Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/37dc14ad-790b-3ffd-87bf-185323545b71.roa
File: 37dc14ad-790b-3ffd-87bf-185323545b71.roa (raw, json)
Hash identifier: 89OiUAbTYWp3KPvzk2cpGi3equNdYEaz4pawq2HfKA4=
Subject key identifier: 2A:72:EF:4B:23:86:5A:8A:75:EF:C5:82:DF:8F:53:7B:CB:DD:06:64
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7C175CE6DE79F3407B2EA00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/37dc14ad-790b-3ffd-87bf-185323545b71.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c1:75:ce:6d:e7:9f:34:07:b2:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f86ccf54-e7ff-48cd-9f94-f646fac54291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ff:e3:c4:14:a4:47:ed:a4:26:43:6b:8a:47:
86:da:9a:42:6a:57:24:35:58:d5:03:5e:b2:d6:b0:
f1:65:27:df:c7:bb:6b:1d:3d:89:ff:e4:4a:e6:9a:
41:3c:42:ef:a3:c6:cc:b1:37:fb:a6:38:ce:52:f0:
7e:06:e9:01:8a:cf:f8:fa:f1:66:2c:4d:bf:de:00:
ea:da:44:4c:0b:79:e8:4f:81:c7:94:d6:de:3f:05:
6c:54:86:63:21:a6:16:f0:f1:54:18:19:f6:19:f7:
48:e6:a2:32:13:d9:b0:37:d7:fd:f6:d8:e8:3b:80:
6b:ce:96:22:a0:e8:53:53:d2:12:a3:73:1e:97:25:
2d:54:23:ec:76:be:22:0c:09:b2:92:96:8e:8b:e7:
11:01:97:94:02:d0:16:81:ea:c0:c6:2c:cd:ff:be:
08:b1:44:ed:9b:30:f7:67:9d:d0:41:6f:a1:b8:db:
12:65:8c:4e:1d:58:ed:3f:09:56:a1:29:b9:97:cd:
f4:4d:35:60:61:5a:66:b1:7c:8b:19:8e:e7:66:0b:
f0:57:e9:94:cb:d5:70:23:fe:f6:06:33:ac:19:6e:
c4:2d:02:79:27:04:36:e4:b3:4d:c3:c2:c8:24:bf:
66:51:33:dc:54:b5:d8:38:33:cc:7e:ae:d5:16:90:
88:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:72:EF:4B:23:86:5A:8A:75:EF:C5:82:DF:8F:53:7B:CB:DD:06:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/37dc14ad-790b-3ffd-87bf-185323545b71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:73:a9:17:d2:53:84:93:47:56:a7:20:fc:4b:87:88:f7:47:
b4:64:44:aa:90:f8:fd:8d:39:d4:35:96:5b:4e:54:cc:6f:cd:
db:7c:d8:d4:2a:9e:4a:99:7a:b4:41:be:50:e8:f7:38:53:d2:
05:53:d9:ef:e4:31:ad:7b:68:e9:ea:31:fb:ea:2d:e7:a4:e6:
b6:2e:aa:82:56:20:93:a6:d6:ab:8b:48:5b:b4:a8:5a:dc:26:
2b:fc:ba:82:2a:5d:e0:c0:a2:9c:09:29:12:18:b2:ae:3e:95:
43:aa:b2:77:46:77:2a:54:9a:8f:8f:46:07:3f:d9:4f:92:0f:
97:87:76:e4:46:56:c0:df:6d:ce:a4:35:da:c0:7c:05:07:da:
d3:08:f8:2f:0a:00:65:c2:c9:bc:1c:8f:e9:ca:d2:74:07:a8:
db:8e:45:6b:06:f1:98:0b:7c:d1:35:e5:a9:5b:2d:05:c2:27:
5a:76:17:9f:bf:44:78:f1:ab:7c:bc:f4:22:d2:9b:72:b8:fa:
53:e2:f3:6e:27:2c:f9:58:f7:f7:e8:34:6e:9e:fe:12:a2:83:
70:b3:4a:bd:0b:f0:a2:e5:45:19:c5:1b:2c:30:e8:7c:8a:bd:
93:0f:ea:3c:d3:f4:02:b3:fc:c0:21:fa:80:b0:3e:97:a3:a6:
f4:b2:6b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org