Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc7e7b0c-916c-3027-84a4-e9632a25eee7.roa
File: cc7e7b0c-916c-3027-84a4-e9632a25eee7.roa (raw, json)
Hash identifier: e10pUTkpcDEO/DKc8Qm/d/ecl06tJhthStEj2HAROns=
Subject key identifier: C8:A4:B7:D6:7B:F3:87:AC:35:CA:52:A7:A6:85:E8:88:BA:9F:08:79
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7C0E9CCDE833656E1A5B200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc7e7b0c-916c-3027-84a4-e9632a25eee7.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c0:e9:cc:de:83:36:56:e1:a5:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=a356fcf3-0333-48d2-a9f0-cb37a5233bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:32:99:42:a6:3e:e2:d3:fc:e4:f3:36:be:3a:
94:70:04:05:59:80:f1:f3:56:e5:a4:80:78:4b:a9:
de:94:6e:c3:5f:30:9c:a7:d7:01:2e:41:78:d5:aa:
e8:ce:f9:95:ae:b8:e8:49:e8:f2:c8:2a:b7:1f:db:
8b:44:19:99:47:b5:ec:91:63:88:d5:0c:25:2c:ea:
d2:08:de:ff:3f:e9:c1:b1:10:dd:05:13:8d:00:34:
ae:6e:78:84:4f:ba:43:2d:79:70:76:d2:f7:d2:d7:
95:b2:a6:31:4d:8f:35:47:4c:34:5b:3d:49:d1:30:
76:ec:c7:87:9f:1d:4a:8d:f3:a7:29:e0:d5:b8:48:
fd:fc:65:a8:20:a6:96:f1:e7:b5:33:3d:0b:a6:88:
17:64:d1:a1:38:df:b5:6b:32:5f:6d:92:89:46:56:
45:da:79:fc:ea:4a:b8:67:23:f5:00:4e:7d:94:c1:
e6:3f:3e:77:bb:1f:b0:01:f3:ae:b4:c1:37:37:ed:
4b:54:33:0f:dd:5d:f8:b8:48:92:79:17:9a:ea:33:
78:de:9a:d4:2a:04:e7:1f:5a:b8:71:dc:c3:f9:53:
29:b0:a5:91:49:84:e2:ba:44:5b:a1:eb:36:d2:d8:
06:d7:5c:bf:ae:bc:e7:f3:76:b7:c7:75:e1:24:f1:
52:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A4:B7:D6:7B:F3:87:AC:35:CA:52:A7:A6:85:E8:88:BA:9F:08:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc7e7b0c-916c-3027-84a4-e9632a25eee7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:9e:f6:75:e8:ce:46:20:91:16:25:db:65:53:fa:71:25:f1:
5b:5a:a7:8f:41:bd:71:db:58:3a:ba:cf:0f:f0:38:21:8d:92:
d7:93:ec:13:91:69:7d:0d:1e:ed:24:46:13:48:01:2d:cc:36:
92:95:f1:6b:5a:0a:a3:ad:d7:b9:71:25:6d:56:24:ec:c6:b8:
e5:a3:8b:bb:50:69:f0:b8:d7:31:a1:8a:3e:ea:87:5f:93:3b:
ee:67:e2:8e:d1:1a:5d:22:e8:b0:62:76:77:d2:60:c8:64:3b:
b5:46:8c:c1:16:dc:8f:26:7c:c3:e1:09:3d:2c:48:06:ca:a9:
5d:50:fb:83:0f:89:53:fa:3f:2c:02:03:57:0a:b4:b8:b2:61:
a0:3d:d3:ac:04:57:3c:0a:fd:52:24:f9:8e:2d:32:5f:db:05:
9d:44:79:bf:61:c8:3b:2a:84:6d:5c:88:f4:eb:1f:a8:2d:e1:
cf:b5:ec:b9:65:ae:1c:a6:c9:72:ca:5f:f6:52:e6:55:60:9f:
4f:89:0f:e7:5f:32:78:74:6e:d8:96:5b:62:ca:c2:30:be:a8:
3b:2d:94:a1:02:09:43:cd:28:b1:16:8b:09:cd:3c:19:ab:f5:
e3:47:53:16:9e:e9:fb:5c:4e:8e:b9:d2:5f:b0:98:ac:81:b7:
d1:0d:c3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:50:02 2025 by rpki-client