Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5345de88-044d-3dae-903a-3d1f55b1ca53.roa
File: 5345de88-044d-3dae-903a-3d1f55b1ca53.roa (raw, json)
Hash identifier: kiJssvY27bRHJrutx/JbbvNDgeI50Krkljjb4/FTDg4=
Subject key identifier: A7:71:43:02:11:62:A0:36:B9:6C:AB:1C:0A:F7:C3:28:EB:DE:89:F2
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7AADD66BBA4C27118BC3380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5345de88-044d-3dae-903a-3d1f55b1ca53.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 74.125.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:aa:dd:66:bb:a4:c2:71:18:bc:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=21d2db29-398c-4395-a367-997ad02bf239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:3b:b3:45:86:11:f9:a1:ba:cf:e2:0c:62:
34:6b:f3:35:b8:10:dd:65:61:2b:e4:f9:4b:84:20:
22:75:5f:12:30:bd:2d:44:01:0a:63:e8:e2:00:66:
dd:4c:6c:7e:24:05:2e:1e:d5:52:b3:78:54:94:02:
55:45:41:11:95:57:53:ee:d6:32:c7:e1:c9:47:6e:
8b:4c:08:a7:39:8e:c6:0b:49:5a:11:75:02:0d:4a:
3d:08:09:66:f1:5b:e8:dc:73:af:cf:b2:f2:69:4e:
47:97:0b:21:87:4f:00:bb:d8:83:16:a0:ce:bf:06:
6f:03:67:72:fb:06:72:d0:d7:93:14:26:b4:42:1c:
f8:b7:31:71:c8:24:05:06:8c:7e:06:b2:07:ab:eb:
08:7f:6c:ed:b4:37:29:d3:63:9a:ee:5b:16:e6:bb:
03:ab:47:26:ce:fa:05:35:43:30:82:8b:61:58:b0:
90:36:a0:ae:4c:bc:c5:28:49:70:81:62:34:fc:80:
97:cb:cd:01:46:65:14:fa:56:cd:9e:e9:39:26:3a:
31:75:95:ab:ad:b2:b2:35:f1:52:fd:37:c8:d0:be:
10:1d:49:7b:71:8d:ec:d7:3d:3d:9e:6a:81:55:e0:
57:ce:7c:57:31:54:91:97:d2:31:35:40:e9:b7:cc:
1f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:71:43:02:11:62:A0:36:B9:6C:AB:1C:0A:F7:C3:28:EB:DE:89:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5345de88-044d-3dae-903a-3d1f55b1ca53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:51:ad:cc:c2:a2:52:ff:b2:c6:31:83:fa:b7:62:81:16:09:
39:07:dd:40:31:1a:23:c4:8c:93:83:69:78:d5:7c:ca:c0:ce:
6f:d9:b3:37:64:0f:5e:a7:01:fb:a2:8c:2a:83:8b:17:97:65:
9b:79:25:a4:cc:7b:37:33:ce:88:2b:6d:41:e2:7e:29:ae:f2:
e5:67:d1:5f:2c:ec:c7:91:d3:28:23:bf:41:e4:ed:16:8f:ba:
9d:72:20:0d:b7:b1:d6:a9:88:14:0c:84:ba:85:3d:48:d5:b7:
bc:f6:c0:36:61:d8:60:fe:4e:92:1c:e2:d3:74:3a:cd:13:7b:
02:59:14:8e:ae:93:87:1c:c8:3a:4b:a8:53:db:28:01:f7:80:
0e:5a:95:3a:19:0a:6d:ec:ae:9e:3b:0d:56:3f:5e:ac:13:e0:
9c:f4:ec:a8:c4:45:71:e6:8f:b3:61:c9:77:fc:f7:74:98:30:
fc:be:97:06:fb:91:cc:5c:91:97:89:9e:75:76:f2:4b:5d:6e:
c4:84:fc:b3:1d:37:cb:1d:1d:1e:e9:2e:da:9a:5b:12:77:dc:
d4:cb:51:13:bd:6e:4b:9c:09:13:81:e1:85:c2:72:06:1f:ca:
2e:22:70:bb:61:57:7b:25:52:d9:29:59:6d:c7:fa:ab:e6:05:
ea:86:7a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org