Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6ba5a7a3-e2c3-3d87-a81f-fb23989df9d7.roa
File: 6ba5a7a3-e2c3-3d87-a81f-fb23989df9d7.roa (raw, json)
Hash identifier: OTOqeG2WXcofcaWJKGwVFiAup7NfX6q94ENGyYScOZg=
Subject key identifier: D5:F9:4E:17:EB:67:4C:F6:7F:78:7F:1E:28:EB:81:56:EC:98:83:51
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328583AA7AAE9F9379B16EA0A6A7580
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6ba5a7a3-e2c3-3d87-a81f-fb23989df9d7.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:aa:e9:f9:37:9b:16:ea:0a:6a:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f8a250fa-4518-4653-985f-722a4d2f3bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:99:ee:5e:91:65:f8:fb:58:d0:4d:40:5d:1e:
6c:04:e6:8b:8c:25:70:4c:72:79:5d:1e:87:7b:3b:
59:bd:09:66:c8:c3:c9:fd:5a:95:94:42:db:5c:c4:
07:f4:05:f6:0f:c5:aa:0e:94:ac:58:c4:7a:b7:10:
11:2b:21:40:45:b6:a6:32:d9:ee:01:93:a7:7a:1b:
19:33:64:89:d1:99:c8:72:09:b3:ee:6b:c6:b5:cb:
53:fe:f5:73:2e:eb:8a:35:19:4f:35:d1:74:d5:9f:
15:f9:22:12:ff:53:a6:40:e0:f9:66:54:7b:1e:7e:
f8:3e:cc:71:99:19:2e:1c:67:db:25:9d:da:e6:52:
a4:74:0c:18:d6:2b:f4:7a:79:ff:da:9d:fc:57:15:
bf:b1:d8:0c:fd:33:49:dd:10:ca:38:99:76:68:ec:
8d:b0:3c:6c:18:f9:62:16:4f:fa:66:f0:1a:a7:a8:
8e:8c:2f:60:a2:09:ed:ae:5a:ae:72:96:f2:3b:cc:
78:73:de:71:f8:32:8f:04:b1:38:ae:6f:ff:12:b5:
25:cb:16:a4:b0:81:c5:eb:b5:6d:8b:7f:3d:e7:c9:
2b:3c:88:ec:36:56:33:94:74:18:52:f4:b5:a6:14:
ca:f7:fe:0f:2f:05:ca:85:5d:1c:be:1b:10:45:6d:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F9:4E:17:EB:67:4C:F6:7F:78:7F:1E:28:EB:81:56:EC:98:83:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6ba5a7a3-e2c3-3d87-a81f-fb23989df9d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:4f:1c:16:e6:6b:13:82:02:b0:f9:f9:4d:f0:00:ea:16:cd:
ac:f5:4e:7e:1c:9a:c5:d7:68:14:58:85:f4:a9:c8:96:46:4c:
54:e3:40:19:f8:fb:d0:6f:20:51:da:b3:2d:a1:20:cb:cd:ac:
9a:1c:d5:d1:03:b8:ca:22:d0:06:05:ab:9e:37:a2:75:cf:7e:
44:18:bb:ac:0a:a2:24:3d:36:86:bf:67:a9:bd:4d:cc:17:f7:
a7:96:a2:65:95:1f:3f:79:88:48:72:2e:5a:c0:8a:35:8b:89:
c4:dc:bc:53:65:c5:10:c6:69:55:16:6a:18:f5:cf:12:04:1d:
f6:75:bc:0f:5d:b2:13:34:b5:45:fb:6b:9d:ef:20:fb:c0:b1:
f3:fa:1b:86:96:32:39:a4:71:62:a6:9c:b7:7c:76:82:7a:65:
c3:70:57:14:66:3e:f4:ac:4d:1e:f7:92:f5:a1:5d:e0:74:eb:
46:81:76:c6:6a:86:19:9a:35:f7:23:a7:f9:63:ef:02:56:05:
47:3d:9d:93:e8:08:07:26:b2:a4:b1:5e:db:5b:50:1f:b2:aa:
b0:25:a8:c1:f0:d9:4a:fd:4c:eb:65:4d:9e:b9:ca:73:77:fd:
50:a8:ab:a7:d9:57:35:3c:aa:a4:ca:4f:fe:1e:72:c1:a3:7a:
04:6c:52:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org