Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/419311e0-97e0-3da1-af6a-bbffa7011ca1.roa
File: 419311e0-97e0-3da1-af6a-bbffa7011ca1.roa (raw, json)
Hash identifier: iHVCDV/sZw56Jt/DXcJSUZ22hQFkyid6drDt6KZZqQk=
Subject key identifier: D6:F0:16:5B:61:5C:B5:4B:5F:E7:44:E2:92:82:A1:61:79:FE:98:B9
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328583AA7A0D89782341B4AC7123010
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/419311e0-97e0-3da1-af6a-bbffa7011ca1.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a0:d8:97:82:34:1b:4a:c7:12:30:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=58158224-6635-4487-bf59-62837548c1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:43:cf:d6:dc:ba:a8:3a:73:fa:27:3e:d1:28:
df:10:9c:9b:1c:84:a3:53:c6:50:95:9e:f5:a7:18:
e7:ed:88:8d:f0:53:60:6b:d9:e5:2d:fc:7b:2e:28:
e3:f4:fb:b0:b0:96:70:e2:40:24:f6:a9:a5:b6:f2:
82:f4:46:75:22:79:9a:65:de:4c:d5:8b:7f:fc:b0:
f6:40:da:7e:1c:b1:82:8d:46:9c:f0:f4:8c:85:e2:
2c:72:a4:c7:62:79:da:c6:cd:0f:58:b9:94:db:84:
2f:f2:0a:23:47:03:eb:1b:07:8d:82:b9:83:72:22:
78:da:68:a0:f9:93:fd:56:b9:a7:f8:20:1e:06:3d:
6f:d2:a6:54:d1:61:8b:ce:5d:4a:21:5e:79:5d:34:
4c:9c:47:b1:25:0d:c3:c5:6d:6b:81:da:f9:e2:2b:
55:00:24:bc:4c:2a:29:c9:5b:37:8b:e9:cd:64:ac:
35:ab:69:f5:76:07:da:cb:be:de:0f:3c:ed:32:5a:
e9:7c:76:61:3f:78:c3:28:c5:d6:31:86:ce:1d:68:
10:96:8a:4f:06:49:d6:bc:c3:85:b1:16:d7:9c:de:
08:bc:0f:9c:48:e0:e8:15:57:69:a8:61:36:41:d1:
ff:e1:ad:06:d4:e8:47:c1:9b:c3:00:d4:85:74:41:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F0:16:5B:61:5C:B5:4B:5F:E7:44:E2:92:82:A1:61:79:FE:98:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/419311e0-97e0-3da1-af6a-bbffa7011ca1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:57:3f:8f:21:c5:be:e1:f1:3d:d4:03:ba:1a:c7:72:36:1d:
cb:6c:07:1c:e3:d1:47:71:99:55:60:f2:be:99:1d:cc:63:d5:
1b:d6:b7:8f:58:c0:cb:92:59:f7:e2:e3:f1:cf:31:ac:8a:2c:
06:d3:82:dc:21:5c:cc:04:2e:0d:b3:d1:9d:58:90:1f:41:24:
29:2b:fe:3d:ea:9c:74:c7:66:a1:17:77:74:51:e7:b2:b0:7f:
f7:26:a2:b0:97:45:8e:c4:f1:c4:65:9f:a6:a2:ee:09:35:92:
bf:ee:97:cd:9f:42:f3:37:8e:8f:40:d9:2c:cf:b1:b0:40:bf:
18:6e:78:16:a6:43:ee:e9:5a:4d:1d:cd:85:3b:3f:40:79:b9:
d9:3e:5f:21:96:da:74:17:fe:da:67:a5:a3:2e:d0:78:7b:89:
4c:f9:ef:c6:29:b4:57:d6:59:c2:8a:c3:70:0c:cf:76:1e:57:
70:25:0f:18:2d:81:3b:a1:f4:6d:ef:dc:0b:be:2c:03:d6:b4:
e7:fe:e4:fa:7c:df:f1:fe:9d:bb:1c:14:a8:64:e9:67:b8:8b:
57:2c:13:8d:f7:b9:64:6d:60:d7:f6:3e:90:f3:2a:40:a6:1c:
54:7f:b2:8b:dd:dc:4f:4e:f8:07:a2:14:c1:29:b7:f7:d4:6f:
aa:41:36:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org