Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/59a4de48-8765-3ae3-8338-c7ec2a7ec42c.roa
File: 59a4de48-8765-3ae3-8338-c7ec2a7ec42c.roa (raw, json)
Hash identifier: 1YXjuWCPG7S2OX13XmPR2QgKTeQBOW9yo+/DAQfs5UI=
Subject key identifier: 6F:DC:31:73:6F:87:90:23:59:A2:C8:17:BF:68:5B:55:3F:03:FF:85
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7AD88E65D290F40D44E1100
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/59a4de48-8765-3ae3-8338-c7ec2a7ec42c.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ad:88:e6:5d:29:0f:40:d4:4e:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=6c602e75-77c7-47d9-bd22-507e3099f1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:a7:f7:e8:56:12:9e:21:0e:b8:6f:91:84:
09:b4:75:9a:51:2c:34:6b:d2:f7:95:99:f0:7f:bc:
1b:a8:16:85:f5:cb:81:fb:9d:e7:e3:e4:f1:bc:cb:
75:bc:0e:dd:72:7c:2f:52:94:40:7b:2f:56:bc:0a:
54:ed:a6:33:31:d0:25:af:22:6f:a0:8e:44:9e:e7:
a3:40:d7:7d:f7:66:a2:27:4e:50:04:52:69:22:3a:
83:f9:91:28:22:2e:29:09:34:b1:f7:c1:83:45:dc:
6b:2d:24:91:f6:70:e0:ca:63:9d:c3:13:7b:52:96:
7e:e5:8c:b1:f9:9e:40:ba:6a:ba:dd:4b:3e:12:4d:
8f:0c:40:bd:57:bb:69:b4:11:06:a2:2a:45:6f:bc:
51:f7:4e:43:6c:bd:2d:e7:66:b5:b9:63:de:41:29:
34:05:41:f1:8b:da:33:6e:b2:75:c8:1f:f0:e6:b8:
78:6b:d0:9a:8f:33:3f:84:13:14:16:d8:d2:51:09:
42:1f:3f:3c:e9:1c:b0:8d:9a:61:a7:ac:9f:7b:fe:
b9:6f:5c:10:ff:77:75:96:c5:81:9b:33:2b:55:50:
12:7d:cf:c9:ee:84:61:4f:be:23:60:8b:2d:7e:fc:
a4:63:8e:c6:64:94:76:62:c7:9a:85:67:e1:2b:8b:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DC:31:73:6F:87:90:23:59:A2:C8:17:BF:68:5B:55:3F:03:FF:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/59a4de48-8765-3ae3-8338-c7ec2a7ec42c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:4b:8f:1e:88:8a:fc:67:e0:7c:b9:c0:74:b9:c7:e7:79:f5:
cf:80:a7:a5:a6:25:54:4b:5c:0f:8e:15:de:18:84:df:1c:1b:
26:63:3e:9c:72:9b:4e:fc:3a:39:0a:8f:c1:47:17:71:fb:31:
e7:e0:89:5c:7f:ce:6b:22:da:d5:f2:95:49:e7:23:b4:c6:15:
33:4b:53:ad:2e:b2:93:78:31:48:0c:e3:af:35:fd:8d:3c:17:
d5:2c:fd:22:f3:72:12:e5:38:b7:fc:9a:0c:da:af:71:86:0e:
64:c7:c6:9c:9f:4b:7b:bd:19:e8:64:bf:00:da:37:74:c8:76:
d9:1f:fc:c9:fb:21:3b:0d:c1:ef:ef:d6:84:cc:5b:4b:64:93:
e8:e2:e9:a0:af:42:dc:02:6b:f5:62:10:3d:15:d4:65:3a:23:
0d:f1:9b:96:a7:e3:cb:28:77:a6:aa:5f:42:99:2e:03:a8:27:
87:97:d0:98:44:34:be:95:20:67:d8:eb:b2:64:6e:bf:b2:53:
91:01:74:28:cf:df:93:05:62:dd:69:95:b3:15:b0:d3:41:42:
d0:53:90:70:85:46:db:c3:85:09:d6:c7:11:b0:eb:f2:42:fc:
da:e3:7e:cb:87:00:92:5e:b7:73:77:d8:2c:5c:51:52:66:ae:
cd:3b:e5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org