Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6c356504-ce81-37da-84a2-89bc4e66f3d3.roa
File: 6c356504-ce81-37da-84a2-89bc4e66f3d3.roa (raw, json)
Hash identifier: Yjq6+EQzL8fLalhk5OTZLXF2DkOM1r5LJk76CX2VYx4=
Subject key identifier: 12:3B:69:C9:D4:F9:E6:47:AA:DB:75:19:62:83:33:20:64:2A:DE:E5
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328583AA7B58C61B973E0AB0DC5E800
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6c356504-ce81-37da-84a2-89bc4e66f3d3.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b5:8c:61:b9:73:e0:ab:0d:c5:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=fe04fb49-0e70-4218-9fee-f3417eaa5b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cf:0f:17:84:f8:8e:b2:a6:2d:9a:b5:d2:53:
ba:87:0e:6b:fc:e5:2f:0f:b0:0c:6f:7f:4b:c4:a3:
9c:e1:17:8c:25:e6:9c:0d:f2:03:d7:18:fe:6f:c2:
db:76:67:b1:34:2b:33:ae:8a:e2:64:af:e2:b6:c1:
7a:87:21:9e:51:e5:07:46:b3:4e:8a:f0:42:4b:ca:
be:26:c5:0c:47:f3:7c:ae:f2:94:b2:d6:e6:d4:56:
46:ec:b2:80:c0:1c:6d:87:b9:97:4d:47:f5:8d:34:
40:68:d6:7f:dc:e1:83:02:67:e3:bf:89:40:bd:c9:
f1:c7:c5:33:92:0c:79:c3:01:7d:a1:2d:c9:a5:56:
93:e7:60:39:e6:99:54:bc:61:43:0d:ec:e3:3c:61:
71:35:5f:db:26:f8:35:be:09:8b:fa:c1:90:d1:28:
60:7a:3c:5e:e7:15:54:21:b7:76:5e:a7:1a:19:99:
43:ca:a1:68:e9:ab:ce:c1:eb:29:4e:75:19:d6:6f:
90:d1:d1:d8:4a:13:ec:49:3d:8b:a7:f7:60:97:95:
b4:40:37:90:08:52:b5:e0:3a:90:ff:b9:f2:b9:a0:
ac:72:fc:af:ef:ee:fa:7d:52:d8:be:1e:36:bc:ee:
9c:08:cd:f0:4a:23:65:50:12:87:d6:19:f9:d3:36:
5e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3B:69:C9:D4:F9:E6:47:AA:DB:75:19:62:83:33:20:64:2A:DE:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6c356504-ce81-37da-84a2-89bc4e66f3d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:fa:8d:5a:f9:fa:96:5a:ea:15:46:a9:37:69:69:2b:d2:d8:
00:b7:11:7a:33:86:ee:68:bf:ab:f2:85:f1:55:a2:53:7e:b3:
75:f5:0e:a8:1a:5d:f0:77:b9:87:48:6d:a2:ff:dc:46:9c:b9:
47:8e:4a:26:c6:d4:93:ac:28:80:e9:81:e3:c8:94:0a:5d:98:
3f:0f:10:a6:65:7f:0a:12:72:8b:db:88:5b:52:1d:e5:8d:2d:
ad:51:cc:78:0c:a5:e9:f0:55:87:7c:a8:1d:d9:58:0a:10:14:
02:be:76:7c:ae:3b:f4:73:1b:45:8a:b8:a7:05:ca:ec:bc:61:
15:b0:cc:11:06:5a:b4:4c:9e:df:b6:ac:2a:8a:9f:90:95:1e:
53:36:e6:c3:ae:75:aa:70:cd:e9:f5:34:8b:c6:75:51:9c:39:
3c:a4:29:6b:55:f8:27:e2:cb:13:82:41:a9:fd:e0:9d:75:50:
30:84:44:59:47:35:db:9c:aa:cb:4b:19:ab:7f:01:04:22:89:
80:e7:66:6b:f8:20:a7:2b:ce:9b:2d:6c:ad:c2:6b:c5:9c:a1:
88:1d:a0:33:2e:cb:c3:fc:31:b3:38:74:f2:f9:a4:17:03:d3:
b1:ce:1e:d0:a7:3d:02:f1:02:56:1e:55:5a:6c:82:d8:de:7d:
42:da:31:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org