Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ea2eaf8d-75d9-32ee-9ac8-d0c348db55e1.roa
File: ea2eaf8d-75d9-32ee-9ac8-d0c348db55e1.roa (raw, json)
Hash identifier: KWYGJc+9I9PXEcml7BTXuKVBAdsNB3eqBiiO8HtUtSw=
Subject key identifier: F9:EF:92:EB:5E:F1:C3:7E:FD:E2:60:DB:49:AB:C3:34:3F:B2:F8:A7
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328583AA79E8F351723E8BD9DF7C9B0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ea2eaf8d-75d9-32ee-9ac8-d0c348db55e1.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.66.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:9e:8f:35:17:23:e8:bd:9d:f7:c9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=3a2b6202-af0c-44cc-a412-b0d97a2bba3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:72:00:f1:a1:2b:b3:f8:e0:b3:0f:5a:cc:03:
53:5b:4d:a7:28:b0:37:b1:7b:12:82:5d:81:eb:2b:
03:95:f5:2a:96:8f:98:ae:31:f9:6b:7e:6f:6c:03:
87:ca:41:b4:bf:ed:f8:85:48:d8:ae:db:92:25:94:
93:4b:63:47:ae:05:d0:6d:cc:4f:fa:84:54:64:4c:
3b:13:9a:43:49:06:45:72:b2:b9:57:70:d9:78:7d:
03:ad:69:1e:e7:a5:9a:0c:25:65:ee:4e:bf:a1:f4:
b2:b6:c3:86:d6:69:00:e7:da:bc:85:4c:34:bd:4f:
25:de:6b:fc:2d:ef:04:8c:ce:98:89:f3:7f:ca:ee:
20:d0:f3:1d:44:56:72:76:98:f4:a8:7b:cb:14:fb:
a0:03:6c:1a:d0:0b:66:d9:75:f2:e6:92:04:cc:10:
cb:a6:07:34:d8:da:95:46:e1:9f:28:fd:6c:3a:0f:
e4:e9:17:c5:65:0d:34:66:cb:56:4b:8c:7e:dd:4d:
42:cc:e9:80:8a:97:78:11:1b:a7:5c:a1:9b:77:1d:
e4:1c:e3:a9:3f:4b:54:3a:af:cd:e7:73:49:9e:94:
60:eb:17:81:5c:21:b7:fb:bb:23:4f:24:e6:f9:43:
25:c7:64:1e:c2:8f:06:43:93:03:66:de:0d:72:b0:
e8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EF:92:EB:5E:F1:C3:7E:FD:E2:60:DB:49:AB:C3:34:3F:B2:F8:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ea2eaf8d-75d9-32ee-9ac8-d0c348db55e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.66.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:aa:74:fa:89:fd:35:b8:86:ad:66:b4:d2:a4:b4:c0:f9:48:
52:7d:ab:91:74:a5:8e:50:4c:a4:14:dc:13:41:74:3b:63:2c:
cc:6a:cc:4f:4e:14:ff:64:85:68:08:61:f3:13:03:6d:a9:f6:
f2:a1:58:a0:22:9d:ff:e7:a9:4c:e7:c6:3e:d8:ed:b8:34:d6:
12:d8:77:a2:4d:3f:62:48:19:3e:5e:76:fe:94:eb:be:c4:82:
63:24:3a:3e:78:c9:53:aa:eb:a6:73:a9:8d:02:25:84:61:5d:
8b:78:63:d0:ad:36:e9:ab:da:71:01:f8:16:ec:fd:c9:d2:55:
b1:dc:32:f7:cc:5e:e7:b8:18:68:1a:18:7a:c1:b4:fa:5f:c0:
6d:b2:c6:1e:98:a1:6f:77:8a:f6:35:e1:04:13:48:fb:72:b5:
6d:f5:c4:41:8e:26:21:ed:3b:d0:39:da:33:68:5d:9a:3f:c9:
d3:6d:9d:a3:ad:b0:89:0c:06:74:a1:e4:bd:ac:fc:d7:c0:ea:
02:b3:88:92:0e:18:f4:6a:df:40:66:28:68:cb:fc:3f:e7:f0:
f6:39:44:b5:fd:bb:03:85:9b:ac:c4:bf:95:a0:55:1f:59:e9:
0d:ec:8c:b2:29:96:c2:67:8a:37:06:ec:5e:b7:87:88:1b:89:
bf:f6:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org