Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1d2389b7-7679-3e58-b378-785849fe5ba5.roa
File: 1d2389b7-7679-3e58-b378-785849fe5ba5.roa (raw, json)
Hash identifier: Ywd/WV2nZn5g7j8kVNVgxwx9LPnWwXyzAWYyRDhAyVo=
Subject key identifier: 55:F0:82:65:55:15:39:32:3D:1C:21:54:B4:89:4D:03:8A:33:CB:96
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328583AA7A8C6AE14FFD3DD20FDDCC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1d2389b7-7679-3e58-b378-785849fe5ba5.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a8:c6:ae:14:ff:d3:dd:20:fd:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=dd400a7f-fe69-446b-ae4b-4c1579c87de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a3:f4:a5:a5:16:b9:56:1b:75:40:b8:f5:83:
9a:53:24:2f:4c:12:0e:56:0d:a8:c5:5a:27:2f:6f:
d3:3b:51:df:dd:80:fb:0d:1c:1e:83:81:02:11:4a:
84:82:f0:71:fb:25:c5:c5:fd:db:a1:97:52:5b:e1:
24:25:ef:f8:86:b7:fc:13:a9:07:ac:4f:16:b9:37:
c0:53:52:a3:90:b4:ef:40:14:08:6f:b8:71:0d:72:
34:26:85:09:d2:e2:b0:85:c8:e3:45:6b:cb:b2:d6:
6a:1c:f0:cf:5a:cb:38:9d:5c:55:76:a5:f4:89:79:
e5:40:15:0e:e1:21:7c:09:79:d1:66:52:0d:8b:e0:
e7:19:5a:c0:f7:05:76:b6:05:a1:c6:10:0e:a6:6b:
57:93:a0:44:c9:65:e0:aa:26:bf:e9:4c:c3:7e:af:
be:c9:af:cf:05:dc:c4:27:b1:c4:43:79:4f:73:01:
c4:bc:8d:e1:95:5b:b5:20:81:79:27:97:91:b6:4e:
59:ea:e8:00:85:fe:cc:e1:d6:55:98:54:4b:e0:b4:
42:2b:9b:dc:07:20:8c:fb:90:03:b6:60:e0:28:ff:
93:45:88:bf:74:9a:35:43:23:27:fa:78:e7:0c:2e:
c5:52:69:c5:47:dc:d0:d8:42:20:6e:e2:a2:28:0a:
63:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F0:82:65:55:15:39:32:3D:1C:21:54:B4:89:4D:03:8A:33:CB:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1d2389b7-7679-3e58-b378-785849fe5ba5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:7b:29:ee:eb:a4:49:eb:30:eb:67:97:ca:f1:fa:25:1f:e8:
f7:fc:e4:22:9b:38:b9:6e:9d:e4:e1:ef:b9:54:11:c0:19:cf:
aa:4a:5d:23:7a:7a:fa:14:4c:8a:f2:ed:9a:6f:85:06:99:6d:
6e:40:03:64:8d:a4:c1:3f:fb:f1:47:28:25:6a:74:7c:91:4b:
e4:ea:7f:d0:13:ee:19:c2:4f:ae:23:b6:a9:20:5f:38:5d:80:
3c:6f:9c:c3:cf:a9:04:d4:75:03:6d:c3:67:9b:2f:c3:6a:85:
54:12:f5:e7:36:02:5c:ee:b6:d7:7b:6e:4c:aa:1b:43:72:b1:
70:66:9c:52:db:77:7c:da:20:42:58:94:bd:2a:72:22:16:1e:
85:ac:ba:27:7f:15:fa:80:1e:fa:2b:96:03:e7:b2:25:41:4b:
62:37:f0:4c:c5:ea:94:cc:83:05:bf:cd:ae:1f:54:f3:b8:2f:
64:01:df:f9:3e:c1:4e:d9:0a:9f:28:e4:45:d2:2f:b4:e3:45:
39:f7:e9:41:d5:ee:db:c4:04:93:93:0f:93:0b:06:22:48:19:
2d:dc:93:12:a2:dc:df:59:da:e5:fb:5e:3a:c8:87:c0:dc:30:
8a:2e:05:02:f7:89:5a:64:49:3f:69:42:49:7e:08:a9:01:f1:
2d:74:81:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnqMauFP/T3SD93MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZGQ0MDBhN2YtZmU2OS00NDZiLWFlNGItNGMxNTc5Yzg3ZGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6P0paUWuVYbdUC49YOaUyQvTBIOVg2oxVon
L2/TO1Hf3YD7DRweg4ECEUqEgvBx+yXFxf3boZdSW+EkJe/4hrf8E6kHrE8WuTfA
U1KjkLTvQBQIb7hxDXI0JoUJ0uKwhcjjRWvLstZqHPDPWss4nVxVdqX0iXnlQBUO
4SF8CXnRZlINi+DnGVrA9wV2tgWhxhAOpmtXk6BEyWXgqia/6UzDfq++ya/PBdzE
J7HEQ3lPcwHEvI3hlVu1IIF5J5eRtk5Z6ugAhf7M4dZVmFRL4LRCK5vcByCM+5AD
tmDgKP+TRYi/dJo1QyMn+njnDC7FUmnFR9zQ2EIgbuKiKApjIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFXwgmVVFTkyPRwhVLSJTQOKM8uWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMWQyMzg5YjctNzY3OS0z
ZTU4LWIzNzgtNzg1ODQ5ZmU1YmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABt7Ke7rpEnrMOtnl8rx+iUf6Pf85CKbOLluneTh77lUEcAZz6pKXSN6
evoUTIry7ZpvhQaZbW5AA2SNpME/+/FHKCVqdHyRS+Tqf9AT7hnCT64jtqkgXzhd
gDxvnMPPqQTUdQNtw2ebL8NqhVQS9ec2Alzuttd7bkyqG0NysXBmnFLbd3zaIEJY
lL0qciIWHoWsuid/FfqAHvorlgPnsiVBS2I38EzF6pTMgwW/za4fVPO4L2QB3/k+
wU7ZCp8o5EXSL7TjRTn36UHV7tvEBJOTD5MLBiJIGS3ckxKi3N9Z2uX7XjrIh8Dc
MIouBQL3iVpkST9pQkl+CKkB8S10gc0=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org