Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/cf87f99d-5f30-3fd6-9b7b-db5ec8dddbfc.roa
File: cf87f99d-5f30-3fd6-9b7b-db5ec8dddbfc.roa (raw, json)
Hash identifier: jQhUc/WiKuGXi+eDX48GSzQMGAZuLkcqM7ZdQuYI8/A=
Subject key identifier: C5:A5:86:09:59:5F:47:1B:E5:FB:1C:8A:20:E7:40:B4:B7:FE:A2:8D
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328583AA7C2217408EE637D67C23740
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/cf87f99d-5f30-3fd6-9b7b-db5ec8dddbfc.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.120.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c2:21:74:08:ee:63:7d:67:c2:37:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=685ba673-5d11-401b-b560-e1eee87d1a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b8:0d:b8:41:b6:40:ae:66:3c:f7:e4:bb:9d:
aa:3f:7f:cf:a6:ad:51:b1:db:d2:91:02:31:4e:29:
e3:c7:31:47:79:4c:a9:fb:eb:73:08:8a:12:89:e6:
f0:e9:39:b1:d6:10:e5:84:80:6a:4f:e2:7e:fa:9b:
fb:19:cd:94:33:a7:25:c3:94:e5:9f:db:7a:81:32:
eb:4c:a1:48:b1:91:c9:e3:5a:34:05:14:e1:df:a1:
6b:dd:82:62:e1:e4:3c:4b:c5:0b:39:81:77:a2:b8:
60:17:68:0a:02:b0:ae:e8:f6:63:ce:7a:7f:00:a6:
49:33:34:61:f6:d0:03:eb:cc:38:4b:8b:1f:db:8b:
67:8c:56:5b:cb:65:b0:38:e5:69:20:12:9c:4d:8c:
1b:3a:57:db:70:5a:78:a6:2b:a5:ca:7c:19:8b:9f:
28:1d:76:50:fe:a3:ad:cf:6b:e9:ac:af:7b:40:0c:
cb:d8:ac:bd:04:7d:c9:b5:86:ec:f4:a4:b2:b6:ed:
60:15:4c:90:cc:06:33:48:bc:6b:a2:2a:7b:59:0a:
b1:ea:07:d1:40:d9:1f:9d:a8:b9:a5:cc:da:f6:c9:
2f:7b:2d:b7:2b:40:4d:c2:8f:fc:ce:1d:17:a2:3d:
76:b3:45:e6:42:bc:3e:72:09:1f:4c:ca:58:97:a5:
22:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A5:86:09:59:5F:47:1B:E5:FB:1C:8A:20:E7:40:B4:B7:FE:A2:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/cf87f99d-5f30-3fd6-9b7b-db5ec8dddbfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:9a:22:1a:a0:51:4c:6a:cc:9f:2b:8b:f6:fc:60:53:01:16:
83:c4:68:f5:f8:7d:38:5d:7f:69:ad:0b:f5:c1:a8:0a:d7:88:
e8:92:02:e1:cb:81:ce:f3:90:16:9d:0d:18:d2:8e:a1:e9:9f:
a1:79:e6:a6:e1:1a:cf:76:3d:ea:ee:52:f4:be:e0:d9:c7:19:
84:c9:99:50:eb:77:dd:f6:81:6b:b7:d9:56:02:b8:95:3f:b8:
2f:64:98:29:d4:e6:bc:22:9e:36:ce:2f:d9:de:df:bb:e6:b3:
d9:61:98:7e:be:f5:db:49:b5:03:55:b3:a0:06:d1:06:af:d7:
24:fc:50:f5:50:b8:0e:34:ad:fd:39:10:85:84:74:ba:17:5d:
0d:b7:c3:87:83:c4:d3:06:cf:d5:1d:ec:24:1a:58:00:e4:d8:
a7:a0:b3:d6:4e:a7:54:c8:c3:a4:9a:b7:14:b7:9f:f3:dd:2d:
86:dc:c7:0c:e2:e2:de:e3:c5:8d:73:38:94:47:6b:c0:db:82:
e5:f1:d4:69:e5:0f:63:ff:31:ae:13:87:14:b5:0e:e6:5f:fd:
f3:a2:72:a4:8e:d8:4c:08:60:e3:2f:2d:d0:84:b6:4a:c9:b2:
4b:15:cb:94:4b:82:e1:49:d8:50:de:68:6c:0c:dc:61:88:88:
2f:e7:18:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org