Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/24a43a62-ec56-3e37-b169-8c9822d600a0.roa
File: 24a43a62-ec56-3e37-b169-8c9822d600a0.roa (raw, json)
Hash identifier: KjlUWvLBvbieT4MGpMi95TNcK3vJ4QhirZcXNjG0ano=
Subject key identifier: 48:03:91:36:AC:48:D7:0C:E3:47:60:43:5C:8B:E4:D3:01:68:C0:29
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328583AA7A906503EDB40275540CE80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/24a43a62-ec56-3e37-b169-8c9822d600a0.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a9:06:50:3e:db:40:27:55:40:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=d7bd6f35-3d2f-4ec3-b075-21c58fede43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:c2:f8:c3:16:21:95:4c:72:d4:53:da:b2:
65:e7:0a:e9:03:39:3f:8b:ce:60:b5:f1:9d:f6:c0:
60:ed:1c:fe:88:b3:d8:e5:bd:da:9f:8c:f6:36:be:
1f:ac:f4:c5:39:42:ea:f4:d2:7c:cd:80:e6:02:68:
16:6d:1b:a9:fe:2c:4a:ee:86:46:86:43:1d:6a:bf:
f8:4d:1b:00:03:ff:b0:36:00:45:e9:dd:b1:d5:44:
45:f7:21:f4:91:6f:09:c0:10:b5:0a:76:53:b9:74:
ab:4a:55:36:39:10:70:d1:6a:56:5f:3d:32:9a:98:
f2:58:39:a4:a9:de:83:20:1b:d2:2a:45:e0:af:ea:
db:55:39:4c:2b:f6:ca:e2:4a:29:7e:0d:8a:56:ac:
8b:28:92:70:3c:e4:19:74:d0:a4:82:ec:0b:f2:02:
2e:63:92:b7:89:89:2e:0b:36:4f:13:2d:ef:ea:38:
e8:da:6d:05:5e:b8:e9:7f:4f:5a:b4:da:3a:e6:24:
a3:23:2b:a3:68:81:43:e1:b5:5c:4e:23:23:bb:b3:
e1:52:12:b7:18:21:63:f2:8f:8c:02:ac:b2:32:d8:
98:d0:ae:7f:f7:77:01:84:a7:21:e0:1c:4a:c3:88:
39:70:8a:2d:0e:63:8b:fe:4f:15:d5:52:39:45:be:
ed:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:03:91:36:AC:48:D7:0C:E3:47:60:43:5C:8B:E4:D3:01:68:C0:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/24a43a62-ec56-3e37-b169-8c9822d600a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:b5:4b:0d:33:f0:94:88:f2:38:a0:50:29:57:6f:ab:ae:1c:
3c:18:cc:18:e7:ec:f7:fb:c7:b2:c3:c7:41:74:d0:6f:ac:62:
06:89:6d:9d:19:39:52:fe:2b:7c:e7:9d:82:a2:96:2a:b4:a3:
03:e7:39:87:2b:c9:ed:fa:b9:04:3f:a7:8f:11:ed:7c:76:c8:
66:07:0d:fd:52:80:3a:4e:a1:2a:93:69:a6:db:92:8e:30:68:
28:e7:8d:64:84:eb:a3:f8:15:05:7a:f0:75:9b:80:09:f5:dd:
eb:e4:cd:2a:ee:7a:2f:6b:74:3f:be:fe:da:24:55:42:c2:02:
8d:b9:f8:8e:2c:19:fe:00:83:de:75:66:24:fa:b9:48:e5:fd:
fc:46:a5:b3:da:65:3b:f1:59:c1:0d:0c:34:e9:ed:05:c0:71:
cb:12:94:a7:95:95:49:89:c5:e2:f1:78:51:cb:4c:21:2c:f0:
ad:de:da:38:6e:0c:fa:24:11:99:83:12:1c:45:00:fc:93:99:
13:13:77:d3:e1:38:a2:3a:c6:8d:ed:59:fc:89:e0:9e:f2:1f:
dc:e3:43:56:8f:ab:a7:14:a5:14:d0:df:43:5f:e2:0d:32:ed:
ab:79:d3:b2:fa:a5:14:54:88:49:4e:66:6a:4d:0a:c7:5e:24:
10:66:51:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:49:51 2025 by rpki-client