Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f28257f-8c3e-307c-aedd-d79d88c2ad8b.roa
File: 8f28257f-8c3e-307c-aedd-d79d88c2ad8b.roa (raw, json)
Hash identifier: tqkbMXJbln3+jpOFAj8ngKvbJZGQVbI/x1+Bh/72ocY=
Subject key identifier: EC:C2:71:8E:C1:71:F9:85:55:98:05:AD:A9:4A:7A:5E:D9:5B:3E:D5
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7BA66591E95F10E370DEA00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f28257f-8c3e-307c-aedd-d79d88c2ad8b.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ba:66:59:1e:95:f1:0e:37:0d:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=9b24750f-9139-4a64-bae1-447574563d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e5:db:02:92:9e:f4:74:c0:b1:19:04:9f:ea:
48:ce:e8:9a:ad:4f:df:b6:be:f2:35:f1:34:bc:4a:
03:89:66:7a:74:4c:0e:35:19:ae:32:2c:05:ac:74:
b3:87:5a:11:be:7d:fe:00:77:9b:88:06:8b:1f:ea:
e4:f9:90:55:0c:a4:29:b2:dd:50:ab:01:8f:01:8d:
30:cb:84:d4:4a:51:e4:60:a8:34:32:ec:87:eb:ec:
6c:20:dc:4e:9a:a8:2f:36:f2:34:cb:50:e5:2b:e4:
3d:f6:bd:1a:0a:3d:fb:a2:f4:e0:e6:58:bc:9d:48:
6f:2c:ae:41:2c:cb:1c:23:bb:29:94:40:81:38:d9:
9f:75:1a:20:c6:49:c2:5b:dc:02:76:ed:42:af:67:
79:07:29:07:a1:e8:50:4a:36:88:5c:16:09:0d:1a:
18:25:38:76:6c:d6:3a:fc:e8:31:90:e9:a8:39:69:
01:6f:ad:70:84:d4:8c:aa:b5:3e:e8:fe:84:71:60:
af:c2:82:40:6e:bf:5f:a9:13:59:7d:f8:c2:61:f6:
c3:58:76:10:59:7d:1d:8c:32:91:e9:22:eb:9b:f6:
98:75:28:d1:25:b9:6a:80:13:e3:cf:70:6d:b4:d0:
66:1c:1b:45:39:d3:67:8a:49:17:91:94:0d:d2:c0:
a2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C2:71:8E:C1:71:F9:85:55:98:05:AD:A9:4A:7A:5E:D9:5B:3E:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f28257f-8c3e-307c-aedd-d79d88c2ad8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:c2:89:9a:2a:7e:3e:76:4a:10:1a:b5:94:cd:ba:27:96:ce:
7b:42:4b:fb:71:07:11:2c:a5:3c:f6:db:dc:57:c5:7a:50:65:
64:ca:b2:ca:d8:24:5e:e7:9c:e4:1e:e2:9f:61:02:70:6c:40:
7f:c7:9d:5d:70:90:3e:92:8e:0f:c1:27:1f:c3:65:ac:b4:59:
bb:bf:3f:5f:bf:42:0c:67:bb:85:60:a7:27:1e:85:49:68:5f:
5d:b5:5f:7c:25:01:ba:fa:41:8f:c3:72:f0:53:3e:5d:4d:1f:
4d:cf:c5:59:5a:24:be:39:83:d1:df:dc:d6:85:23:dd:b5:de:
66:03:d6:ed:7f:45:1f:d7:dd:5c:b4:12:25:36:9b:ef:86:56:
aa:a5:d0:33:9d:be:e0:db:4c:1e:46:7a:ee:22:a5:17:c2:a9:
b5:19:ad:b0:62:37:73:2d:63:69:45:8f:01:8f:0d:ae:c0:3e:
4d:4e:b2:d5:69:1f:9c:06:5b:a1:97:5b:41:0d:52:07:c4:90:
e3:89:87:60:e6:70:14:08:81:4b:8f:dd:5b:0c:05:ef:78:9a:
02:94:94:20:7b:55:e7:6a:2b:a1:c0:c0:a2:c4:d9:23:c7:b7:
f5:c0:5a:91:95:f6:9b:34:ff:6b:01:6f:92:77:da:8a:56:91:
ce:8f:80:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnumZZHpXxDjcN6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
OWIyNDc1MGYtOTEzOS00YTY0LWJhZTEtNDQ3NTc0NTYzZDg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOXbApKe9HTAsRkEn+pIzuiarU/ftr7yNfE0
vEoDiWZ6dEwONRmuMiwFrHSzh1oRvn3+AHebiAaLH+rk+ZBVDKQpst1QqwGPAY0w
y4TUSlHkYKg0MuyH6+xsINxOmqgvNvI0y1DlK+Q99r0aCj37ovTg5li8nUhvLK5B
LMscI7splECBONmfdRogxknCW9wCdu1Cr2d5BykHoehQSjaIXBYJDRoYJTh2bNY6
/OgxkOmoOWkBb61whNSMqrU+6P6EcWCvwoJAbr9fqRNZffjCYfbDWHYQWX0djDKR
6SLrm/aYdSjRJblqgBPjz3BttNBmHBtFOdNnikkXkZQN0sCiXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOzCcY7BcfmFVZgFralKel7ZWz7VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGYyODI1N2YtOGMzZS0z
MDdjLWFlZGQtZDc5ZDg4YzJhZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHCiZoqfj52ShAatZTNuieWzntCS/txBxEspTz229xXxXpQZWTKssrY
JF7nnOQe4p9hAnBsQH/HnV1wkD6Sjg/BJx/DZay0Wbu/P1+/Qgxnu4VgpycehUlo
X121X3wlAbr6QY/DcvBTPl1NH03PxVlaJL45g9Hf3NaFI9213mYD1u1/RR/X3Vy0
EiU2m++GVqql0DOdvuDbTB5Geu4ipRfCqbUZrbBiN3MtY2lFjwGPDa7APk1OstVp
H5wGW6GXW0ENUgfEkOOJh2DmcBQIgUuP3VsMBe94mgKUlCB7VedqK6HAwKLE2SPH
t/XAWpGV9ps0/2sBb5J32opWkc6PgPk=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org