Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/8cb37bd1-d0d9-375f-bcb2-2c6238e0f535.roa
File: 8cb37bd1-d0d9-375f-bcb2-2c6238e0f535.roa (raw, json)
Hash identifier: QG6aIjHm8vCumKb0GaDwvku9Ru1m4b9GPjdwG0keEUU=
Subject key identifier: 74:E5:F5:8F:1A:AE:CE:6C:80:86:38:76:9D:FB:CE:C6:2C:77:8E:ED
Certificate issuer: /CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
Certificate serial: 010D0C9F432858480AE1AFE63304C4D65D883200
Authority key identifier: E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/8cb37bd1-d0d9-375f-bcb2-2c6238e0f535.roa
Signing time: Fri 29 Nov 2024 17:39:42 +0000
ROA not before: Fri 29 Nov 2024 17:39:42 +0000
ROA not after: Thu 27 Feb 2025 17:39:42 +0000
asID: 61622
IP address blocks: 136.175.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:e1:af:e6:33:04:c4:d6:5d:88:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
Validity
Not Before: Nov 29 17:39:42 2024 GMT
Not After : Feb 27 17:39:42 2025 GMT
Subject: CN=e4b3ba97-8356-4445-bd42-2cd501ee188c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b4:53:d7:dd:00:de:c8:dd:1f:3b:90:3d:7b:
37:f5:2f:86:5e:b5:51:1e:4c:da:93:4b:ad:ab:80:
24:6b:cf:42:50:4e:4c:a7:0e:73:03:55:46:79:e3:
44:07:94:bc:48:d0:eb:61:ef:fa:17:7b:15:2a:11:
75:b9:fd:8a:aa:3b:ee:fa:9a:c6:ed:99:67:45:a5:
95:f1:48:49:35:27:41:3e:46:2e:12:d7:36:a7:18:
f6:cb:5b:0f:03:15:58:76:1b:16:f1:63:65:ec:3e:
57:d1:49:ce:be:96:e6:f4:92:58:f5:d0:f5:69:c6:
f8:06:9b:9f:c2:66:48:44:7f:e6:fc:f4:79:73:84:
be:93:96:00:6e:b1:7f:aa:d9:0d:65:9a:85:92:7d:
06:2b:c7:20:07:45:45:71:d4:39:b5:16:66:d7:e9:
6e:9f:b3:b8:50:07:28:e3:51:b6:7a:70:67:31:78:
20:89:b1:7c:f3:34:17:29:7a:61:9d:0c:7f:44:55:
13:93:72:cb:28:82:00:47:17:b1:4b:19:bd:d3:10:
8a:dd:8d:36:40:fb:81:d9:d1:6d:c8:0a:c5:7d:f7:
b4:47:fa:18:5d:29:aa:cb:5f:d7:fb:69:6f:d4:dc:
fe:a5:11:1b:e5:e4:66:6d:32:99:17:25:1a:93:66:
5b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E5:F5:8F:1A:AE:CE:6C:80:86:38:76:9D:FB:CE:C6:2C:77:8E:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/8cb37bd1-d0d9-375f-bcb2-2c6238e0f535.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl
X509v3 Authority Key Identifier:
keyid:E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
sbgp-ipAddrBlock: critical
IPv4:
136.175.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:63:ad:30:28:d4:1c:7f:be:10:32:9a:cb:fd:27:da:0c:90:
07:c5:f6:72:c5:15:45:de:72:dd:ad:b7:0d:fb:c6:7a:51:29:
42:a2:cf:2c:94:df:f4:57:8a:5b:fe:04:43:30:f1:9a:cb:43:
3b:04:fa:32:3a:aa:b5:05:5f:4a:93:64:9a:29:2d:08:f8:9a:
1d:48:7e:2f:31:b3:10:f9:b8:78:46:9e:bb:e5:6e:dc:18:e9:
e0:86:12:d9:7d:5f:f4:15:7a:b4:e4:4f:3b:d0:f5:3d:da:9a:
7c:d7:dc:02:da:81:9d:05:84:72:31:fc:73:00:54:f0:58:10:
af:c5:97:b2:ab:c9:4a:79:3b:96:c2:ae:2b:0e:1a:df:fd:ef:
e1:10:88:33:d2:15:92:c4:14:b1:19:4b:07:9e:27:a3:df:b7:
a6:a8:18:e2:b6:18:ee:67:8a:da:e2:6d:d8:99:0f:45:42:3f:
ab:d0:40:54:0a:74:93:2d:4c:f3:1d:b6:7d:92:1e:6a:72:e3:
ce:3d:9a:7d:34:10:59:87:8e:70:72:9a:3e:9e:52:ca:30:93:
2e:fe:bd:fa:32:ce:bc:92:8d:cd:d1:3b:0a:ab:a9:c8:4d:34:
55:53:95:38:ba:d0:ee:81:c5:50:0f:d9:13:1a:59:90:36:da:
9a:e1:e4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:43 2025 by rpki-client