-d328-47a7-b1b2-47d570ec482a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7f:7a:aa:ea:b5:d8:6a:05:e1:53:5c:b2:73:
32:0a:67:ba:35:0b:3a:cb:86:23:c8:15:9e:a6:a8:
3f:12:3b:c9:1c:02:bd:04:27:1d:2a:36:57:09:09:
9c:07:9f:7b:e9:30:8b:7e:dc:0f:e4:3a:bc:7f:62:
93:b1:ab:35:71:22:22:90:ad:66:9e:cf:51:38:52:
7a:ab:a4:a8:c1:79:7b:33:52:d0:82:d9:e2:b9:7c:
2c:2e:c5:71:d0:70:f1:4e:19:0a:9e:f9:2e:25:34:
99:54:db:04:db:44:68:ce:50:c2:bd:70:e2:5e:c9:
0d:ac:1c:9b:fe:1b:0e:7a:bd:da:cf:ff:eb:7b:81:
67:8b:1d:c6:31:ea:b3:1b:59:5b:dd:0a:0f:25:ba:
e2:b5:ad:2b:3d:2b:9c:5c:78:85:49:52:17:a1:ed:
24:66:e1:91:18:30:ea:73:1b:ee:e9:b4:89:88:6b:
ae:f1:32:97:d4:0a:8b:de:f1:e8:17:1b:79:62:49:
ed:4e:83:74:f5:17:72:9e:bb:86:b6:5a:54:d6:c5:
96:c5:db:e8:4b:4b:f6:bc:a2:c8:df:16:0f:c0:66:
65:40:41:fa:8c:2e:de:8e:5b:f1:2e:a2:2d:df:96:
c5:67:60:b5:bd:24:95:27:50:d7:86:26:02:f4:f9:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:19:3A:81:DE:4B:08:92:D3:0E:12:CA:AB:BE:04:AA:E9:3F:F5:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b7e7ca7a-d28e-3a9f-9340-1668cda4c211.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:4a:15:fc:50:e0:f5:2e:53:71:00:8d:c3:a3:8a:13:9a:37:
bd:ba:90:07:a5:9c:4e:a1:24:d1:d1:04:b6:a7:4e:cd:38:32:
39:44:67:b7:fc:29:7a:ee:75:11:bb:1d:e7:02:33:85:4a:1c:
9b:8d:ca:9f:d5:9c:c3:0c:10:56:e9:1e:d4:18:7e:ef:88:23:
30:bf:69:85:f5:54:d4:ab:cf:90:00:52:3a:a0:f0:0d:1b:f5:
e4:f5:1a:c1:bb:44:91:1f:9b:23:8c:d3:ee:e7:44:24:77:ed:
88:77:1e:77:cc:6a:18:f4:a7:3c:e1:f0:cd:9b:3c:85:ef:0c:
1d:34:7c:71:a6:a3:15:45:74:4b:bd:05:e2:7b:e9:93:06:89:
fe:ce:7d:60:63:7d:be:fa:38:43:82:db:59:0d:52:db:7d:f8:
80:40:51:8b:66:17:60:c6:6e:0a:26:3c:4d:54:f5:f8:83:5c:
af:b3:1a:87:f0:9d:16:00:1f:93:47:4c:02:f1:ef:cd:da:a9:
10:aa:0f:11:0c:60:52:66:e0:65:f7:c3:af:88:b4:03:4a:d2:
8d:31:fd:1b:03:6b:81:b2:60:ea:4a:45:d7:a7:06:0b:a0:77:
82:25:92:81:d8:ea:84:4b:d7:54:6e:2a:c9:80:93:a1:7c:a3:
00:8f:cb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org