Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c2cc1b01-2535-3a14-bfe8-132e5f9b3d65.roa
File: c2cc1b01-2535-3a14-bfe8-132e5f9b3d65.roa (raw, json)
Hash identifier: TTJa0+CGJ23OsvwdMvSegpGStMiwI8Rus4FIJ241kwc=
Subject key identifier: 72:A6:C0:33:D1:9F:20:13:5D:5A:43:8C:B7:25:F4:A4:92:38:F8:0E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A2F5BFA1BC14B540D36280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c2cc1b01-2535-3a14-bfe8-132e5f9b3d65.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a2:f5:bf:a1:bc:14:b5:40:d3:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=de49124f-11e0-4284-95db-5485c35e53f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:38:8b:7f:56:8c:d8:ff:05:59:97:f4:7a:4f:
31:41:98:5c:1e:2a:01:da:77:23:15:16:8c:b1:dc:
65:c1:14:5a:cf:c9:df:78:5d:57:40:60:73:23:61:
fb:07:1c:06:7f:8f:d6:2b:fb:4e:b7:62:03:44:00:
74:db:8d:8d:69:a7:4d:46:cf:48:c5:61:df:55:05:
6a:3b:01:fc:c2:e4:6c:2e:a4:e6:7f:b3:4f:53:be:
a1:2a:86:9d:da:49:c6:0e:6f:50:f7:b4:99:96:3c:
fe:57:c0:e1:c8:c1:49:b3:2c:11:0b:df:73:6a:2b:
11:bf:02:d7:16:31:cb:22:5c:e4:77:60:90:22:8b:
de:9a:b5:4c:f5:61:72:53:0e:22:00:ee:0f:01:46:
82:53:cc:10:c1:ab:da:fa:58:ce:d6:ca:b6:0b:93:
b6:87:8a:39:dd:34:6e:0b:6d:df:f8:fd:83:3d:89:
c9:a7:64:1b:0c:d8:80:55:38:99:44:ec:a5:f2:6d:
e6:89:0e:69:ab:b1:d5:67:8c:9c:44:32:26:7b:9c:
2c:2d:03:4d:77:0d:dd:0c:80:af:fa:c1:52:ff:64:
98:7c:60:77:7e:f0:c9:48:11:61:b2:0f:37:c3:cc:
93:ee:c7:33:42:73:4a:45:d5:44:13:45:f4:7c:bc:
9c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A6:C0:33:D1:9F:20:13:5D:5A:43:8C:B7:25:F4:A4:92:38:F8:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c2cc1b01-2535-3a14-bfe8-132e5f9b3d65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:5b:94:dd:8e:d3:b2:75:3c:6a:57:9e:80:2d:63:56:09:b4:
03:0e:b1:15:c1:81:7c:22:c7:eb:34:df:b8:4f:12:22:8a:57:
a7:d8:6e:d3:5c:f9:9e:ea:9f:20:26:d9:a1:7f:5f:11:e9:9d:
1e:79:f0:cc:a2:62:ef:5e:b5:22:f4:78:0a:ac:45:a6:0e:9a:
1a:21:8e:87:81:d8:73:c7:20:31:cf:1c:96:50:ab:a8:61:97:
94:aa:2c:f1:df:1e:3a:e2:ed:23:9e:b2:71:f3:a0:ac:1d:52:
12:d5:0f:5a:4c:88:e5:80:e6:0d:c4:08:51:bf:4e:0e:93:54:
2c:d2:8c:17:cf:d0:23:61:b7:4a:5f:9a:5b:ae:04:0b:c0:1f:
68:ca:e0:76:fd:ff:76:03:aa:ca:2c:73:e3:e7:99:cf:20:c7:
c6:c8:f6:d0:d7:3f:1c:44:4a:87:ce:b3:ce:2d:95:6e:df:a3:
0a:4f:57:d1:9c:c8:55:83:87:2f:61:b8:4a:b1:af:5f:1f:9a:
03:e8:69:d8:b7:54:6d:3e:c2:b3:a9:87:77:15:01:64:ed:f2:
ed:02:b6:30:97:f0:f6:de:5c:7e:94:e2:c3:a1:df:c4:4b:cc:
6e:be:4a:a1:ba:34:e6:08:ca:85:a5:5f:0f:86:07:43:bd:d8:
45:51:3e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:49 2023 by rpki-client on console-fra.rpki-client.org