Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/20d841c1-086b-32fe-9b5c-510030baf57a.roa
File: 20d841c1-086b-32fe-9b5c-510030baf57a.roa (raw, json)
Hash identifier: oMNJb2mvei2NbH0QkiDU3pHk8Yn6SEkRM0x0LSEGKMA=
Subject key identifier: E4:18:BB:2B:10:41:06:7E:0C:63:6F:2E:F0:88:48:5F:F3:27:FA:A6
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328583AA79F00E825A93D1D1D0E9980
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/20d841c1-086b-32fe-9b5c-510030baf57a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.106.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:9f:00:e8:25:a9:3d:1d:1d:0e:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=3401547b-4681-4cd7-8f31-8b24d1e631c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fe:94:25:3c:5f:87:c8:62:15:ae:ea:c9:3f:
7c:6e:53:80:f5:f5:0b:e4:13:34:62:65:bc:a0:9d:
e9:cc:e5:d5:81:bf:ac:ce:aa:48:ce:e8:92:5d:31:
5f:d0:62:2e:b0:05:f8:3a:0e:c3:87:06:fb:4b:e7:
61:43:f5:04:01:8e:45:22:61:77:6f:49:86:79:19:
e9:51:88:bd:62:0e:f1:59:26:e6:97:51:7e:4c:df:
4d:71:74:68:d6:a9:38:1a:16:87:8a:97:3e:e2:60:
16:64:74:fe:1f:57:c8:4b:8d:b1:98:29:b3:04:94:
31:d1:41:d9:55:2c:17:ba:20:05:69:2e:ef:82:3d:
85:5a:3d:e4:d2:ff:8f:f9:75:37:e2:d0:31:dd:7c:
15:3b:f3:8d:2e:da:80:86:f1:2f:4a:93:38:1a:e3:
fe:11:bc:8a:6b:4e:42:1d:c2:b9:3e:0a:4d:59:1c:
d9:fd:7b:cd:80:63:2e:52:ee:6c:85:05:30:0f:a9:
d2:7c:77:4c:43:9f:54:ed:89:cc:e8:d6:04:f0:f4:
4e:7c:94:21:fa:97:dc:49:d9:57:c8:34:f8:15:3f:
44:10:87:cd:15:df:7e:e2:62:25:ce:66:08:d4:48:
0f:5f:bd:a7:43:a4:6b:12:57:81:ce:8e:c9:df:c0:
7c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:18:BB:2B:10:41:06:7E:0C:63:6F:2E:F0:88:48:5F:F3:27:FA:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/20d841c1-086b-32fe-9b5c-510030baf57a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:8f:60:8e:27:89:40:55:2f:43:7e:e2:61:c7:e3:60:8f:eb:
55:f2:6c:67:db:9a:b1:ff:e5:a7:5f:ca:1b:f4:a5:7c:c0:e8:
4c:60:cf:c1:a8:fb:24:ab:22:ff:94:65:c4:bb:bc:29:db:93:
04:1c:d1:26:1c:63:4d:4b:95:f4:b4:12:95:15:9b:99:db:3d:
b1:5e:61:e3:2c:81:10:f8:de:96:ea:e0:36:3b:16:b9:b4:36:
10:c3:b5:bb:2a:2f:6d:bc:ab:ad:5f:bc:7d:5e:49:7f:b5:68:
83:77:99:48:62:37:20:e0:3e:52:21:05:a8:09:12:5f:82:bd:
1b:ef:f5:17:16:ee:11:d7:c5:10:e2:7a:91:cf:cc:0b:42:59:
b5:74:f3:35:60:50:5b:04:2a:09:a2:c7:7e:ad:f4:51:ea:fd:
97:9d:11:52:27:0f:e9:22:6d:0a:09:1d:fe:17:0d:f5:41:f1:
2a:00:31:11:dc:dc:5c:c0:80:22:14:2e:c9:52:b6:08:36:59:
a6:96:1f:8e:a6:5d:e5:25:51:e9:f6:06:0c:be:7a:e8:69:18:
e0:83:ad:9b:ad:5f:eb:6c:73:e8:fb:51:1e:11:01:db:7f:96:
a9:63:a6:4c:b3:3a:3b:38:15:69:b4:28:c2:07:a8:52:20:f0:
ab:de:07:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org