Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/94199970-010d-3897-8929-6886aa77cc25.roa
File: 94199970-010d-3897-8929-6886aa77cc25.roa (raw, json)
Hash identifier: X7H14lQsXU5FsPxC5/vnHjL2x0VT4MrqlaLz6WxWu4A=
Subject key identifier: 8C:23:38:18:8A:59:E1:C1:8B:D8:97:A3:92:5C:DB:F5:86:8F:F3:64
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B6720894182B95189CE7F0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/94199970-010d-3897-8929-6886aa77cc25.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b6:72:08:94:18:2b:95:18:9c:e7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=4a0044b8-4840-47f6-bac0-69c4715f4b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:57:c5:e5:0b:ec:35:65:b6:7b:9d:94:92:
6c:99:dc:33:63:a1:7a:c1:95:50:bb:19:00:d7:ca:
06:08:0f:50:8f:51:26:91:38:60:d9:81:95:3a:25:
8e:d0:aa:5c:9e:18:13:d0:00:16:6e:dd:09:64:f9:
ff:af:e2:cb:70:a3:02:ea:22:30:18:4e:5f:86:6d:
cb:fa:a8:9d:ff:b2:8a:60:e4:3a:fd:01:aa:4b:d5:
be:0b:c2:1d:a4:c6:1d:6d:74:81:2b:6f:26:90:3f:
3e:32:05:ae:5d:5d:a7:b4:1a:3d:d8:ce:41:d5:0b:
74:bc:cd:56:a6:99:96:a1:72:4b:3c:6a:a9:f4:35:
e5:ae:49:31:a5:f1:b3:b8:ee:87:d4:f5:ce:b4:0c:
e3:2e:37:96:bc:bb:06:ee:07:d2:a6:28:25:57:ab:
9d:22:fe:83:20:68:7d:31:9c:fc:cd:06:fd:82:7c:
c2:ee:17:75:fc:bd:fd:d5:b8:6e:3a:3d:af:fb:14:
ad:bb:d9:20:43:6b:46:6a:a3:32:4b:2c:4f:95:19:
90:39:93:32:5d:77:52:4e:67:67:2d:fb:9c:a4:92:
fe:b4:78:42:7d:4c:1c:e4:af:9e:b8:dd:80:29:a1:
e8:4b:55:39:cb:b1:77:00:86:ab:bd:42:2d:c8:50:
f3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:23:38:18:8A:59:E1:C1:8B:D8:97:A3:92:5C:DB:F5:86:8F:F3:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/94199970-010d-3897-8929-6886aa77cc25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:6b:de:7a:a4:af:45:91:f2:60:d8:07:6d:59:9b:f9:b9:9b:
7f:1b:f5:c3:25:5b:a8:07:db:d9:e6:e4:d4:69:3f:71:6d:96:
88:71:5d:4c:ae:18:44:70:2f:ee:5f:4a:ab:d2:08:77:b3:9c:
a3:aa:39:2c:eb:59:78:61:3c:30:85:9a:57:5f:37:2e:74:61:
48:d2:19:f6:7f:e0:fe:4a:77:79:dc:ba:db:4f:bc:11:92:fe:
88:e3:9f:40:fa:3d:19:fc:a0:b2:04:12:09:4f:6b:1b:9f:ca:
c0:d8:f9:fa:b1:14:77:43:1c:e0:42:74:84:39:15:05:09:1a:
ff:76:36:c6:7c:3c:43:6c:72:77:fe:c9:29:36:b7:68:17:44:
2b:4a:58:62:ad:87:70:cf:cb:1b:fa:16:4e:e0:9e:cb:f3:70:
05:d8:93:cb:a7:a3:28:ba:18:18:2f:8a:aa:67:04:fc:aa:ed:
d0:f9:e1:db:7c:79:7b:92:fd:f2:53:6b:11:a1:f6:1c:73:e4:
ff:07:93:0f:5c:07:3f:da:94:f0:4c:5b:f6:0a:75:3a:c7:16:
d2:43:c7:49:4c:37:2c:b9:c3:5e:da:bb:3f:3d:32:cc:8a:d4:
e8:94:15:3d:d8:4f:d9:4f:58:cf:3b:a7:be:ba:5e:14:9d:75:
d8:fa:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:49 2023 by rpki-client on console-fra.rpki-client.org