Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f81b0759-4cf7-3bf1-bea0-04155479622f.roa
File: f81b0759-4cf7-3bf1-bea0-04155479622f.roa (raw, json)
Hash identifier: nIiDiBN4xG0eAJ7xRqkbgpxjBYeHqEaYz2FM8fVKph4=
Subject key identifier: 46:61:F2:21:DE:D2:7F:5C:68:DC:0E:0C:0E:15:82:7E:98:50:0D:5D
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A6AAC4C0D523B4B7F77D00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f81b0759-4cf7-3bf1-bea0-04155479622f.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a6:aa:c4:c0:d5:23:b4:b7:f7:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=e9f209e4-5b1f-475b-b55f-8f697478e928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:26:02:1c:2e:18:24:72:2e:13:9a:96:db:
4d:75:96:33:aa:ed:d6:da:78:15:0f:6a:29:97:e2:
6e:48:ee:9c:20:10:2e:15:21:fb:f6:df:40:be:5d:
e4:01:db:fd:f7:d8:f5:0a:3c:31:df:a2:cc:f9:df:
9c:cf:d8:4b:16:2d:48:b6:f3:4d:28:d0:07:79:c0:
74:ee:97:1e:64:84:74:66:1f:2f:28:17:10:83:12:
5d:d8:e2:a3:cb:f5:2c:e0:8a:c5:c2:05:30:b5:ec:
23:ba:a1:be:64:0b:f5:38:70:2f:10:be:44:59:1a:
fb:11:ab:c4:b9:ef:70:ba:1a:45:d9:42:8f:cc:a5:
c7:84:45:eb:0b:78:32:00:16:62:48:4f:09:7e:b6:
d3:f0:14:23:a3:fb:5b:58:21:09:35:0c:69:1a:6f:
64:59:01:18:39:43:79:10:53:e0:c1:be:42:43:82:
9e:16:75:97:19:c3:85:dd:85:47:53:21:60:d9:64:
d9:47:5c:ed:82:f4:27:44:c5:a9:27:d7:01:96:6b:
d8:96:49:5e:d5:7b:ed:a6:47:2e:b1:e3:49:61:cb:
73:b5:8c:5e:62:ba:85:74:fe:0e:34:dc:d8:9a:cf:
37:98:ae:dd:44:b6:e5:24:8d:5a:de:9d:24:d6:84:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:61:F2:21:DE:D2:7F:5C:68:DC:0E:0C:0E:15:82:7E:98:50:0D:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f81b0759-4cf7-3bf1-bea0-04155479622f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:7b:fd:a5:77:f2:62:69:be:df:46:96:aa:f6:ac:72:68:eb:
65:71:d2:c6:38:ed:b5:34:f0:3a:2e:3d:84:fc:2f:d8:94:ef:
e9:d8:c7:e4:a3:1b:14:46:27:92:d3:40:4e:34:d5:55:74:24:
92:2c:7c:39:19:03:78:fb:b8:a9:de:35:b0:66:06:34:07:ed:
08:8b:55:0b:44:d9:c3:b6:28:74:f4:c5:f8:cd:8f:42:0c:58:
d3:94:59:89:64:3f:fa:ad:d8:5c:d2:33:86:f6:81:e1:6b:27:
63:7c:63:5b:48:81:e0:05:4d:91:99:13:6e:34:a5:eb:69:bf:
94:9c:53:0b:07:f3:80:22:ac:ad:73:41:2f:77:f2:99:e0:37:
f9:f6:f1:4a:21:21:85:97:1d:3c:a9:9a:60:a4:c7:c5:98:17:
6f:33:b2:69:97:0a:92:99:42:ca:b9:23:85:46:a7:28:ed:12:
3d:36:52:ab:9a:27:55:0c:fd:c7:eb:db:83:99:3b:c2:9f:60:
a2:63:0b:2a:5c:1b:ce:6e:1f:ed:eb:ca:80:1e:f0:ea:63:0f:
6c:9f:fa:3b:98:f9:d1:ec:80:38:35:8f:2e:5d:06:74:66:00:
fb:f9:e5:b3:e8:64:30:d2:51:77:25:c4:67:4a:52:9f:eb:39:
27:e8:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org