Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3fcf7677-c70c-32de-a8eb-0df56c746016.roa
File: 3fcf7677-c70c-32de-a8eb-0df56c746016.roa (raw, json)
Hash identifier: WncP/3KruBP6II7obLeXXpjEYz9o6rpyQqYT8D7QPWs=
Subject key identifier: 67:CA:7E:33:4B:5B:3A:25:98:34:24:39:82:D4:7F:21:54:B9:60:05
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328583AA7A51F2966675719EEC8C6A0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3fcf7677-c70c-32de-a8eb-0df56c746016.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a5:1f:29:66:67:57:19:ee:c8:c6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=e3d9cf65-8699-4837-9b6a-7afdebfa6f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:b6:35:18:ec:18:06:61:bd:92:5e:2e:91:
a1:0a:ec:d8:0a:af:f5:33:31:a4:dc:58:39:1c:47:
d1:cf:69:e4:13:60:62:40:14:49:da:51:7e:39:47:
f6:6c:26:fd:81:6c:b4:39:fa:da:01:81:da:8a:19:
37:08:e3:60:4c:f1:22:9d:b8:eb:52:a2:7c:f9:6e:
ca:ff:7e:98:0d:9a:38:9a:2b:ab:0a:d4:64:f9:44:
74:96:93:89:a2:a3:4a:d0:98:35:7e:ae:2c:98:f6:
a9:56:61:3d:6f:c6:60:65:bf:2f:59:41:67:ba:b1:
23:be:25:57:a4:7a:e0:a2:bc:82:48:58:79:d8:c9:
df:09:87:26:75:0d:72:1c:97:23:65:d2:9d:ad:ab:
1e:d9:e7:f4:46:5d:0f:d9:34:b8:69:9c:6b:10:bd:
60:ce:73:4e:f7:97:65:b8:aa:0b:e8:45:a9:af:fd:
af:11:6e:c5:6c:5f:30:ae:c1:47:25:1b:69:07:53:
20:06:a8:18:5b:f9:04:db:38:49:ae:f9:da:fc:5b:
ad:04:be:87:8d:cc:a1:a7:f5:76:8e:0c:95:c7:1f:
73:93:97:ae:17:31:c6:38:c2:d1:ee:9c:5c:1f:59:
01:81:16:b1:1c:ea:52:71:7c:b2:14:45:f5:16:3d:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CA:7E:33:4B:5B:3A:25:98:34:24:39:82:D4:7F:21:54:B9:60:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3fcf7677-c70c-32de-a8eb-0df56c746016.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:19:48:29:15:ae:02:72:fe:2e:9e:c7:29:a8:19:f0:d3:1b:
6f:73:20:c9:da:5f:b8:b8:e4:06:00:b4:32:36:86:8e:5a:7d:
1d:fa:02:df:35:00:50:e0:cd:03:3f:19:78:74:44:52:88:34:
e1:d6:3a:49:9d:ea:84:57:87:8a:7a:01:1a:3a:98:e8:14:58:
a7:ee:70:ca:5e:ef:24:48:5d:64:42:e2:9c:08:45:e7:7a:82:
c2:29:56:46:ab:2b:49:7c:3b:ed:7a:69:db:ac:de:b0:e5:91:
2c:19:7d:bd:ed:14:28:f1:e8:62:ca:4f:37:84:fe:a0:c8:20:
c6:85:f5:2d:bd:71:5b:d7:b7:f8:9f:2c:a0:dc:f1:dd:38:c1:
b5:3a:bc:7d:f7:1a:bf:28:bd:57:c1:1f:77:91:33:9f:51:dd:
7e:71:a8:d6:dd:ae:19:38:da:f1:85:a9:b1:a9:35:66:f7:4a:
83:56:b7:c2:9e:ff:41:f4:39:f3:03:23:42:dd:6a:52:46:1c:
ea:ca:3e:bd:7f:60:a5:aa:88:df:3b:7c:d3:a9:f2:fd:78:58:
bf:d0:69:78:c8:b3:44:cd:2e:c3:11:bb:1e:12:26:c9:3b:a5:
be:bd:db:5d:9c:92:61:e0:7e:d9:b4:5d:83:a3:fe:de:6c:56:
23:41:6f:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnpR8pZmdXGe7IxqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZTNkOWNmNjUtODY5OS00ODM3LTliNmEtN2FmZGViZmE2ZjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JG2NRjsGAZhvZJeLpGhCuzYCq/1MzGk3Fg5
HEfRz2nkE2BiQBRJ2lF+OUf2bCb9gWy0OfraAYHaihk3CONgTPEinbjrUqJ8+W7K
/36YDZo4miurCtRk+UR0lpOJoqNK0Jg1fq4smPapVmE9b8ZgZb8vWUFnurEjviVX
pHrgoryCSFh52MnfCYcmdQ1yHJcjZdKdrase2ef0Rl0P2TS4aZxrEL1gznNO95dl
uKoL6EWpr/2vEW7FbF8wrsFHJRtpB1MgBqgYW/kE2zhJrvna/FutBL6Hjcyhp/V2
jgyVxx9zk5euFzHGOMLR7pxcH1kBgRaxHOpScXyyFEX1Fj1EIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGfKfjNLWzolmDQkOYLUfyFUuWAFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvM2ZjZjc2NzctYzcwYy0z
MmRlLWE4ZWItMGRmNTZjNzQ2MDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZ1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD4ZSCkVrgJy/i6exymoGfDTG29zIMnaX7i45AYAtDI2ho5afR36At81
AFDgzQM/GXh0RFKINOHWOkmd6oRXh4p6ARo6mOgUWKfucMpe7yRIXWRC4pwIRed6
gsIpVkarK0l8O+16adus3rDlkSwZfb3tFCjx6GLKTzeE/qDIIMaF9S29cVvXt/if
LKDc8d04wbU6vH33Gr8ovVfBH3eRM59R3X5xqNbdrhk42vGFqbGpNWb3SoNWt8Ke
/0H0OfMDI0LdalJGHOrKPr1/YKWqiN87fNOp8v14WL/QaXjIs0TNLsMRux4SJsk7
pb69212ckmHgftm0XYOj/t5sViNBb98=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org