Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9cb71cc-5583-31cf-af67-7bf76da03ce1.roa
File: b9cb71cc-5583-31cf-af67-7bf76da03ce1.roa (raw, json)
Hash identifier: onddOo/QlDHx8BHWlXCL5gaasLPST3+ctl5kRhQY7cs=
Subject key identifier: 19:F5:D1:9D:7A:81:65:7C:CA:B0:B3:61:FA:93:EA:8D:D0:32:A2:FC
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7AAD27164C9A6F0D28AED00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9cb71cc-5583-31cf-af67-7bf76da03ce1.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:aa:d2:71:64:c9:a6:f0:d2:8a:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f063b598-ff1b-4e90-89ef-672853593717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:dd:88:a0:8b:82:74:c2:cf:ac:cb:3c:7e:
8f:a0:ba:97:65:2d:3a:03:09:6c:92:d7:35:6b:3a:
df:7b:db:96:c1:12:ab:7a:9a:00:cc:54:1a:f0:69:
a7:9d:39:76:cd:96:6d:00:1c:12:d7:3b:cc:22:29:
17:e2:cf:44:19:3b:25:04:31:18:95:3b:f4:ca:90:
97:c6:46:34:8c:81:04:1d:4b:0a:77:70:c6:12:5d:
85:b8:d1:76:d1:8d:82:3a:48:7c:cd:47:50:12:0b:
2f:64:b3:70:78:27:aa:39:f4:a9:3c:90:87:ce:48:
54:c8:e4:8e:a5:9e:5d:4f:b9:a0:43:a8:3d:e1:bf:
33:3c:2a:c9:35:12:f5:e7:cd:7d:93:8c:f4:42:2c:
7e:4a:3d:fa:2e:51:bf:5c:06:98:c2:da:dc:f5:28:
c2:00:30:01:e2:01:1d:59:ca:4b:95:5b:93:d7:43:
04:de:01:08:ab:dd:9e:74:99:37:8c:71:7f:2f:67:
ca:fa:8d:c8:45:51:ae:65:e2:46:7e:02:b5:33:6b:
b0:de:8d:b6:61:e0:81:55:36:7a:e7:8a:d1:3e:da:
0c:5a:d3:ea:2e:db:5e:77:ea:92:06:dd:83:8a:45:
13:d9:cf:fc:90:75:e3:2f:1e:be:79:19:05:d9:0a:
f1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F5:D1:9D:7A:81:65:7C:CA:B0:B3:61:FA:93:EA:8D:D0:32:A2:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9cb71cc-5583-31cf-af67-7bf76da03ce1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:26:72:c7:f8:16:65:33:ab:46:be:aa:4c:5f:f0:14:62:11:
24:1d:8f:03:78:78:e0:63:d4:ed:b2:ce:b1:51:4d:f5:11:43:
40:3a:5d:50:34:2d:f6:c0:db:12:b3:8b:65:a7:0c:a5:56:2f:
37:5d:29:19:44:ee:70:cd:bf:6b:87:bf:f8:74:28:f9:f8:38:
9b:1c:a5:c1:83:5c:33:ce:9d:ce:4e:9b:7b:5a:29:91:ab:91:
04:1c:7a:1e:6a:17:5b:98:60:29:3a:e8:7b:63:e1:97:70:86:
3e:84:b1:fc:93:bf:73:c3:31:07:30:51:b0:c2:ad:ef:99:31:
2d:c9:4d:37:86:96:24:b3:e5:2a:04:d7:ba:57:c0:61:00:a8:
56:5b:05:0e:2b:f1:ce:9f:ce:8e:31:40:5e:b3:8f:24:42:2e:
68:e5:17:4d:14:a2:68:0a:54:51:fc:91:5d:cf:4a:99:91:d3:
a7:43:b1:08:9d:47:c6:3c:7c:82:3e:dd:65:96:1f:95:28:92:
fc:d2:18:35:5c:c5:a1:f4:60:1a:77:ae:a4:80:0b:31:41:f1:
72:cd:7e:f0:3d:37:fc:92:cd:f5:90:3f:63:70:14:ae:df:e6:
19:1f:02:63:5f:fa:4c:4b:63:99:fd:5f:58:5a:20:6f:bf:fb:
fa:6e:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:49 2023 by rpki-client on console-fra.rpki-client.org