Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/4e230bf0-a8f0-31e7-99af-658f3e7c00b9.roa
File: 4e230bf0-a8f0-31e7-99af-658f3e7c00b9.roa (raw, json)
Hash identifier: RKcjQ5ckQk2TBIyJw4bZqSWfRhaRJzoS3zDUW9ksqF0=
Subject key identifier: 72:79:2F:C1:63:DD:A2:B2:04:C7:B5:1F:B4:BC:03:0B:5F:C3:76:E3
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328583AA7C3D43C3DE60BCB1B667700
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/4e230bf0-a8f0-31e7-99af-658f3e7c00b9.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c3:d4:3c:3d:e6:0b:cb:1b:66:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=dc2ec0b7-b597-4562-b2f5-097c9b81d9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:61:a0:18:49:2e:8a:a3:9c:97:64:a3:91:a3:
ea:18:1b:8d:2d:ea:51:bd:d6:1d:80:21:0e:30:f9:
0f:5c:0d:a2:1e:c0:da:e5:ad:4a:32:5c:8e:0d:83:
e5:6a:1b:fe:20:69:6b:3c:84:10:7b:9c:08:48:d8:
0d:cf:d6:cb:95:26:57:9c:52:aa:de:3f:97:94:25:
62:1b:6e:1b:5d:71:e3:10:9c:6c:86:70:0d:bc:34:
92:6c:8c:11:63:31:07:f8:9f:d4:c9:d7:f0:a6:7d:
a0:03:15:fe:07:76:ac:25:fe:00:d7:8d:07:ad:45:
a7:3f:fd:47:df:fe:e0:3f:d4:c6:d1:a8:ed:31:3d:
3a:83:68:52:42:28:d6:7f:c9:54:05:0f:df:12:9e:
50:bb:c5:06:1d:29:9f:ed:1f:32:e7:db:c7:08:e2:
3e:61:dc:d0:89:df:b3:0f:30:16:eb:13:84:cf:80:
ec:b7:f5:52:09:06:26:0b:97:c4:f4:20:46:39:f4:
13:3d:36:15:63:b8:38:b4:2d:fe:4f:f3:ea:1c:ef:
e9:f8:3d:49:61:cd:51:98:3c:23:95:25:d3:95:24:
61:68:8a:b9:91:b5:43:08:0a:48:2b:83:d1:c4:28:
8d:e5:66:f9:68:65:a3:95:6f:e8:90:fc:93:b9:33:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:79:2F:C1:63:DD:A2:B2:04:C7:B5:1F:B4:BC:03:0B:5F:C3:76:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/4e230bf0-a8f0-31e7-99af-658f3e7c00b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:18:8a:f9:fe:1e:7b:28:68:c7:b6:6b:7d:a7:d7:66:ae:2f:
70:ef:5c:2d:43:d5:b8:28:c1:fd:30:e0:ae:ee:a1:03:37:91:
37:8b:b4:1a:b7:4b:1f:0a:86:b8:cd:e8:3f:d2:a2:43:b2:e3:
c7:5a:7b:26:af:6f:83:d9:ca:15:6b:c4:04:dc:62:88:9b:19:
30:4c:d0:63:dc:e9:a2:34:b6:89:cb:56:d2:9e:2c:34:1d:31:
4b:7f:a2:47:15:cb:91:4c:f3:e8:80:05:ae:06:3a:a5:bb:42:
3d:29:49:b2:db:84:3d:2d:ba:3b:87:19:60:cf:35:6c:72:5c:
a5:94:fb:5c:f7:a9:43:5b:3e:79:bf:34:0b:e8:5a:ff:e9:0a:
fd:bc:38:e4:71:fa:cd:ed:5f:78:9f:d5:00:96:21:a0:17:e1:
38:f8:6d:c3:e1:dd:fe:51:98:7d:11:78:d7:fa:bf:38:da:b4:
50:33:e6:4a:4f:ac:5e:96:75:e5:7c:1c:33:8e:2b:c4:fa:05:
52:d7:ec:87:3a:5c:6f:02:bc:3c:4e:a2:55:79:41:b7:1f:4e:
a2:5a:54:dd:14:8a:88:f9:1e:5b:d7:11:cf:a9:52:e5:ed:85:
4b:d3:c5:6b:b0:80:bb:bc:fa:16:68:be:49:ad:8b:48:ca:e4:
e2:96:8b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:47:25 2025 by rpki-client