Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d7fe9e23-f0ca-31e9-8790-b93472524555.roa
File: d7fe9e23-f0ca-31e9-8790-b93472524555.roa (raw, json)
Hash identifier: KAG/fXGR6Mwc+/3R9xmCSu0k+hVoKAD7z+V7aQ0BNiw=
Subject key identifier: AB:4B:1F:88:D7:6E:E4:E4:C8:E3:7D:DF:D5:A8:86:FC:4E:48:22:97
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7C55924554CDB8D201CC4C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d7fe9e23-f0ca-31e9-8790-b93472524555.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c5:59:24:55:4c:db:8d:20:1c:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=36573e0c-507a-4fab-b1aa-f48d11987948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:b1:35:f0:38:83:1d:cc:c9:ae:df:07:4f:
d7:5d:d6:91:6e:f6:be:83:cf:e7:64:01:3c:ee:2f:
92:82:da:6c:2a:27:af:bd:8a:1d:3a:1e:78:22:8a:
36:34:4b:f7:e6:05:df:2a:e9:82:45:a9:a1:06:08:
4e:3e:82:92:a2:56:eb:00:49:01:9a:6d:9a:de:ce:
33:f4:f4:cd:a8:13:43:a7:45:1c:d5:a5:8e:e4:27:
6d:c9:33:47:03:0e:52:05:fa:e0:f4:47:60:59:00:
bb:fb:ec:d5:d9:2c:fb:72:84:7f:76:22:50:37:ff:
c0:a4:1c:39:f9:88:5f:42:5a:f7:41:ef:1f:2b:eb:
92:5e:59:54:82:13:83:aa:68:a0:39:49:3b:ac:64:
50:24:c3:49:64:60:d6:bd:54:e6:ae:40:f6:0e:62:
44:63:7a:ab:0d:6e:68:93:96:73:dc:bd:b0:7e:41:
0d:fe:c2:1c:3a:b9:b4:3c:13:94:ec:b8:8e:d8:a2:
9e:70:54:c0:d6:d4:33:67:03:ba:21:28:d5:14:19:
5e:c3:02:a0:b6:43:e0:7a:15:20:5e:31:12:bc:c6:
49:4e:4b:02:44:50:1e:c0:9a:be:56:f1:5e:49:5e:
1e:f8:b3:d7:7b:b5:e9:c6:64:09:fe:85:d0:e0:fc:
c2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4B:1F:88:D7:6E:E4:E4:C8:E3:7D:DF:D5:A8:86:FC:4E:48:22:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d7fe9e23-f0ca-31e9-8790-b93472524555.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:72:e2:af:c4:7b:95:ab:5c:f1:4f:0a:9e:62:08:2d:01:52:
6c:27:a2:15:8b:23:39:9c:a9:70:ce:81:d5:ff:ee:d3:94:ca:
2c:f8:ee:46:1c:36:a2:01:ef:77:fd:b9:fa:4d:50:74:8e:d2:
37:68:13:85:9e:a4:64:25:83:bb:76:3d:09:68:11:b5:74:80:
47:c1:f7:db:1f:14:7a:1c:ea:ce:87:a1:23:39:f4:8f:bb:99:
8f:3c:0b:1e:f8:7e:98:83:ea:f5:27:a5:59:53:c2:70:e6:2e:
90:d2:a8:63:94:5b:b1:f1:02:95:21:7f:b8:64:20:60:08:9b:
fe:77:26:c0:22:06:d0:ec:e7:88:74:03:4c:93:64:b5:b9:fa:
ae:ca:a1:71:0b:b2:8d:1f:83:4a:a9:b0:24:5d:cf:c8:f0:55:
d1:10:76:1f:fa:95:13:30:d0:fc:ce:c1:9f:8c:d9:87:54:4f:
a6:02:fc:2d:44:4a:d8:ff:67:56:96:70:08:e2:06:8e:fd:c0:
24:00:eb:86:69:d5:ee:61:b8:c5:1c:3e:69:f3:4e:f7:42:4c:
df:6f:b9:ce:9c:3a:57:55:8a:f9:a2:2a:6c:c2:86:1f:79:de:
eb:4d:05:b4:91:2d:07:8d:44:df:02:b4:a3:60:b5:51:44:4f:
c7:9d:25:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org