Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68ab0250-2857-32d6-b88a-83f186df3a23.roa
File: 68ab0250-2857-32d6-b88a-83f186df3a23.roa (raw, json)
Hash identifier: F8juRGdmtLu7E+7tTI7moEE0adTUaBhOZZcmCepZU0E=
Subject key identifier: F7:8C:35:04:12:31:85:67:27:FD:C0:E1:A6:E9:19:AA:E4:7F:8B:18
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328583AA7ADC8898F01E13CE1B907C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68ab0250-2857-32d6-b88a-83f186df3a23.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.240.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ad:c8:89:8f:01:e1:3c:e1:b9:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=a65686f6-144c-4a3e-9c20-7dc380b9cbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:50:b0:33:75:6a:81:a5:13:fa:31:0c:e0:
9d:d1:00:fe:1d:5d:bc:51:bc:f2:df:e1:9c:bc:11:
ff:bd:4f:2f:46:a4:64:f1:43:3a:4b:6c:80:11:b1:
66:34:fb:52:9d:05:02:8c:cb:66:5a:5e:cc:dc:f6:
cc:e3:3a:55:0b:d6:14:e3:84:07:af:d4:88:8e:44:
fb:a6:42:b2:fa:67:57:b2:40:60:f3:b3:64:f6:46:
e4:b4:dc:30:36:35:a5:ea:3f:f8:ba:4e:c9:d9:c4:
76:95:b3:e6:2b:91:aa:11:6a:d4:af:fb:b5:70:3a:
4a:d0:05:c7:85:3f:40:91:85:6e:a2:9a:f9:6d:37:
ed:29:da:ff:e2:c2:c2:a4:6c:8b:d2:37:65:2d:ae:
35:aa:08:b1:c4:4d:e3:2b:db:f8:6c:d8:09:16:58:
26:d8:b9:1c:46:53:d6:be:5f:96:16:ab:88:d6:89:
d4:5d:50:44:84:34:be:31:98:f6:3a:24:ca:df:94:
fe:13:fa:d0:dc:6f:2f:bd:d9:f4:78:b4:f6:d7:5d:
11:2d:36:aa:97:03:94:2e:bd:71:80:a2:e7:3d:62:
7a:2f:f6:92:40:cb:1e:30:b9:12:ff:4f:65:ae:65:
ab:59:2e:39:a6:ec:8c:93:9f:73:37:d8:75:ed:72:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8C:35:04:12:31:85:67:27:FD:C0:E1:A6:E9:19:AA:E4:7F:8B:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68ab0250-2857-32d6-b88a-83f186df3a23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:76:8d:9f:5d:e9:08:30:23:91:35:42:98:c2:7e:7c:2e:59:
3c:d6:e2:26:f6:4c:5a:8f:84:09:b0:93:9e:22:48:11:52:f1:
15:e6:b3:aa:32:38:6f:27:08:da:e4:93:0c:db:84:73:7a:2d:
df:05:d7:bd:e8:df:f1:71:a3:52:a1:50:20:f6:c1:df:cb:6d:
cb:63:68:72:3b:85:42:14:74:a1:91:3a:ed:ec:cd:91:0f:54:
ee:4d:89:da:89:b6:67:e7:f4:b5:72:06:f7:a7:7c:29:81:5f:
43:c3:6c:5b:10:48:f6:b8:9d:db:44:9f:29:5f:44:b8:5b:85:
03:0a:6f:2d:cc:08:b5:8e:bc:2c:8b:4a:56:2e:55:12:e8:2e:
89:d6:09:7a:f2:b6:02:84:ff:46:51:69:0c:07:30:35:61:ab:
5d:22:44:2c:22:ce:78:b6:61:a9:71:74:6e:d0:46:84:09:7a:
e9:67:a3:8f:c9:70:25:bc:ff:df:8a:9e:b1:c9:68:45:8d:7d:
20:44:0d:5e:73:fa:24:ee:6a:23:e6:3c:06:4d:20:be:05:7c:
d5:5c:d8:58:f6:18:b1:60:fc:c9:29:12:85:00:48:9e:35:25:
0a:00:c6:53:32:db:0e:ba:67:48:ae:a7:ff:9c:cf:90:bb:f7:
ce:ed:c7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org