Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfd243c1-474d-3652-864c-7d3d7afe26c9.roa
File: dfd243c1-474d-3652-864c-7d3d7afe26c9.roa (raw, json)
Hash identifier: ZwzsgLGhYTLX/RunOEvnvtiCpK9F+9Bx8z36v8lVCYo=
Subject key identifier: 26:6C:A4:2B:D7:D0:77:D6:22:F3:05:56:34:BB:2D:F8:1A:C8:A9:E8
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA79F74583AFF91B0838B02E0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfd243c1-474d-3652-864c-7d3d7afe26c9.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:9f:74:58:3a:ff:91:b0:83:8b:02:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=a6a45013-3f80-4336-ab86-a6a16e834ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2a:1b:99:af:65:7e:9f:a8:a9:f9:3e:72:61:
46:42:df:ca:97:9d:4a:cb:c8:0f:40:0b:45:d2:c5:
6d:4b:95:fd:24:ac:28:0a:b2:98:c7:01:82:dc:3a:
04:94:ab:61:fe:ef:e7:9a:07:55:5c:ee:98:79:ef:
8b:aa:c0:84:e9:31:6b:7e:be:19:4d:4a:aa:f1:2c:
f5:1b:65:35:28:de:0b:f9:bb:fe:ed:50:67:e8:94:
9e:c4:44:2f:11:a9:c5:84:0d:96:fd:88:f3:b6:42:
f4:33:0a:de:7c:13:4a:12:1f:7b:08:d6:18:7d:cf:
77:56:4d:97:10:89:e3:fe:24:65:0f:e5:30:dd:20:
3c:b1:b0:3d:47:2e:d9:95:b1:f4:74:0c:ec:05:99:
99:53:94:53:50:a7:fd:15:c0:03:ef:56:17:a7:d8:
97:a3:04:a1:1a:62:f6:85:19:59:9f:42:8e:98:a8:
13:a9:25:f5:71:f8:ca:d9:2f:ab:59:bb:e4:66:c9:
b9:09:8f:62:49:fd:7b:f0:55:b5:9e:18:ff:07:96:
ae:59:c6:e0:5d:3e:06:fc:0e:f9:db:b8:92:c0:29:
ab:73:38:dd:64:72:b8:0d:f1:3a:97:1c:49:7d:f1:
61:2d:c4:2d:f6:84:3b:64:42:0f:48:b9:d6:fa:5e:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6C:A4:2B:D7:D0:77:D6:22:F3:05:56:34:BB:2D:F8:1A:C8:A9:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfd243c1-474d-3652-864c-7d3d7afe26c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:c3:3a:cd:45:dc:f0:f3:26:18:10:27:db:1e:5d:b6:69:c1:
46:f9:72:db:17:b9:19:2c:ef:89:ac:5c:06:65:dd:11:28:ce:
7c:13:c3:21:5e:c3:e3:7d:a9:74:4b:cd:24:c7:53:6b:f5:7f:
33:ce:d5:c3:e9:b9:8e:1e:6a:b8:a6:69:65:43:10:b8:a5:24:
e4:66:91:5d:28:f5:96:9f:86:2d:2e:07:9d:31:dd:b9:c0:6d:
fd:af:85:0a:4e:de:50:77:16:b4:dd:2a:8f:3f:83:60:27:1e:
ab:33:97:dc:34:4b:30:8f:27:c1:57:98:c3:28:63:e1:90:a2:
09:42:72:61:76:6e:91:cb:10:ad:b9:c0:ef:1b:4c:6d:f8:ea:
6e:d9:c1:7b:3e:66:04:ca:7f:6d:e0:56:82:12:ec:46:04:a0:
de:c5:c9:23:7b:6d:f0:3a:7b:a6:df:a6:22:ba:e7:1d:ae:28:
dc:ba:80:13:f2:72:9b:ba:59:7d:17:b2:6c:39:e9:2d:7c:ee:
f4:60:c2:6d:bf:42:bc:ec:a9:84:13:aa:c3:cd:f4:0d:b6:3e:
d2:42:c7:0e:32:19:f2:b1:52:c9:e5:eb:32:60:22:bb:60:52:
fb:eb:ef:41:fd:a8:f7:2b:61:1d:94:fb:d7:36:8c:70:20:c1:
1e:8c:90:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org