Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/88addb24-618f-35aa-918a-4fb3ee425e43.roa
File: 88addb24-618f-35aa-918a-4fb3ee425e43.roa (raw, json)
Hash identifier: MUFLi5d9wuoeO0mWvhDYx/bAF4bs1YeWF9MxfDwHUcU=
Subject key identifier: 74:13:6B:D9:C4:90:FE:60:87:03:9E:CE:83:5F:C1:D0:90:28:F4:A9
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328583AA7A80E0996C1AC2646C74400
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/88addb24-618f-35aa-918a-4fb3ee425e43.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a8:0e:09:96:c1:ac:26:46:c7:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=6cbd0b18-d25e-467b-9566-53699cf73164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:4f:69:be:fc:e4:ab:3c:fd:34:19:ed:2b:
70:65:7a:13:e7:d2:c1:19:59:6b:87:52:2e:99:d5:
f6:2b:78:a9:ef:3e:8e:83:32:2e:e7:5c:08:d2:82:
33:d9:4e:89:8d:37:3e:16:48:1a:57:fb:8d:40:83:
b1:12:e6:5d:48:c5:34:14:eb:2a:2a:3e:d7:6c:7c:
73:3d:ae:15:7f:f5:71:25:92:e0:27:88:a4:10:99:
de:fc:5a:26:59:01:c2:ca:29:05:08:f3:64:1d:98:
fc:7d:f8:c9:30:95:64:d2:3b:58:a9:ea:10:a1:40:
c0:f6:ac:e1:2c:32:51:e7:0c:7b:3e:57:7a:e4:5b:
f3:81:aa:55:39:06:18:76:c7:50:64:17:1e:b2:07:
92:72:64:b6:3d:4d:55:2d:cb:bf:10:05:e7:3d:a0:
e0:61:26:c9:ed:88:37:22:cf:47:b8:6b:56:29:54:
f9:4f:cc:7a:e3:4e:d4:cb:8a:cf:0f:2d:73:6e:c3:
ff:1b:c7:62:f5:31:ae:fa:3e:23:60:92:c2:db:76:
58:53:fb:08:49:3c:2b:38:eb:25:80:58:cb:74:e4:
f1:af:c3:91:53:ea:42:32:de:8f:e9:68:41:cb:19:
a9:6e:97:f0:bd:a0:08:86:9c:05:0f:a6:10:08:7c:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:13:6B:D9:C4:90:FE:60:87:03:9E:CE:83:5F:C1:D0:90:28:F4:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/88addb24-618f-35aa-918a-4fb3ee425e43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:2e:93:14:e5:e1:b5:00:7e:f8:89:42:34:d0:4a:36:e6:d8:
80:31:e1:3a:89:99:71:7b:02:ff:fe:7b:36:50:eb:5e:d6:25:
74:f3:e2:49:a9:cf:9c:f8:25:ce:bc:a9:3c:db:61:23:aa:c1:
fd:e2:95:b7:94:d6:5e:e7:b0:3a:28:a7:e3:10:a2:ea:2d:c8:
b8:23:98:2a:35:49:f2:01:b2:81:4a:d9:bd:41:57:00:48:b6:
e9:fe:ff:04:23:d0:9b:4c:83:10:7f:ea:16:42:31:4a:18:18:
ec:6d:9d:7f:f6:06:52:e9:91:62:8d:7c:9f:4b:9a:23:c2:bb:
9b:30:59:af:c9:99:b7:85:d1:2a:9d:c0:f9:cc:ac:5e:17:f9:
11:df:51:c0:86:2e:1a:b8:a3:61:ba:cb:82:91:49:be:e1:f3:
28:25:0b:15:93:40:3b:a4:7f:dc:79:2d:c6:7a:75:a3:6b:76:
34:a0:13:85:df:4f:5c:a6:42:45:f4:73:53:81:ad:fc:bd:21:
85:5a:82:4e:da:1c:ca:e0:99:06:b7:a2:20:3c:51:f9:bf:6d:
5b:4a:f4:f6:5a:b4:4f:6e:22:8c:f6:3b:2a:a9:c5:4d:3d:bb:
a0:bf:06:c5:03:46:da:a5:dc:fe:05:12:a3:b2:49:67:f8:f2:
c9:4c:eb:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnqA4JlsGsJkbHRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NmNiZDBiMTgtZDI1ZS00NjdiLTk1NjYtNTM2OTljZjczMTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryFPab785Ks8/TQZ7StwZXoT59LBGVlrh1Iu
mdX2K3ip7z6OgzIu51wI0oIz2U6JjTc+FkgaV/uNQIOxEuZdSMU0FOsqKj7XbHxz
Pa4Vf/VxJZLgJ4ikEJne/FomWQHCyikFCPNkHZj8ffjJMJVk0jtYqeoQoUDA9qzh
LDJR5wx7Pld65FvzgapVOQYYdsdQZBcesgeScmS2PU1VLcu/EAXnPaDgYSbJ7Yg3
Is9HuGtWKVT5T8x6407Uy4rPDy1zbsP/G8di9TGu+j4jYJLC23ZYU/sISTwrOOsl
gFjLdOTxr8ORU+pCMt6P6WhByxmpbpfwvaAIhpwFD6YQCHzXZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHQTa9nEkP5ghwOezoNfwdCQKPSpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvODhhZGRiMjQtNjE4Zi0z
NWFhLTkxOGEtNGZiM2VlNDI1ZTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiBaIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwukxTl4bUAfviJQjTQSjbm2IAx4TqJmXF7Av/+ezZQ617WJXTz4kmp
z5z4Jc68qTzbYSOqwf3ilbeU1l7nsDoop+MQouotyLgjmCo1SfIBsoFK2b1BVwBI
tun+/wQj0JtMgxB/6hZCMUoYGOxtnX/2BlLpkWKNfJ9LmiPCu5swWa/JmbeF0Sqd
wPnMrF4X+RHfUcCGLhq4o2G6y4KRSb7h8yglCxWTQDukf9x5LcZ6daNrdjSgE4Xf
T1ymQkX0c1OBrfy9IYVagk7aHMrgmQa3oiA8Ufm/bVtK9PZatE9uIoz2OyqpxU09
u6C/BsUDRtql3P4FEqOySWf48slM60A=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org