Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/33ac7eb3-b215-3db0-900c-2f292d84fe8b.roa
File: 33ac7eb3-b215-3db0-900c-2f292d84fe8b.roa (raw, json)
Hash identifier: cWqxteIKmiSsUUXePd90wkdVjNERAWE8Dc39nXwyc5U=
Subject key identifier: E3:1D:9A:A2:2C:FC:53:D1:16:0B:7C:32:D2:97:F4:46:64:C3:B4:AC
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328583AA7B5AC2E7DFB3B21AA2D4080
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/33ac7eb3-b215-3db0-900c-2f292d84fe8b.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b5:ac:2e:7d:fb:3b:21:aa:2d:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=bd87f12d-1984-4049-9bb9-8574b86e754d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e2:fa:81:f6:00:4a:0f:e4:aa:5b:a1:0f:f1:
b3:f2:f6:59:27:97:ef:95:47:8e:9c:df:0c:66:e0:
3d:08:1a:cb:0a:dd:3f:1c:8d:dc:42:c0:52:a3:bc:
1a:a5:aa:9e:82:ee:6b:0a:6b:ea:29:60:e5:72:13:
92:eb:63:71:9a:73:0c:1b:86:92:b0:38:77:ba:0d:
67:a4:10:8a:c4:28:e3:b0:4f:3c:4b:51:b6:00:96:
26:18:64:a2:c0:d1:d6:a9:eb:c2:8e:c1:9d:d1:52:
c7:c6:55:79:36:1c:e3:5d:d5:35:c8:68:ae:7c:ab:
5c:27:f1:0b:89:d8:32:a7:fb:f6:1f:03:56:43:80:
98:dc:13:d7:de:76:56:64:b7:71:96:68:d8:03:c8:
1f:10:d9:fa:1b:2a:32:85:3d:83:31:86:76:ce:d3:
46:2c:c0:fa:95:f4:22:b9:2e:a2:2e:1c:73:92:a1:
4e:90:35:8d:9c:6a:fc:d0:32:57:1f:f6:6e:05:fc:
45:d7:18:50:be:e7:b5:d2:a5:8b:b6:24:ac:4a:89:
d2:16:60:ba:4b:3b:aa:0d:94:31:62:23:eb:44:bc:
50:a9:bf:2c:01:e9:28:e7:57:47:bd:40:4d:0a:cd:
0b:ac:da:7b:82:b2:12:8b:fe:e5:2b:61:95:4a:60:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1D:9A:A2:2C:FC:53:D1:16:0B:7C:32:D2:97:F4:46:64:C3:B4:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/33ac7eb3-b215-3db0-900c-2f292d84fe8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:e8:d1:3a:42:1c:d5:20:57:8c:7a:4b:62:74:b0:42:8d:ca:
9e:a6:5d:27:2b:27:d0:2d:8b:60:15:49:72:36:db:ff:a7:44:
19:c3:a7:e5:c5:9c:3c:78:9d:24:52:73:25:be:5c:84:9a:19:
05:d5:7f:bf:56:91:f1:c5:89:60:57:53:2c:3c:b2:de:7e:e9:
63:6b:1d:17:5c:33:96:91:ea:e6:ba:f7:12:f2:da:97:13:49:
10:c7:90:13:6b:3c:60:c6:d5:b9:c0:c9:ca:5d:bd:0d:c3:4d:
9d:55:b4:ab:5e:d7:59:fa:e7:f2:a7:ff:60:2e:83:eb:16:30:
04:c3:b2:f8:46:49:89:f0:8e:5c:32:48:88:3a:6b:f8:ff:55:
46:2c:8f:16:0d:cc:35:c1:99:dd:06:1f:3f:2c:70:d3:12:0c:
95:76:2e:6d:97:91:65:38:a0:8b:d7:da:5c:0c:36:74:24:01:
d4:6e:09:f5:3f:5d:d3:2c:99:d0:7a:e8:77:5c:39:6f:1d:1b:
f2:0c:91:d5:03:fd:f0:0a:a5:68:e2:f6:d4:39:93:10:f1:1a:
63:dd:a7:be:65:73:e9:25:fd:f9:8d:8c:3a:eb:41:8a:09:7f:
4d:1f:71:0f:ba:ba:05:de:24:59:b8:6b:12:ba:71:9b:13:53:
78:8c:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org