Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dc5cd888-f8fb-33fc-8227-2099a33d9633.roa
File: dc5cd888-f8fb-33fc-8227-2099a33d9633.roa (raw, json)
Hash identifier: N08UYkNKPRyvJ1E/5CrOz/rcL7ICXR9SsMBbJ2/lFH0=
Subject key identifier: 47:D0:66:36:97:F1:F6:E4:27:FE:6A:16:1D:F6:C7:A8:28:CC:83:8A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7C1FB551BE67664E6A1CCB0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dc5cd888-f8fb-33fc-8227-2099a33d9633.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c1:fb:55:1b:e6:76:64:e6:a1:cc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=9d071825-6f2c-4aef-a10f-e30df8761273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:39:bb:b2:6d:32:9f:73:ed:c9:db:80:79:
ea:4f:65:18:81:78:ce:3f:fa:a1:59:1e:b9:6a:8f:
2e:77:36:8a:0d:90:3c:4e:41:7c:12:ad:96:94:ce:
a7:93:aa:9d:7d:4b:e9:72:e1:bf:62:c7:c4:43:37:
32:4d:f6:53:eb:16:ce:61:cd:8f:21:61:e1:d5:41:
2b:bb:39:7a:67:5f:77:3a:f9:db:b8:68:38:5f:9f:
d8:70:e3:bb:ac:33:3d:e0:8e:a3:27:fc:df:19:35:
c2:17:af:13:49:c4:4a:76:0e:3f:46:37:ae:7f:94:
2d:9a:d2:d0:e3:8b:68:0f:59:3d:46:f7:59:b7:ba:
7e:cf:94:5d:41:43:c0:b1:57:b7:5f:88:88:fe:5b:
d5:2f:27:a9:aa:41:ba:c2:c5:4e:67:17:4a:32:d2:
f3:10:43:a2:bd:22:11:d1:a9:7d:a8:17:be:9b:2a:
5c:df:db:a1:2a:c8:5b:30:04:8f:1c:8f:ac:09:fe:
09:43:d9:96:ed:b4:1b:13:da:bf:85:5d:5c:ea:86:
32:82:02:79:2e:47:66:49:f9:9e:2e:23:8d:2e:fe:
91:83:0a:5e:89:29:60:30:cb:a4:5c:45:11:e4:2e:
70:01:3b:19:7b:5c:c2:ca:d4:06:aa:ed:e3:9e:26:
f2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D0:66:36:97:F1:F6:E4:27:FE:6A:16:1D:F6:C7:A8:28:CC:83:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dc5cd888-f8fb-33fc-8227-2099a33d9633.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:9b:f9:e2:ea:a8:0b:03:e2:3d:c3:51:fa:6f:e8:27:a7:8f:
79:ae:a2:4f:d0:4d:fa:a2:2f:db:38:e9:93:ed:80:6a:c8:de:
b5:e3:81:08:13:25:67:82:7e:ad:4b:9a:08:71:5d:5a:e1:4a:
2a:a6:0f:1d:c3:51:7f:c5:f1:a8:20:df:cb:d9:65:dc:5b:84:
71:ca:8d:5f:df:85:1b:49:84:58:6b:e8:e1:85:24:d8:b3:b5:
1a:5b:4b:77:30:15:a8:32:78:18:cc:23:57:09:ff:d7:55:03:
e5:24:17:6e:0a:07:4d:7b:37:72:2c:d4:fe:6b:52:1d:2a:91:
8a:c2:89:0b:32:f1:44:80:d2:f7:b1:3f:11:52:a6:5a:bc:ca:
40:cf:05:2c:4d:97:da:ba:e7:12:71:57:35:b5:04:84:54:bf:
a1:ab:6c:41:00:7b:1f:6a:59:bc:71:9b:48:3a:eb:6f:ed:8a:
5f:40:a7:85:13:18:5c:02:42:fa:66:d9:fa:d2:77:81:de:ef:
f4:37:72:8e:af:df:1a:f3:f7:ff:3f:2e:c1:39:a1:bb:43:8a:
10:15:60:47:8f:d8:b5:f3:a7:09:0b:7a:db:10:ca:43:ba:c5:
ab:76:24:d0:9d:52:77:ae:08:f1:99:1d:be:07:ce:37:f9:87:
89:b8:07:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org