Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ca9a497c-f5fb-312d-b40f-7f211f0f2212.roa
File: ca9a497c-f5fb-312d-b40f-7f211f0f2212.roa (raw, json)
Hash identifier: qR77ldYgnADNC+iKvXRqB77tC/qP5o9aWjI/v6Syl+A=
Subject key identifier: B2:1B:FC:C7:93:C3:5B:C0:46:95:FA:2B:A0:63:A3:47:59:89:10:BE
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7C41429B641400B346B0780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ca9a497c-f5fb-312d-b40f-7f211f0f2212.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c4:14:29:b6:41:40:0b:34:6b:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=00d06fef-8c87-43ab-b5bd-f7d6d1fc143c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:83:0f:4a:04:9e:99:f8:7e:72:3a:33:c6:
87:b5:f7:b9:81:8c:dc:55:5a:44:28:bf:2e:4a:b7:
9e:77:6a:37:99:75:ba:1c:01:b8:87:c0:d8:ce:af:
34:12:1a:1b:a1:ef:77:30:30:c9:5a:86:85:b5:df:
fd:d9:1a:3f:d1:b9:8a:d8:dd:6f:3f:8d:7e:56:93:
c7:3a:50:56:c3:4b:4b:92:ef:35:84:2e:d0:91:5d:
ed:8c:78:94:5c:e3:f3:95:99:04:fe:fa:f5:0a:06:
53:4b:c0:10:08:85:47:2e:3c:ad:ce:95:55:ff:10:
a5:37:f4:f4:76:c0:a1:80:ce:30:01:45:cd:aa:66:
fb:05:ec:23:c1:75:00:48:c9:33:a9:47:fa:dd:92:
20:d5:a6:b1:00:80:f9:e5:2e:c6:9a:84:e7:ec:84:
5a:ab:01:a0:2d:3b:07:a9:37:3d:27:04:1d:5a:4c:
f0:88:8c:75:b7:21:34:63:5a:78:93:57:d4:2a:08:
82:50:bd:13:50:88:a6:bf:23:b0:ca:e8:8d:ca:ad:
d8:7f:84:90:ba:9b:37:33:3f:df:ea:5c:0c:6b:49:
31:80:9f:cf:c4:59:75:4b:2f:50:50:74:67:3a:b5:
6d:e5:3a:df:1a:cc:11:b3:85:65:6c:b8:2b:ec:fa:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1B:FC:C7:93:C3:5B:C0:46:95:FA:2B:A0:63:A3:47:59:89:10:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ca9a497c-f5fb-312d-b40f-7f211f0f2212.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:e3:d8:5e:66:1e:48:31:b5:9d:a1:9f:df:db:1c:4f:8c:b3:
80:40:30:4b:e0:19:7b:60:a4:10:b3:ed:a9:fb:db:2a:3a:9d:
89:12:2f:29:61:b6:42:ef:31:be:ab:b1:f5:44:3b:79:b6:57:
5c:c0:2e:ab:1e:59:a7:6f:0e:fc:2e:ea:30:df:66:cc:9e:ea:
b6:3c:67:96:cd:62:f3:4a:1a:e8:00:7a:6a:0a:7c:d6:3b:94:
80:90:f3:cd:f7:87:6f:fb:31:dc:58:07:ba:4c:f3:90:dc:8c:
f2:90:7a:85:05:c2:bf:ac:d2:f2:1b:b4:0a:5f:6e:d6:f1:89:
f0:cc:03:b0:12:d9:fb:8d:ea:63:09:e4:f9:8c:32:3a:ba:22:
15:d4:2b:c7:ff:c5:93:22:9f:c0:6e:7a:df:96:d7:81:d9:27:
74:ff:f1:a8:36:ef:18:ce:07:21:bc:bc:e2:23:a3:17:58:30:
d4:ce:10:46:4a:c6:df:dc:65:9c:3b:0d:a1:a1:b9:4f:a1:a2:
9e:74:f6:a6:b4:64:bc:02:9a:76:ff:b6:c4:48:c8:c4:1c:e8:
b5:71:65:da:30:30:70:65:cd:71:6b:19:73:e2:b2:33:96:13:
e4:25:40:96:8a:39:dd:ad:46:e3:9e:76:55:92:6c:e2:2e:54:
9b:de:7d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org