Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2d02d922-4cf1-3aa4-a76f-3c0144b97408.roa
File: 2d02d922-4cf1-3aa4-a76f-3c0144b97408.roa (raw, json)
Hash identifier: ftIR/dCRzw+OTEHr4/FIPM+tarNkGdTeCOsiHI/Y9y4=
Subject key identifier: 20:15:FE:E1:50:16:C5:DD:F2:18:AB:43:74:D4:10:6E:91:0A:4A:52
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328583AA7C14F6B2E1872C6F046EEC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2d02d922-4cf1-3aa4-a76f-3c0144b97408.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.238.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c1:4f:6b:2e:18:72:c6:f0:46:ee:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=b3f5b342-2003-4934-be5f-a222a1956f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e4:f9:57:2f:64:21:fb:7f:da:13:de:ba:65:
87:27:cb:2d:e3:46:ef:28:a3:03:8e:bb:d6:e7:50:
6b:32:9d:21:ba:33:9d:b0:45:e0:ae:87:04:0d:d6:
c9:41:53:fe:16:38:f1:c7:6d:c1:3a:01:70:06:80:
a0:7d:d7:ba:71:47:a9:a1:25:26:0f:10:3e:91:0f:
d6:3b:9a:38:22:ed:90:75:b7:7d:c0:07:88:ec:47:
77:5b:9d:ef:47:6e:d1:80:5b:0c:fd:06:74:d6:76:
eb:a4:4f:72:48:dc:bb:25:43:b6:1d:67:e5:69:dd:
7c:da:dd:27:7c:f5:ec:c0:93:9f:e4:c4:60:00:e3:
59:ff:3e:5d:01:f1:3f:e1:fe:9b:7f:d7:5c:c8:f3:
e6:64:4c:d3:07:b9:be:4f:1d:ec:b0:94:47:d4:a4:
1a:73:04:72:40:4e:a7:64:af:cc:df:52:f3:72:04:
7b:48:91:f6:38:57:3f:aa:91:b1:91:3a:01:a6:79:
9c:f7:5c:8d:b7:44:24:32:ca:f6:73:0c:a7:38:4c:
63:12:80:2e:70:52:8a:6b:0b:64:7d:f7:e0:b1:03:
b4:55:3b:4c:4a:05:be:f1:74:e0:9e:c5:36:85:fb:
99:e9:81:6d:54:2f:23:c8:a7:da:44:ab:c6:bf:a4:
a5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:15:FE:E1:50:16:C5:DD:F2:18:AB:43:74:D4:10:6E:91:0A:4A:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2d02d922-4cf1-3aa4-a76f-3c0144b97408.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:17:f7:9d:bb:04:5f:7c:24:06:20:62:11:95:c9:4c:ac:fe:
20:83:80:64:10:0b:1c:7c:ba:21:06:71:1f:81:fd:d9:ec:8d:
e6:cb:92:9f:22:f5:2f:6c:27:25:57:4f:fb:62:d7:d7:e0:ba:
1f:4c:12:2c:c6:e1:5a:ff:ac:5e:06:51:a3:2a:8f:b4:df:c6:
ad:79:3e:6a:24:7a:aa:57:17:09:01:8c:28:3e:0c:d2:47:ce:
18:ee:ad:4d:54:60:8d:17:e0:34:4f:20:2f:92:6c:9c:b7:34:
32:6d:a3:c3:52:9e:62:c5:89:70:25:b6:04:32:b2:0d:07:bf:
f2:a4:06:fd:c8:a3:c5:3e:b8:00:01:38:83:a7:a4:9b:e5:e9:
52:78:00:12:3e:2c:0e:51:ab:22:75:69:31:57:28:7a:9c:3e:
44:a8:0f:24:ed:b9:32:d8:9b:02:aa:08:de:6a:e8:99:8e:ff:
b2:c4:23:c2:cb:36:b1:91:ed:25:55:26:03:e7:f2:2b:bd:a1:
07:25:aa:ac:ad:20:c4:2b:e6:a5:66:62:39:b6:2e:fc:02:2e:
cf:07:fc:7d:4f:4d:5d:b7:3b:53:d7:bd:97:58:57:1e:b5:21:
2f:ce:4f:32:2b:2f:d5:10:b6:bb:a6:22:dd:49:e5:12:89:f5:
74:48:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org