Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5f7c6d8b-9ce7-3dea-90cb-3b3690779be2.roa
File: 5f7c6d8b-9ce7-3dea-90cb-3b3690779be2.roa (raw, json)
Hash identifier: JvijVKgCfmiIIZ6cvPh1a8Hvi65mceMCkXsdeRnvCyc=
Subject key identifier: 01:B3:83:46:FA:18:6A:A1:E6:D9:C8:2A:CB:59:C5:B3:60:D8:A4:B4
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328583AA7BE9366254D74D546354D00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5f7c6d8b-9ce7-3dea-90cb-3b3690779be2.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.228.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:be:93:66:25:4d:74:d5:46:35:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=8c478cd0-7c7a-4541-8510-1fe70a259485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:40:fc:18:40:e1:0f:84:6c:25:17:79:3e:
ea:73:7d:5a:43:e7:ff:97:72:6a:c1:08:16:31:c7:
d3:f6:8d:bc:d0:e1:10:c7:56:66:b2:fb:ec:3e:9e:
56:3e:af:47:6b:18:7e:95:a7:3b:72:b0:2e:ab:1e:
ef:ee:6f:f6:50:bc:e5:4c:e1:3e:0b:53:5e:f3:1f:
84:61:84:3f:14:cf:e4:2d:d3:7b:16:c4:a3:7c:36:
0f:2d:df:ae:29:2a:d1:56:53:0d:17:7a:d3:47:51:
b0:70:46:29:e3:d9:80:1d:f7:0e:c7:17:42:a8:1b:
d7:75:40:a9:31:a2:11:98:6e:75:0e:30:90:6e:df:
cf:92:7a:31:e9:65:e5:93:79:e2:8d:f7:01:a1:99:
38:14:fd:1b:03:36:56:91:16:1f:1f:9a:89:3b:85:
a1:80:85:d4:b4:73:0b:ae:81:f2:45:ea:cd:c9:1f:
81:e0:b7:31:92:0e:fe:8c:28:37:8f:16:23:ee:d6:
21:a3:1f:b8:ab:06:60:af:23:cb:f9:2b:32:ac:14:
ca:be:af:0a:a2:d6:87:76:06:f5:ff:60:6d:c1:a0:
cf:dc:de:a2:4a:dd:2d:12:79:45:ff:61:ac:ea:c9:
0d:be:51:6b:e6:e7:68:da:c7:ed:c1:f5:9e:55:3b:
fd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B3:83:46:FA:18:6A:A1:E6:D9:C8:2A:CB:59:C5:B3:60:D8:A4:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5f7c6d8b-9ce7-3dea-90cb-3b3690779be2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:72:67:19:28:f2:b5:98:77:7d:08:1a:19:be:a2:7a:7d:be:
bb:77:85:c9:0d:ef:28:77:27:f9:fb:1b:fc:52:c5:79:11:0f:
a5:f4:0d:19:9c:3e:f7:62:f1:ee:a3:45:69:d0:86:06:9e:ce:
12:34:a8:ae:5b:50:49:e7:a7:4e:1a:ee:92:40:bb:62:59:48:
c8:87:b9:8a:42:bf:f4:c3:45:de:62:98:f0:08:bb:a1:d8:fc:
cc:f2:63:4c:d4:22:38:75:20:f5:6a:02:b5:8e:eb:6d:d8:30:
63:e7:b7:0c:4b:ee:a0:35:ae:f4:47:23:88:8c:9a:0a:b8:a1:
9e:0e:11:ed:a7:3a:bb:e6:b0:18:22:ae:aa:c5:cb:16:68:cc:
6a:40:c3:cb:71:08:3d:c4:cd:f8:0b:fb:b2:e3:1e:08:db:10:
0b:a6:d6:ac:4e:29:58:62:eb:40:ea:1a:7c:43:af:b6:cb:31:
c1:2e:b1:f1:b7:06:ae:06:91:a2:30:95:35:47:8c:6f:11:f8:
ac:6a:ad:3f:5d:a5:9c:10:b9:5f:37:40:92:c1:de:70:00:a7:
9f:75:d4:ba:71:b1:81:59:76:65:7c:f2:02:2b:c7:ac:b8:85:
cf:31:75:e1:7e:25:55:3f:1b:c6:8e:5b:9f:07:40:83:75:4b:
b4:00:f9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org