Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/578084af-efc7-300c-84ba-60e3e34d4fa9.roa
File: 578084af-efc7-300c-84ba-60e3e34d4fa9.roa (raw, json)
Hash identifier: xsbpoJymo8UAlOym1MmJiZlxx7UG4VYl3fJ1BnhtKQ8=
Subject key identifier: AE:65:BE:53:E0:BC:52:D9:49:A8:67:CE:A9:CE:37:7B:3C:E2:70:30
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328584309F8DF92E8A7F5D0BB4F7900
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/578084af-efc7-300c-84ba-60e3e34d4fa9.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.88.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f8:df:92:e8:a7:f5:d0:bb:4f:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c5922890-864a-4a42-bce5-2d8de72bffaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:38:76:94:88:40:2a:9f:8e:bc:be:92:d1:
38:39:a9:02:a6:98:35:44:08:89:e6:95:c8:4d:85:
6f:ec:2a:7b:d6:18:b2:cf:c0:ef:8f:9e:14:a6:8b:
e4:1a:ee:87:46:f2:cd:c0:cc:d3:3c:b3:aa:0e:ed:
98:04:a0:ba:c6:14:f0:1d:d2:22:0b:a1:4f:95:1b:
fa:8d:1c:69:98:9f:e1:bd:9b:f5:a7:e4:4f:31:e1:
b6:8d:10:7a:aa:ba:74:78:6d:ce:40:76:e0:a1:cb:
76:44:fc:72:f3:44:21:e6:96:b0:a4:3f:12:bd:44:
89:84:e7:d0:72:cb:eb:31:e5:7e:4b:4f:cf:ae:b1:
e4:f6:d9:0f:b2:0e:58:67:31:88:e2:84:60:2c:44:
aa:78:7a:cb:e9:f2:95:0f:e3:3f:d5:d9:94:ca:fd:
79:c0:0f:6e:0f:73:87:1b:49:4e:c3:6c:0c:34:10:
88:64:14:ff:16:31:46:f5:7a:45:04:5c:16:4c:58:
de:55:81:82:d4:52:c7:f2:fd:4d:d0:15:dc:ae:08:
10:d5:fc:28:65:a6:ee:fa:79:32:02:2b:ef:28:6c:
86:7d:5b:a3:ba:98:d5:a5:24:8c:4d:2a:9d:e0:dc:
f3:eb:f6:68:0c:f9:3c:5f:7c:f9:b8:7f:c9:8b:bf:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:65:BE:53:E0:BC:52:D9:49:A8:67:CE:A9:CE:37:7B:3C:E2:70:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/578084af-efc7-300c-84ba-60e3e34d4fa9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:bf:26:0e:1b:87:94:56:08:b7:7a:ce:19:ac:30:f3:72:e6:
3a:14:ec:e1:13:2a:3e:cf:f5:b2:96:3a:cf:99:1c:97:f2:a9:
f0:b0:6b:7f:18:8b:cb:02:13:67:a1:a5:3d:f3:34:71:d1:ee:
59:9e:cc:1b:44:8f:d1:33:03:58:8f:c3:1c:12:ac:4b:04:14:
8a:83:dc:ab:8a:b7:51:76:ae:1d:82:9b:f0:43:37:7b:6c:f0:
63:31:f0:3c:8b:56:4f:c5:fe:39:85:40:5f:13:12:00:6b:ae:
4b:64:18:d6:2c:66:df:14:34:39:16:ae:6c:fb:8c:47:93:1f:
70:b1:c8:78:41:9e:f1:34:19:e1:e6:f2:eb:37:9b:81:4a:bb:
a7:54:37:86:f4:17:88:9e:24:84:ba:0e:55:23:46:5a:a4:9c:
45:0c:60:d7:e4:6f:1e:de:41:14:41:ec:46:3f:d4:c6:84:26:
1a:ea:0e:34:18:29:35:df:55:c9:52:21:54:23:de:ba:13:05:
9c:97:d6:43:a8:b8:88:67:ee:e5:1e:03:e8:9d:72:50:19:09:
ff:e7:b9:3a:5e:09:88:dd:15:68:38:0e:3b:9c:1c:71:ef:61:
06:0f:8b:b5:1c:49:c3:7d:94:9d:4a:86:dc:c7:13:e8:f6:7b:
5c:da:ad:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ+N+S6Kf10LtPeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YzU5MjI4OTAtODY0YS00YTQyLWJjZTUtMmQ4ZGU3MmJmZmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXU4dpSIQCqfjry+ktE4OakCppg1RAiJ5pXI
TYVv7Cp71hiyz8Dvj54UpovkGu6HRvLNwMzTPLOqDu2YBKC6xhTwHdIiC6FPlRv6
jRxpmJ/hvZv1p+RPMeG2jRB6qrp0eG3OQHbgoct2RPxy80Qh5pawpD8SvUSJhOfQ
csvrMeV+S0/PrrHk9tkPsg5YZzGI4oRgLESqeHrL6fKVD+M/1dmUyv15wA9uD3OH
G0lOw2wMNBCIZBT/FjFG9XpFBFwWTFjeVYGC1FLH8v1N0BXcrggQ1fwoZabu+nky
AivvKGyGfVujupjVpSSMTSqd4Nzz6/ZoDPk8X3z5uH/Ji7/TuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK5lvlPgvFLZSahnzqnON3s84nAwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNTc4MDg0YWYtZWZjNy0z
MDBjLTg0YmEtNjBlM2UzNGQ0ZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBZYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEq/Jg4bh5RWCLd6zhmsMPNy5joU7OETKj7P9bKWOs+ZHJfyqfCwa38Y
i8sCE2ehpT3zNHHR7lmezBtEj9EzA1iPwxwSrEsEFIqD3KuKt1F2rh2Cm/BDN3ts
8GMx8DyLVk/F/jmFQF8TEgBrrktkGNYsZt8UNDkWrmz7jEeTH3CxyHhBnvE0GeHm
8us3m4FKu6dUN4b0F4ieJIS6DlUjRlqknEUMYNfkbx7eQRRB7EY/1MaEJhrqDjQY
KTXfVclSIVQj3roTBZyX1kOouIhn7uUeA+idclAZCf/nuTpeCYjdFWg4DjucHHHv
YQYPi7UcScN9lJ1KhtzHE+j2e1zarQg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:54 2025 by rpki-client