Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1c6af61a-dfd0-3d9a-b3a8-a375a19e56c4.roa
File: 1c6af61a-dfd0-3d9a-b3a8-a375a19e56c4.roa (raw, json)
Hash identifier: Sw2fRpPCc+cTLygJCbZJuDfhojMCbiLvkBBk1g3qtW4=
Subject key identifier: 85:0F:51:90:D1:71:C4:F2:22:F3:E0:6C:03:8D:F9:A0:49:15:2B:22
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328583AA7B50028557281C3CCD27CE0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1c6af61a-dfd0-3d9a-b3a8-a375a19e56c4.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b5:00:28:55:72:81:c3:cc:d2:7c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c0dad0a9-8c48-4eb4-8e1a-1b1d88d7daba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:d0:60:b4:15:3f:6c:1b:63:c0:f2:76:5c:
98:eb:f6:7b:dc:bb:52:54:f3:f6:a0:c4:5f:e6:1f:
a0:7a:88:51:ae:d8:98:4c:39:c5:60:2c:3d:b7:62:
94:f7:0f:13:10:ba:4b:3d:23:10:af:ca:ec:a4:89:
06:4e:e7:00:56:89:1f:13:d5:67:b4:ec:17:e5:e1:
7d:a4:c2:71:d6:f0:a6:0e:73:b0:6f:a9:c4:10:6a:
ca:0a:08:95:57:e6:8f:15:b2:2b:0b:63:61:11:39:
b0:e7:0a:a7:77:aa:da:2e:81:af:e2:fc:fb:67:44:
a6:07:c6:82:cf:64:32:5e:d2:97:b0:46:4f:3c:a4:
d4:19:6f:56:64:af:5b:b1:7e:6e:ae:44:04:16:85:
a8:36:d3:37:49:4e:fb:9e:9a:72:d5:65:70:de:ab:
db:82:94:87:5e:74:74:7f:27:89:6b:ef:17:9f:c2:
ef:2c:c6:cd:f2:ab:58:a7:b9:67:17:1e:bc:be:e4:
f7:24:33:09:5f:f3:cb:e5:94:10:56:58:30:36:b1:
4c:e6:37:12:64:a5:15:d3:ca:9d:c7:72:70:b8:f1:
4e:f6:2e:e3:11:d6:d8:cd:80:4f:7a:02:cf:ed:7b:
ac:da:8b:6d:ad:c1:9c:38:67:b3:49:9c:55:55:31:
ea:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0F:51:90:D1:71:C4:F2:22:F3:E0:6C:03:8D:F9:A0:49:15:2B:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1c6af61a-dfd0-3d9a-b3a8-a375a19e56c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:ce:e7:3b:33:60:df:14:8d:ce:5f:68:06:b7:da:9a:6a:b5:
f4:34:64:78:ee:ca:ae:24:92:0d:c1:a5:45:5d:a3:7f:5d:24:
20:4a:b3:b2:b7:11:4f:89:84:4e:04:0c:3e:82:6d:a5:91:18:
c6:b9:17:e2:98:b8:73:45:12:d9:95:c1:f7:44:7e:34:4a:11:
85:20:55:d1:46:6a:db:c4:e1:51:08:04:c8:eb:10:db:0f:16:
7c:99:75:38:c7:e3:dd:94:46:68:d9:e7:65:75:ff:24:22:b9:
40:14:60:9f:76:7f:5d:a4:92:5b:f9:91:49:4e:77:a6:fe:fc:
23:24:cc:87:dd:d5:46:00:0b:35:34:eb:29:0a:da:2a:bf:03:
04:3c:96:29:dc:83:4d:ab:39:26:ab:ed:84:d0:83:47:02:77:
52:b0:2c:72:1c:9b:c8:5d:95:ad:74:c4:f3:b3:a1:b2:cb:7d:
af:d2:d5:f7:b1:21:b0:d1:b9:48:b8:4b:a6:05:f4:49:31:15:
6a:56:54:c5:fc:5d:47:d6:c9:da:c5:7f:09:70:a4:df:39:96:
5c:e7:06:f7:cb:ef:cd:77:20:6e:1d:fe:67:e3:88:11:7c:c3:
8e:5f:36:5b:d7:65:74:a7:bb:bc:f4:bf:8f:38:ec:f0:ea:06:
fc:46:d9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org