Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d918e958-c3fa-3062-9b95-761cdb3d7d9a.roa
File: d918e958-c3fa-3062-9b95-761cdb3d7d9a.roa (raw, json)
Hash identifier: uWPogzhzWDaXzSkJwOGiljoxwJUjFRtwdSFXINjdL+k=
Subject key identifier: 1F:13:C3:5C:2D:8E:85:9C:34:3E:60:52:8F:20:66:BD:C4:DD:60:A6
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328583AA7A33B83B106FB080AF44FC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d918e958-c3fa-3062-9b95-761cdb3d7d9a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.230.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a3:3b:83:b1:06:fb:08:0a:f4:4f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=20364f1e-5977-4b21-a94b-4ada6119c5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c6:dd:e1:67:48:af:f6:8d:2a:40:c3:93:4f:
da:bf:a8:b7:8d:7a:1c:47:3e:e0:4c:5e:4e:5d:16:
93:29:a4:6e:de:2e:63:00:f3:04:22:42:5e:fc:d0:
84:e1:b2:cf:02:73:54:0e:0f:ed:d7:33:20:85:cf:
8b:d6:0e:ba:47:40:f8:4a:d7:92:6a:68:d4:31:e1:
61:3e:ec:f4:ee:d0:eb:6b:24:26:b4:be:29:15:39:
56:02:ef:fd:4d:22:42:ed:42:0b:4d:07:57:ae:e7:
28:00:9e:22:64:be:99:37:4e:d4:0c:7c:f3:35:39:
2c:33:63:08:4b:fa:b1:e4:34:31:d0:2b:6d:a2:76:
af:ad:a1:65:5e:a7:50:92:7f:23:88:9d:57:ad:04:
27:b3:b8:84:87:69:b5:b7:d3:b8:ac:ad:71:46:d2:
59:4d:31:e0:df:dd:e7:86:e8:f2:03:7a:f1:cb:97:
01:e0:8b:ab:72:6b:a6:34:c1:49:0e:03:1b:58:df:
a5:b1:e7:12:ba:9c:85:28:fd:7f:be:06:49:33:67:
a2:d5:03:78:a8:1d:34:00:ea:84:ba:93:b5:b5:dd:
4f:45:d7:d3:9c:2f:c9:d7:8c:d9:33:c0:bd:ad:f7:
01:55:42:ff:ce:29:c5:89:39:0d:4b:f4:fc:f3:0f:
c3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:13:C3:5C:2D:8E:85:9C:34:3E:60:52:8F:20:66:BD:C4:DD:60:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d918e958-c3fa-3062-9b95-761cdb3d7d9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:6e:a7:c0:ee:fd:e9:36:31:f5:26:ae:78:8c:81:8c:74:ee:
d0:3d:59:84:72:c1:61:d7:17:33:65:2f:d7:56:80:06:9e:42:
41:96:b8:47:65:af:a1:db:a1:f9:45:28:4b:32:56:b0:f1:24:
da:f8:ca:ee:5c:71:30:b2:e7:47:31:28:45:88:e9:7a:4e:fb:
1b:eb:d5:2f:b2:df:4a:b7:6f:28:e6:a4:85:07:72:c3:fe:be:
f4:ce:0c:c6:5e:4f:ba:54:d3:7e:20:ef:2c:51:0c:46:50:25:
b1:c8:14:4e:d9:1c:f8:1e:14:32:5e:9d:5a:ec:98:b2:76:6b:
15:19:1c:80:99:84:29:f8:8d:41:9a:35:44:4f:2e:57:0e:ef:
f0:01:ff:b4:d0:b1:59:c1:31:bc:ca:55:d3:40:c0:5d:e8:6d:
bd:0a:bb:e6:fb:b9:94:78:82:4f:cd:8c:62:44:a4:85:55:37:
85:96:2c:79:53:4f:44:d8:61:bd:db:09:99:cf:12:7c:22:c7:
28:68:f9:12:92:39:f5:4d:63:55:c4:ec:f8:78:87:bb:82:10:
52:fd:d7:3b:71:cd:be:f4:e0:13:fa:e1:e9:da:98:c5:a2:c7:
95:f5:d8:ff:4b:17:92:1e:e2:fd:23:48:19:2a:e2:84:66:b4:
99:fe:8f:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnozuDsQb7CAr0T8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MjAzNjRmMWUtNTk3Ny00YjIxLWE5NGItNGFkYTYxMTljNWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8bd4WdIr/aNKkDDk0/av6i3jXocRz7gTF5O
XRaTKaRu3i5jAPMEIkJe/NCE4bLPAnNUDg/t1zMghc+L1g66R0D4SteSamjUMeFh
Puz07tDrayQmtL4pFTlWAu/9TSJC7UILTQdXrucoAJ4iZL6ZN07UDHzzNTksM2MI
S/qx5DQx0CttonavraFlXqdQkn8jiJ1XrQQns7iEh2m1t9O4rK1xRtJZTTHg393n
hujyA3rxy5cB4IurcmumNMFJDgMbWN+lsecSupyFKP1/vgZJM2ei1QN4qB00AOqE
upO1td1PRdfTnC/J14zZM8C9rfcBVUL/zinFiTkNS/T88w/DmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB8Tw1wtjoWcND5gUo8gZr3E3WCmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZDkxOGU5NTgtYzNmYS0z
MDYyLTliOTUtNzYxY2RiM2Q3ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBbmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABBup8Du/ek2MfUmrniMgYx07tA9WYRywWHXFzNlL9dWgAaeQkGWuEdl
r6HboflFKEsyVrDxJNr4yu5ccTCy50cxKEWI6XpO+xvr1S+y30q3byjmpIUHcsP+
vvTODMZeT7pU034g7yxRDEZQJbHIFE7ZHPgeFDJenVrsmLJ2axUZHICZhCn4jUGa
NURPLlcO7/AB/7TQsVnBMbzKVdNAwF3obb0Ku+b7uZR4gk/NjGJEpIVVN4WWLHlT
T0TYYb3bCZnPEnwixyho+RKSOfVNY1XE7Ph4h7uCEFL91ztxzb704BP64enamMWi
x5X12P9LF5Ie4v0jSBkq4oRmtJn+j8g=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org