Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c58955e9-2704-3aab-87dd-21305e0a07aa.roa
File: c58955e9-2704-3aab-87dd-21305e0a07aa.roa (raw, json)
Hash identifier: TYAwPqCOWF7qDVmy6J6n9urux97su5F3HX2VQNaZUoo=
Subject key identifier: 5E:3D:39:62:B4:95:A5:BC:CD:02:BE:E5:5D:BA:96:B0:C0:22:8F:99
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A60AE163F7CE0A84161740
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c58955e9-2704-3aab-87dd-21305e0a07aa.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a6:0a:e1:63:f7:ce:0a:84:16:17:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=7a756499-3f26-4112-91c4-7009f32491a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:52:fb:a1:61:4c:4c:dc:df:f6:95:d1:7c:79:
06:89:7f:45:3a:eb:b4:ef:55:f8:bb:a6:18:97:93:
92:b6:08:50:24:7b:8d:cf:9e:67:4c:d3:8d:29:15:
f5:6b:11:d3:4f:66:71:b4:25:88:dc:7f:91:88:96:
e7:53:93:33:3f:d7:15:e2:9a:cd:c2:5a:ef:f1:40:
1b:f5:9e:94:92:fb:8c:4f:5f:14:b8:41:fe:c7:79:
b6:75:cb:eb:68:fb:80:10:47:dc:f9:09:5d:30:08:
10:da:73:65:ab:07:36:7b:cf:57:4d:a7:09:d0:f1:
09:c7:5e:a9:6b:9f:82:0f:9b:47:b0:66:f8:70:b2:
d5:84:28:00:c8:c2:b1:ab:56:70:3d:de:df:02:b8:
6b:32:16:93:47:ba:2d:91:28:3c:a0:1e:22:60:74:
ca:ef:9a:30:0b:f3:5f:5b:0d:ce:95:32:40:0d:09:
2d:82:22:7c:c6:06:41:57:4b:c5:c6:aa:3f:3c:89:
02:75:01:2c:20:7e:b6:51:54:3d:0d:f7:d3:2a:23:
6f:e0:78:29:6a:ba:05:26:8c:f9:41:5e:69:93:cc:
88:33:d9:55:f7:0b:ed:e1:5b:4b:0e:d3:c8:47:0c:
51:72:fb:27:22:4f:2f:7d:83:6e:3f:be:72:28:ab:
23:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3D:39:62:B4:95:A5:BC:CD:02:BE:E5:5D:BA:96:B0:C0:22:8F:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c58955e9-2704-3aab-87dd-21305e0a07aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:36:cc:8e:a7:ac:a7:4b:b6:d2:dd:61:ba:e8:f5:39:b0:e1:
8a:fe:d0:65:22:bb:c8:d3:20:72:de:ce:82:51:d0:21:75:fe:
53:a0:08:14:5c:0c:fb:be:dd:61:42:5e:b9:01:ce:01:d9:5d:
f3:e8:0f:f0:3f:4f:bb:72:82:41:c0:05:38:e2:30:1f:e0:c3:
de:78:1c:c3:d3:77:d3:06:8a:c9:eb:40:d3:04:23:ae:89:ec:
c4:3d:61:e4:70:fd:ec:7a:b0:0c:b1:d6:a2:f9:22:78:81:d3:
19:83:41:1f:c3:2d:f5:8e:53:ef:e4:fa:62:a5:b2:f1:8c:f8:
69:f6:f0:7b:18:aa:99:03:53:79:07:fa:f9:84:de:74:6b:d6:
2e:d0:48:14:da:9d:b3:f2:83:e6:97:97:6b:38:5e:0b:e8:64:
2c:2d:74:80:8b:08:96:41:5c:80:71:0f:04:81:66:68:09:fb:
58:fb:6d:57:88:2e:b2:1b:a7:3d:e6:6c:10:21:0e:12:82:75:
da:94:53:06:c8:cb:22:07:13:49:c5:4c:6d:c0:8d:d6:77:ae:
b6:e2:de:2d:32:ad:62:64:31:cf:fe:c7:01:b3:c0:81:a3:c7:
3c:ad:53:21:52:da:4d:eb:51:93:9d:93:7e:b7:a3:81:27:af:
a0:6b:29:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnpgrhY/fOCoQWF0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
N2E3NTY0OTktM2YyNi00MTEyLTkxYzQtNzAwOWYzMjQ5MWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FL7oWFMTNzf9pXRfHkGiX9FOuu071X4u6YY
l5OStghQJHuNz55nTNONKRX1axHTT2ZxtCWI3H+RiJbnU5MzP9cV4prNwlrv8UAb
9Z6UkvuMT18UuEH+x3m2dcvraPuAEEfc+QldMAgQ2nNlqwc2e89XTacJ0PEJx16p
a5+CD5tHsGb4cLLVhCgAyMKxq1ZwPd7fArhrMhaTR7otkSg8oB4iYHTK75owC/Nf
Ww3OlTJADQktgiJ8xgZBV0vFxqo/PIkCdQEsIH62UVQ9DffTKiNv4HgparoFJoz5
QV5pk8yIM9lV9wvt4VtLDtPIRwxRcvsnIk8vfYNuP75yKKsj/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF49OWK0laW8zQK+5V26lrDAIo+ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzU4OTU1ZTktMjcwNC0z
YWFiLTg3ZGQtMjEzMDVlMGEwN2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACc2zI6nrKdLttLdYbro9Tmw4Yr+0GUiu8jTIHLezoJR0CF1/lOgCBRc
DPu+3WFCXrkBzgHZXfPoD/A/T7tygkHABTjiMB/gw954HMPTd9MGisnrQNMEI66J
7MQ9YeRw/ex6sAyx1qL5IniB0xmDQR/DLfWOU+/k+mKlsvGM+Gn28HsYqpkDU3kH
+vmE3nRr1i7QSBTanbPyg+aXl2s4XgvoZCwtdICLCJZBXIBxDwSBZmgJ+1j7bVeI
LrIbpz3mbBAhDhKCddqUUwbIyyIHE0nFTG3AjdZ3rrbi3i0yrWJkMc/+xwGzwIGj
xzytUyFS2k3rUZOdk363o4Enr6BrKU8=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org