Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/4c66d9ea-6ef8-383d-8037-a62c8374c01c.roa
File: 4c66d9ea-6ef8-383d-8037-a62c8374c01c.roa (raw, json)
Hash identifier: ZeX6wi2wsc0F0nWQip8p6bFMO0VbRNCdxiRqNU68w5Y=
Subject key identifier: 87:5C:69:9C:68:5A:DF:14:82:7B:DA:A7:61:4D:F3:54:79:C2:84:66
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F432858430A1722CDDA4282588FA94F80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/4c66d9ea-6ef8-383d-8037-a62c8374c01c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.128.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:17:22:cd:da:42:82:58:8f:a9:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d1d36414-8105-49a3-b3f7-ec0335d8e4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:3f:38:ce:fd:77:36:6d:5e:33:ce:cc:d8:
38:24:95:91:96:03:3b:a9:16:96:d5:d3:40:a6:dd:
73:d4:c5:78:63:12:e3:65:98:48:7f:bb:7f:b2:d2:
40:97:48:63:c9:c4:13:70:d3:65:61:75:07:5d:99:
74:36:af:2e:44:b3:41:f3:0a:34:7e:ba:44:bd:a9:
43:d7:78:3a:bf:d7:f3:23:54:c8:d6:d2:1e:75:55:
09:a9:9a:63:74:b8:4a:31:41:10:ad:8a:28:75:6e:
f6:20:57:7e:7b:32:25:ac:56:9e:93:2f:f8:e8:9f:
23:81:1d:d6:57:3b:96:be:22:fd:7b:b4:69:64:15:
1f:a2:18:8b:e4:0c:4f:36:5b:c8:50:6b:68:33:4b:
b3:7d:06:c7:3a:e8:b9:36:74:d3:3d:3d:40:34:d5:
62:45:6f:10:ae:d3:20:e9:f0:bf:5e:53:f2:95:d9:
ab:fa:70:8d:50:23:d4:ae:63:b2:59:3f:ed:36:87:
07:e7:2f:50:1d:7d:c5:50:60:a4:25:4d:14:f4:84:
29:a8:68:cb:dd:60:2f:f9:4c:ff:a6:8c:b3:da:ac:
d3:bb:e8:cc:3d:d7:df:35:c4:a7:20:1d:5c:dc:d1:
b6:75:53:19:47:a7:2b:41:49:cf:de:7c:09:61:6f:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5C:69:9C:68:5A:DF:14:82:7B:DA:A7:61:4D:F3:54:79:C2:84:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/4c66d9ea-6ef8-383d-8037-a62c8374c01c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:47:84:ce:eb:c9:ca:3b:40:71:0a:f9:62:5b:b3:89:6a:7d:
25:59:17:54:81:af:d2:29:dd:a8:96:6f:6d:cc:53:df:92:8a:
d1:14:79:d0:7f:98:34:a3:6d:b1:63:2b:40:fa:cf:cb:5c:98:
eb:fa:d6:2b:1d:64:9f:cd:2f:b3:f2:02:8a:03:80:6b:01:7c:
7c:e4:ec:46:97:71:cf:be:e3:7f:2a:1d:f0:f8:fe:b9:23:fe:
de:df:46:bb:1c:93:00:3c:0c:5f:a6:b6:a6:62:05:b4:7f:3e:
76:bc:46:d9:5d:77:f4:4e:f5:7c:e7:94:a3:2d:11:83:57:6f:
d0:40:52:50:01:5f:c5:88:de:25:76:b7:b9:4b:4a:9c:a3:dd:
e6:93:14:69:55:fa:7b:d6:c5:65:2c:bf:6b:61:3c:80:95:83:
00:7d:95:6e:62:48:ad:67:63:ed:ba:d4:3b:6d:58:2f:05:7b:
91:c4:6e:ae:ef:1a:6e:d7:39:07:48:2d:dd:93:0d:d1:b4:a5:
30:24:db:10:b1:af:40:3b:1d:9a:af:c0:85:57:2e:05:be:18:
63:5f:28:46:72:16:04:37:b8:3c:23:68:4b:f3:f1:60:e8:42:
2c:3f:54:b6:61:51:cd:89:8e:89:70:51:05:ec:0c:be:6c:c4:
c1:d7:d3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:47:24 2025 by rpki-client