Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/1973ebd9-966d-3de8-9f20-6cba3356f5e7.roa
File: 1973ebd9-966d-3de8-9f20-6cba3356f5e7.roa (raw, json)
Hash identifier: FYtDpS/dypFmcckdHK4PDZErWQjX6+cATYUugu+Ezcs=
Subject key identifier: 06:88:37:70:3C:69:E8:F2:FF:FB:76:90:66:86:A5:05:F7:AD:BD:BA
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F432858430A23D9F76EA481A9D4272680
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/1973ebd9-966d-3de8-9f20-6cba3356f5e7.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.138.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:23:d9:f7:6e:a4:81:a9:d4:27:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3cfa23b7-8631-48b6-8439-88719881531b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:df:fa:c0:4c:58:15:5d:69:1d:17:0c:92:5a:
5f:4b:2b:07:9d:e2:3e:6d:4d:08:5c:b4:5b:64:02:
e7:ae:c4:50:55:e9:3d:c9:d3:71:3c:10:c6:74:44:
f3:16:2f:49:c6:b2:14:7e:c1:e8:0a:2c:a5:06:59:
9d:00:05:ab:e4:7c:0f:d5:d9:14:57:30:12:1a:6a:
40:d5:d8:16:0c:44:4e:9a:09:56:17:0d:e1:30:e7:
4b:cc:08:8b:f8:8b:ae:eb:97:4f:24:b0:34:6c:68:
83:6a:05:29:ba:92:6f:1e:09:4d:0b:09:93:79:f8:
6b:2a:05:cf:db:06:96:16:84:f2:36:87:55:c4:e7:
c9:ea:50:dc:47:76:25:3c:23:4f:35:f4:d4:04:b2:
a6:bc:65:0a:6b:4d:64:6e:32:f1:e4:67:c4:4e:bf:
6f:20:e6:0e:3d:73:07:d5:cf:c2:97:32:60:75:08:
e4:d3:5a:7d:47:ba:21:ed:eb:61:5e:ed:6a:13:a5:
ea:9c:a0:e6:93:10:30:75:2d:55:70:aa:0a:7a:d7:
fb:9c:be:54:a8:4b:c1:e2:5e:3c:3b:40:2e:86:e5:
e3:21:c7:3a:16:9d:e1:bc:4c:a3:58:49:02:6e:41:
bf:c5:19:89:1d:82:9c:54:93:cd:56:e7:ca:45:39:
f8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:88:37:70:3C:69:E8:F2:FF:FB:76:90:66:86:A5:05:F7:AD:BD:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/1973ebd9-966d-3de8-9f20-6cba3356f5e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:79:21:01:4e:7f:1d:13:6e:ee:8a:ce:19:b5:c3:61:ee:c4:
b2:e3:d0:d9:1b:f6:36:48:ae:fc:19:89:68:81:09:df:c4:be:
92:3b:39:a3:ad:e7:65:74:fb:e0:3e:38:21:25:68:c3:af:1d:
05:a1:e6:51:a5:44:81:2c:b3:22:f4:dc:59:18:82:0e:19:5a:
71:e2:7a:66:b7:2c:80:42:8a:71:73:d0:9b:d0:5a:37:b9:94:
c8:e3:f7:0c:5f:9a:93:fc:6a:9e:dd:bc:6b:53:aa:35:29:2f:
24:cb:61:31:97:4c:a6:d3:6f:fe:f9:cc:68:1b:d8:5d:23:74:
ff:b6:c3:0c:32:34:0a:04:27:6d:de:aa:8e:14:e1:35:88:5e:
f5:1e:ec:f0:2b:f6:db:46:66:93:d6:27:9b:2a:1a:87:fc:25:
ad:ce:df:95:43:62:da:85:1b:df:71:2f:89:5a:a1:b3:d9:e6:
f9:f5:99:b1:11:dd:7a:39:cf:fb:01:08:bd:cf:81:fb:2a:b4:
0d:b8:3d:30:b2:bb:78:d6:4f:66:ed:f2:c1:c2:18:1a:77:d5:
c5:c3:e7:c2:67:6f:2b:80:59:bc:2b:1d:c5:b4:df:0a:a8:a5:
a1:91:a1:ab:53:20:2d:f1:3c:1c:36:f0:6f:0f:79:2c:bd:b6:
ac:ac:5d:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKI9n3bqSBqdQnJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
M2NmYTIzYjctODYzMS00OGI2LTg0MzktODg3MTk4ODE1MzFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit/6wExYFV1pHRcMklpfSysHneI+bU0IXLRb
ZALnrsRQVek9ydNxPBDGdETzFi9JxrIUfsHoCiylBlmdAAWr5HwP1dkUVzASGmpA
1dgWDEROmglWFw3hMOdLzAiL+Iuu65dPJLA0bGiDagUpupJvHglNCwmTefhrKgXP
2waWFoTyNodVxOfJ6lDcR3YlPCNPNfTUBLKmvGUKa01kbjLx5GfETr9vIOYOPXMH
1c/ClzJgdQjk01p9R7oh7ethXu1qE6XqnKDmkxAwdS1VcKoKetf7nL5UqEvB4l48
O0AuhuXjIcc6Fp3hvEyjWEkCbkG/xRmJHYKcVJPNVufKRTn49QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAaIN3A8aejy//t2kGaGpQX3rb26MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMTk3M2ViZDktOTY2ZC0z
ZGU4LTlmMjAtNmNiYTMzNTZmNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKN5IQFOfx0Tbu6Kzhm1w2HuxLLj0Nkb9jZIrvwZiWiBCd/EvpI7OaOt
52V0++A+OCElaMOvHQWh5lGlRIEssyL03FkYgg4ZWnHiema3LIBCinFz0JvQWje5
lMjj9wxfmpP8ap7dvGtTqjUpLyTLYTGXTKbTb/75zGgb2F0jdP+2wwwyNAoEJ23e
qo4U4TWIXvUe7PAr9ttGZpPWJ5sqGof8Ja3O35VDYtqFG99xL4laobPZ5vn1mbER
3Xo5z/sBCL3PgfsqtA24PTCyu3jWT2bt8sHCGBp31cXD58JnbyuAWbwrHcW03wqo
paGRoatTIC3xPBw28G8PeSy9tqysXbM=
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:52:20 2025 by rpki-client