Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6e39d281-c2f4-3068-b671-23962b4a9fa2.roa
File: 6e39d281-c2f4-3068-b671-23962b4a9fa2.roa (raw, json)
Hash identifier: xlA2GSl/6yTqc9tigCWEbkXgfgNs2e4bF3LkzlHW3EA=
Subject key identifier: 24:A3:21:1A:73:DF:02:3B:0F:E1:68:E6:55:DF:D9:A5:0B:2A:05:37
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328583AA7B1738CB8303DF0999B5000
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6e39d281-c2f4-3068-b671-23962b4a9fa2.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b1:73:8c:b8:30:3d:f0:99:9b:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=001b01bf-40ae-4c42-af78-3419056bb6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:63:59:bc:14:59:8f:e2:2f:00:0a:06:93:4b:
17:3c:94:01:53:e1:6d:7a:72:1b:d4:af:ac:cb:82:
60:f8:8e:bc:bc:c1:fd:0c:a5:39:d8:3a:50:4e:d2:
9d:b4:d7:fe:34:b1:ed:e9:04:51:64:70:21:76:19:
ff:d1:ee:ed:09:4c:eb:74:24:45:d5:f6:21:3a:1b:
5c:61:7e:44:06:f0:d7:38:a3:89:15:0f:e1:a9:93:
93:a7:46:0d:ff:90:70:70:18:1c:6d:92:ef:1e:39:
79:a8:cb:19:7d:49:1e:ad:cd:72:85:51:cf:9c:a1:
f6:ea:c3:66:e5:e0:6c:30:64:f6:13:0b:6c:21:f9:
51:e1:7e:6f:46:11:bb:52:3f:41:e1:13:ab:81:db:
4b:62:77:7a:89:84:01:5a:a8:a2:01:bd:3d:d6:48:
d2:a6:5d:7a:d6:7f:28:d7:80:95:58:dc:b6:a9:40:
af:c5:50:75:6a:3b:4f:1c:84:8e:0c:1b:e0:e1:da:
9e:68:29:83:57:9d:2c:07:c3:31:9c:4f:95:34:4b:
b2:e1:8a:7d:3c:57:da:63:c3:89:e7:ae:e4:b4:56:
1b:db:bb:75:e4:22:c7:09:da:26:25:bd:0b:25:0b:
56:75:8b:d5:70:31:ab:57:04:f9:0a:81:e0:04:8c:
e7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A3:21:1A:73:DF:02:3B:0F:E1:68:E6:55:DF:D9:A5:0B:2A:05:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6e39d281-c2f4-3068-b671-23962b4a9fa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:c1:a0:9e:dc:6d:06:2d:4c:fc:a7:21:e1:f9:b5:6e:72:17:
b6:d4:75:55:74:e2:43:36:6a:15:71:bb:37:4c:59:fc:71:da:
01:eb:eb:4b:60:2e:64:b6:9c:9d:8d:65:37:cf:a6:e1:68:6d:
52:8c:b1:52:ed:ab:7b:8a:f9:c8:49:f6:40:5a:b5:5b:44:bf:
82:8f:f3:58:9f:7a:96:94:a4:90:92:cd:b8:38:a2:fc:86:65:
bc:fb:38:9f:5a:d7:58:d2:fb:62:6b:33:21:b5:dd:4c:21:c1:
2f:9b:50:f6:58:56:0a:19:95:c0:86:9c:13:70:56:bd:23:a1:
e0:1c:73:71:8a:9f:f4:ac:d3:55:4c:aa:6c:e2:f1:40:91:8a:
1f:c3:6a:c6:be:3c:fb:ba:34:0c:fd:da:b6:a8:ea:68:36:dd:
90:f3:5e:c9:5e:79:16:73:b0:13:a1:1b:84:f8:85:e3:e7:25:
93:a5:45:8c:84:83:5c:30:fb:a2:00:ff:a7:58:44:f7:ea:c8:
16:68:d7:09:fa:e1:56:30:5c:35:8c:99:26:40:73:3e:65:b7:
2d:60:5a:d0:69:ab:3d:e1:54:f1:69:7c:8a:d1:06:f1:ad:b9:
84:3c:a3:aa:4f:17:bb:20:fe:cc:5b:54:d0:fc:07:a8:36:cd:
6e:4a:fe:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org