Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/1f2cd5b4-fa91-34fa-8d21-4b90666d8a23.roa
File: 1f2cd5b4-fa91-34fa-8d21-4b90666d8a23.roa (raw, json)
Hash identifier: tSIsS7/KbrNREHyhKhUADzuFbjCM35Nu/IVmwtw+AOI=
Subject key identifier: 53:54:CC:1C:0F:44:C6:FF:19:FA:92:31:76:A9:26:CB:2B:7A:48:0C
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328583AA7A4EC3A44E8B4A8D123F500
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/1f2cd5b4-fa91-34fa-8d21-4b90666d8a23.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a4:ec:3a:44:e8:b4:a8:d1:23:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=11ae9dcf-8d38-4ea2-ad77-bc7d1283b72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0f:ea:ee:44:80:4b:ce:b3:f7:45:cb:01:b4:
9e:12:c0:83:5e:19:65:95:0a:9d:88:3e:ca:26:2a:
60:65:cb:27:ed:aa:9a:b3:61:ec:88:01:c0:ee:ef:
59:62:d5:54:76:68:5c:1b:f9:f4:d2:48:a5:b5:d8:
d9:86:1f:6b:18:1e:56:5c:95:21:0b:7c:b5:63:f7:
5e:42:27:e2:03:69:88:38:ba:df:e7:c4:2d:f1:51:
3c:93:9e:1d:9b:1c:64:e5:6e:3b:2c:93:58:d3:d9:
d1:85:b5:25:dd:75:d0:82:59:54:8d:03:27:f6:9c:
63:98:5e:2f:92:c5:e8:d2:12:6f:b2:79:f1:51:e9:
22:61:0a:82:46:d6:34:fe:e5:29:10:8f:37:8c:57:
47:5f:20:45:92:3f:7e:cb:02:ba:81:8c:16:27:dc:
56:22:16:cf:33:a8:54:ea:c1:bb:83:7a:4e:f2:eb:
77:37:ab:1c:24:b0:21:85:2e:40:e2:ba:36:3d:a9:
ed:2c:e1:73:d8:17:e8:82:36:fe:de:43:bb:c3:f3:
55:a8:c8:3d:1d:4a:eb:ac:56:11:b6:5f:3e:14:ee:
63:bf:b0:33:36:67:69:eb:25:f3:ff:da:01:9e:c6:
52:45:e3:f6:8e:9c:fe:eb:da:8b:60:39:23:be:d1:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:54:CC:1C:0F:44:C6:FF:19:FA:92:31:76:A9:26:CB:2B:7A:48:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/1f2cd5b4-fa91-34fa-8d21-4b90666d8a23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:10:8a:a0:c5:44:12:85:08:84:21:06:05:89:e7:24:75:e4:
ea:4c:1d:0b:f9:b7:22:47:9f:35:b0:8b:c5:48:bc:99:b1:3b:
a9:8e:e8:ce:20:44:ad:02:84:b6:78:be:bc:65:3b:6a:cf:ec:
53:4f:10:28:75:b7:db:7b:22:c0:ac:cf:10:28:5c:fe:1d:d7:
a3:56:5b:39:be:63:f1:a8:1b:c9:be:58:13:ca:89:9b:a4:e7:
2f:9b:00:77:5b:02:4e:19:14:c0:52:f5:24:67:6f:30:24:ad:
05:1e:f6:96:73:ee:86:7b:44:25:ae:1c:7a:d8:34:55:2f:43:
93:3a:88:e1:66:17:b7:53:9c:b8:cf:49:d7:c8:c0:b1:94:61:
c8:6e:f0:54:e5:54:4d:2c:ae:6c:97:b9:98:e2:8b:5f:11:8f:
f8:48:7c:fe:1b:a8:80:f9:f4:68:6b:c8:d3:e2:f8:f4:03:38:
8b:71:69:95:93:b3:ee:d1:f1:be:64:14:0b:5f:6a:b3:39:75:
e3:e3:bf:3c:a1:b8:e5:96:ea:bc:8a:4c:86:67:76:b4:cd:d6:
13:3e:fb:5f:a5:07:08:c7:20:70:24:45:f3:61:e4:1f:5f:ed:
4e:86:db:8d:db:f5:f9:fa:82:a6:97:6d:c1:9b:b2:73:f0:3c:
ac:09:f8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:52:23 2025 by rpki-client