Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8d5dbad2-22d5-3dfb-9c5c-9f570fcb183b.roa
File: 8d5dbad2-22d5-3dfb-9c5c-9f570fcb183b.roa (raw, json)
Hash identifier: 8f5lTesqnzZpbEDlTifMu2eSCKE3zJvnWrC2TiYNJ+M=
Subject key identifier: 39:40:93:12:5B:88:61:B9:C0:1E:7B:1B:CD:D0:EB:55:19:F1:77:C2
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328583AA7B1A019F0646AE693587680
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8d5dbad2-22d5-3dfb-9c5c-9f570fcb183b.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.64.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b1:a0:19:f0:64:6a:e6:93:58:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=6d332cb6-f516-407c-b975-f560281cc2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:05:74:c8:32:cb:0b:a9:ed:3e:1f:f4:92:46:
3b:c4:80:e8:7f:aa:f7:e6:09:89:15:19:94:55:7c:
b8:5f:1a:35:fb:b8:ab:91:f8:6b:d8:b9:c8:cc:c0:
63:17:1a:c1:89:c1:07:eb:ed:97:b6:29:d9:4b:0f:
a6:27:ef:7b:85:af:30:28:51:2e:05:22:f4:ae:22:
51:14:5f:fc:8f:c2:74:28:9d:c6:b2:14:dc:5e:5d:
ff:51:d5:53:0e:5e:b7:ea:6f:e7:c3:17:f7:53:66:
8e:cc:be:71:09:21:a4:55:b3:05:cb:e0:1e:8d:e0:
13:16:30:d0:81:22:40:43:51:ae:17:58:f2:28:04:
20:e3:1f:d1:1a:2d:df:bf:29:77:bb:6c:bf:95:9f:
34:bf:0e:d4:2d:0b:86:ed:18:59:98:90:af:81:59:
1c:1a:37:f4:f9:24:5c:3f:65:e7:16:eb:58:a4:45:
36:1d:15:bf:b1:9a:f6:2a:38:67:1e:dd:8b:7f:25:
8b:1a:13:ef:73:5f:51:8d:c0:31:1b:80:4d:30:19:
a9:f1:76:e7:18:ff:da:40:2a:a0:29:85:81:ac:4b:
fd:99:99:89:25:14:da:ee:b4:d0:ff:4d:db:f1:3f:
a3:40:ea:cf:64:79:13:db:95:d4:bb:b7:50:a9:69:
9d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:40:93:12:5B:88:61:B9:C0:1E:7B:1B:CD:D0:EB:55:19:F1:77:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8d5dbad2-22d5-3dfb-9c5c-9f570fcb183b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.64.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:5f:01:37:8a:29:73:64:2f:f5:21:12:57:17:68:55:64:0a:
10:42:84:dd:4a:8c:a8:28:45:fa:25:07:78:2a:44:3f:f4:b7:
18:6e:26:08:df:77:6c:3c:62:bd:f3:b4:37:ec:c9:94:d9:9b:
80:08:eb:cc:23:5a:f3:70:60:4b:85:5c:b9:ca:05:7a:a4:96:
66:b8:38:7c:d0:55:1f:20:db:04:2c:f5:ed:49:8c:98:64:4a:
62:2d:0f:c4:6f:86:91:55:44:28:1c:9c:78:24:ac:1b:3f:ef:
6b:dd:49:b3:aa:2b:7a:cc:c6:72:d8:1c:54:d3:1a:f0:4a:11:
20:8d:99:18:1c:3e:73:3a:1c:7e:e6:f2:91:7e:01:ca:22:71:
99:f7:8f:e2:b6:ca:c0:57:4c:c4:85:e0:93:a9:bc:45:09:36:
77:41:6d:32:ad:31:1b:40:67:71:d0:07:96:ff:5f:ad:dd:a3:
43:86:8c:42:b7:b0:d4:c7:0c:ee:8c:39:02:f6:1b:0f:da:b7:
28:e6:1b:84:a6:a5:ba:17:e4:c3:03:a1:ed:b7:2d:3d:af:43:
54:1a:a6:26:51:db:ff:37:2b:0b:31:b3:ee:2a:2f:7c:c9:6a:
10:b1:47:0f:c6:d3:de:40:2c:d2:6a:67:0c:78:29:77:80:6a:
f7:84:8b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:44 2025 by rpki-client