Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f0ea3fc-e521-398d-b360-47b62f532916.roa
File: 7f0ea3fc-e521-398d-b360-47b62f532916.roa (raw, json)
Hash identifier: jDAmSR7MXe6yNCV63RiF8XqEJKComa0AhQZ+o++A6dM=
Subject key identifier: AF:B2:BA:CF:2D:2F:80:42:60:EB:71:76:1B:DE:BE:D9:BF:2B:BD:DC
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A9CD4D7207E795CD896F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f0ea3fc-e521-398d-b360-47b62f532916.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a9:cd:4d:72:07:e7:95:cd:89:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f8624e19-702a-4956-932c-8c4173a824c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f0:70:80:e2:ce:3e:77:18:36:db:39:f9:36:
5e:29:c4:fd:34:99:19:4e:a3:de:81:db:a5:31:0f:
b9:99:3e:12:0e:6d:63:66:82:d3:6a:8b:a2:a1:af:
00:d4:bd:da:9e:ce:bf:19:dd:17:b9:a6:cf:8b:5e:
19:e6:57:60:a0:7c:34:36:e5:19:0f:8f:eb:02:05:
13:a7:ab:c6:26:a9:35:d4:80:b2:31:d1:88:ef:31:
70:af:35:f5:55:e3:d2:fa:e2:c9:4d:e7:5b:23:86:
fd:c3:4c:e0:62:87:84:cf:a4:45:51:e9:a6:ea:71:
09:f6:be:ba:65:ea:c3:45:6a:39:63:b0:9d:1b:f0:
b5:03:64:90:46:ac:56:8b:2d:72:c2:63:60:20:42:
0d:d8:b5:dc:ca:4f:48:8b:79:fb:53:c4:fe:27:51:
e2:9a:ea:60:72:66:1f:63:24:74:1a:85:0c:d9:71:
b9:04:f1:77:e7:fe:ff:16:2c:3f:7b:e0:c5:9b:a5:
21:49:f2:55:c0:8a:bd:3d:33:be:b2:2c:f9:7c:b6:
21:3e:ed:bf:9b:e5:34:7a:14:42:57:d3:f1:c0:68:
19:50:10:ea:e2:3a:46:1c:74:8d:5b:38:2d:d2:06:
d2:8c:4f:65:33:b4:2f:b0:65:f1:cf:0f:70:0e:af:
c1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B2:BA:CF:2D:2F:80:42:60:EB:71:76:1B:DE:BE:D9:BF:2B:BD:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f0ea3fc-e521-398d-b360-47b62f532916.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:9c:c5:cc:1e:33:54:53:3d:65:49:57:44:9b:15:4f:13:dd:
c1:c5:b3:ff:02:57:90:c5:fe:36:93:43:5d:39:92:eb:52:94:
bb:b7:4e:06:e6:56:93:91:c3:bf:77:71:2d:18:7a:d9:3e:46:
f0:cd:25:6a:a6:12:77:36:c2:c9:35:b6:94:56:3a:6d:3a:72:
8a:bc:67:2a:40:29:0b:55:81:db:55:cb:a3:c5:ba:9f:fa:84:
89:67:37:cb:c5:2c:de:41:be:38:16:fe:7d:3e:1b:53:45:42:
42:da:b0:c3:bd:2a:0c:22:81:6c:2f:6e:2d:fe:8d:a0:9e:0a:
0f:e7:34:51:39:9d:67:14:a4:4d:ee:28:a1:6b:76:e0:3b:62:
10:ea:61:25:96:bf:b2:ed:87:c0:b1:07:ac:37:9b:e4:6c:61:
cb:54:8d:69:28:75:4f:e9:62:a9:ee:a3:0a:d9:6e:a6:ca:b9:
53:8f:5a:fb:d7:3d:a3:12:d1:d1:e6:45:7d:82:ee:ec:9b:36:
d5:0d:3a:9f:68:bc:d0:05:f0:cd:7a:26:48:b7:ab:ef:c3:e8:
20:ce:5e:17:76:17:89:39:86:3e:27:da:db:a4:bf:9d:4b:bb:
7a:eb:2a:4f:9b:69:43:e2:a2:0b:87:74:ae:67:07:41:36:ee:
45:e3:0f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org