Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/06008d5e-999e-33cb-8821-85b938cf423a.roa
File:                     06008d5e-999e-33cb-8821-85b938cf423a.roa (raw, json)
Hash identifier:          XEwTrLud0ppIgnAqN1/2f94Lbgck0xeHPvjZiNRV2rk=
Subject key identifier:   13:20:7D:B7:C4:18:E9:FE:8A:B0:A8:24:DF:E2:70:68:99:F1:63:F1
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328583AA7C512E8824ABBD9BE4B1B80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/06008d5e-999e-33cb-8821-85b938cf423a.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.144.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c5:12:e8:82:4a:bb:d9:be:4b:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=d4eb390e-00fa-4134-a42d-3a5bc7fe714f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:74:9f:1a:bb:9e:b7:38:e6:8c:07:95:0a:d7:
                    24:bd:72:cf:ba:1a:07:6f:76:9f:88:74:98:4b:53:
                    2c:5f:8a:96:76:42:1a:75:ff:3e:39:71:10:22:37:
                    8a:12:fd:d9:b2:dc:a9:66:34:80:e3:d9:08:5e:2e:
                    c1:a4:29:8c:f0:2f:f0:3f:c3:c1:c3:e8:6e:70:c9:
                    9c:ba:3e:32:ea:a7:98:64:90:37:26:06:0d:39:05:
                    ff:68:de:fa:ce:28:d7:ef:09:7d:41:6d:b1:e8:8a:
                    ec:80:d0:fb:5e:7c:10:53:79:38:ae:10:06:a3:ec:
                    66:de:3a:29:cd:80:ee:ba:24:f5:54:97:c7:67:39:
                    65:ec:25:d5:6f:b7:5d:65:5d:e4:c3:db:b1:a5:7d:
                    42:4c:e8:e4:83:a9:05:38:ec:27:2c:a8:8d:5e:20:
                    3f:09:d2:58:4d:e2:fa:4e:2d:0d:84:a9:93:4f:6a:
                    34:09:98:b1:fb:26:7d:8d:ab:db:24:3e:67:b1:f9:
                    be:6e:d4:30:98:0b:31:52:b8:6c:74:e5:23:4e:32:
                    b8:af:68:43:24:0b:d2:84:98:de:9b:88:8f:ef:b0:
                    23:0a:73:c6:a9:4c:19:33:fa:90:f7:c0:24:41:70:
                    8a:e9:1c:4a:09:fc:d7:c7:f9:3e:29:52:c8:64:c8:
                    ce:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:20:7D:B7:C4:18:E9:FE:8A:B0:A8:24:DF:E2:70:68:99:F1:63:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/06008d5e-999e-33cb-8821-85b938cf423a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f7:5e:b2:e6:ff:84:5a:b1:87:22:0a:1e:2f:b7:3e:25:af:
         66:dd:9a:4c:f6:9c:0b:cc:f9:69:ec:b6:e4:79:1b:44:1f:e4:
         2c:1e:3e:f0:79:ee:4a:9c:46:a3:82:48:50:b4:92:94:76:36:
         ed:e8:c6:ca:e5:76:c6:04:e1:75:4d:22:c7:44:13:5a:ca:0b:
         f6:71:61:71:7e:cd:f2:79:ad:8a:20:ac:12:d4:55:0a:8c:16:
         8f:43:44:0c:f2:a1:a1:71:cd:96:20:18:09:bd:cb:f5:52:da:
         3f:10:6c:13:f9:a5:14:0b:67:6d:10:b5:8a:72:60:9d:e2:78:
         01:cf:36:41:fe:1e:2e:61:f0:2b:7b:2c:d6:f5:6a:1a:1c:94:
         b8:4f:0d:37:f2:40:cd:0f:08:6f:e9:b3:63:4c:dd:b5:8c:53:
         c3:02:a4:0e:9d:c5:b6:11:78:a5:e7:a0:06:e9:1f:c3:3b:68:
         88:2a:d3:76:b5:f5:66:2f:84:21:da:29:81:81:31:a4:30:5b:
         b4:ec:ca:08:67:da:5d:af:ea:cb:48:31:e9:da:86:2c:9a:2c:
         b8:b3:74:a1:52:e5:92:86:33:7b:9f:89:c8:6d:39:0b:bd:08:
         fb:2d:fc:c6:be:61:dc:4d:fc:34:62:12:57:7f:d7:8c:77:28:
         ec:0d:c3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:07:46 2025 by rpki-client