Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bd6a1e72-f410-323a-af00-66802d173345.roa
File: bd6a1e72-f410-323a-af00-66802d173345.roa (raw, json)
Hash identifier: TFhFQCFRlDmfTfhsfXZyxIssvTXJCkJso+lqk/tSxYY=
Subject key identifier: 45:73:EF:DC:38:B3:3E:95:EB:EB:8E:D6:A3:16:54:14:72:F9:74:E8
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F432858430A1A5AC5ACB8C5349FA3B170
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bd6a1e72-f410-323a-af00-66802d173345.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1a:5a:c5:ac:b8:c5:34:9f:a3:b1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f3ac59b9-1bce-4faa-b0e6-fb97dbb3f456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1c:e8:a4:2b:f9:34:85:bf:33:f0:71:9c:fa:
6c:93:19:91:05:69:12:2c:56:55:68:27:1e:f2:fb:
5b:46:05:eb:88:ed:8c:d6:b0:57:3b:19:bd:09:95:
40:c0:fb:f1:c5:27:53:11:e6:c9:e8:84:c2:65:0c:
38:f5:85:75:c0:ee:a1:b4:94:72:8c:b9:bb:94:93:
a9:15:e2:e7:eb:6f:1a:9a:97:74:f8:c6:88:ad:b9:
53:1f:38:8a:6c:a1:ba:c8:dc:25:8a:50:a9:4e:85:
58:21:1e:2d:b2:9b:54:5d:9d:32:4e:33:ce:40:d3:
05:fd:67:01:5e:31:f4:09:c4:d4:af:c2:1c:c3:e4:
ed:3f:fc:d4:ae:94:02:a7:12:38:4b:f5:40:47:eb:
4c:2c:63:ab:bc:cb:27:fa:ff:b5:47:3e:34:69:48:
65:ae:bc:90:cb:b3:85:4d:7c:dd:ee:5c:f2:5c:f2:
44:01:71:40:06:53:24:64:bd:90:af:5a:cf:0f:9a:
09:a5:b4:34:f4:14:61:e2:e7:46:c2:d1:02:f9:16:
84:a8:61:2d:0c:c7:50:9d:d6:fb:da:9c:1e:bc:c4:
ff:98:93:82:3b:f8:1e:61:74:9a:84:92:dd:93:79:
16:a7:6c:20:0f:51:c3:2e:26:27:1f:23:8c:c8:81:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:73:EF:DC:38:B3:3E:95:EB:EB:8E:D6:A3:16:54:14:72:F9:74:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bd6a1e72-f410-323a-af00-66802d173345.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:29:99:54:88:02:00:7c:60:3d:8b:99:3e:3c:92:2c:40:4e:
2d:c6:cc:ae:4d:66:b6:f2:cd:c7:e8:84:b3:a4:cb:63:e4:f3:
ba:e1:e8:55:c8:f2:5c:cf:2c:fa:2f:97:7c:e2:14:9f:0c:58:
67:6f:59:25:45:45:5c:a2:44:d4:9c:f3:78:9e:2b:55:27:64:
c4:bc:8b:9b:47:60:db:37:36:3b:96:59:f4:6e:38:98:2b:b8:
6e:33:e3:35:d5:3e:50:31:c4:d2:1f:25:40:4a:4c:7d:15:90:
a6:10:57:46:ff:73:9f:70:49:3a:8e:83:a8:40:de:0c:72:3c:
17:f9:5d:cd:07:1b:45:ec:f9:5f:75:61:b5:ba:4a:d8:31:64:
76:05:3f:4b:5e:d1:73:dc:fb:a3:1e:4f:7c:ac:ff:39:47:7f:
27:20:db:e4:b7:22:06:f7:b4:32:95:b2:bc:45:56:15:2f:50:
fd:2f:29:3b:4a:cd:c3:7a:5a:cd:01:7e:98:e9:29:67:5b:15:
53:31:69:5a:4d:2a:ca:30:7a:86:0e:59:fb:dc:92:4e:2a:06:
7c:32:63:ae:22:89:ff:0b:e1:0b:b9:b7:9a:56:b1:03:fb:a7:
0b:2f:74:97:fe:db:55:84:54:15:b8:f9:62:ad:be:33:46:55:
d3:59:f5:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKGlrFrLjFNJ+jsXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjNhYzU5YjktMWJjZS00ZmFhLWIwZTYtZmI5N2RiYjNmNDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBzopCv5NIW/M/BxnPpskxmRBWkSLFZVaCce
8vtbRgXriO2M1rBXOxm9CZVAwPvxxSdTEebJ6ITCZQw49YV1wO6htJRyjLm7lJOp
FeLn628ampd0+MaIrblTHziKbKG6yNwlilCpToVYIR4tsptUXZ0yTjPOQNMF/WcB
XjH0CcTUr8Icw+TtP/zUrpQCpxI4S/VAR+tMLGOrvMsn+v+1Rz40aUhlrryQy7OF
TXzd7lzyXPJEAXFABlMkZL2Qr1rPD5oJpbQ09BRh4udGwtEC+RaEqGEtDMdQndb7
2pwevMT/mJOCO/geYXSahJLdk3kWp2wgD1HDLiYnHyOMyIH59QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEVz79w4sz6V6+uO1qMWVBRy+XToMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYmQ2YTFlNzItZjQxMC0z
MjNhLWFmMDAtNjY4MDJkMTczMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBZsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEIpmVSIAgB8YD2LmT48kixATi3GzK5NZrbyzcfohLOky2Pk87rh6FXI
8lzPLPovl3ziFJ8MWGdvWSVFRVyiRNSc83ieK1UnZMS8i5tHYNs3NjuWWfRuOJgr
uG4z4zXVPlAxxNIfJUBKTH0VkKYQV0b/c59wSTqOg6hA3gxyPBf5Xc0HG0Xs+V91
YbW6StgxZHYFP0te0XPc+6MeT3ys/zlHfycg2+S3Igb3tDKVsrxFVhUvUP0vKTtK
zcN6Ws0BfpjpKWdbFVMxaVpNKsoweoYOWfvckk4qBnwyY64iif8L4Qu5t5pWsQP7
pwsvdJf+21WEVBW4+WKtvjNGVdNZ9R0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:12 2025 by rpki-client