Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/637269dc-7502-3984-8aa6-28199a759f6c.roa
File: 637269dc-7502-3984-8aa6-28199a759f6c.roa (raw, json)
Hash identifier: lIOZEYWamYnZiiCWGk+z+7Jy0gotazw9wVceVLbQPWM=
Subject key identifier: 71:B6:6B:B4:B1:68:B8:6F:17:FF:4C:41:CA:14:91:37:4C:79:23:08
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328584309F60C8B6185D350DB300080
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/637269dc-7502-3984-8aa6-28199a759f6c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f6:0c:8b:61:85:d3:50:db:30:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=1331b3ab-08ea-4e93-9b24-a24ee8027d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:4c:b7:36:31:b0:02:fb:fe:74:01:eb:d7:
1d:f7:59:56:e5:5d:12:cf:0c:ee:62:2f:4b:3f:d0:
be:10:e2:60:93:3c:cd:54:aa:49:33:2d:7c:72:65:
5e:c6:3a:86:8d:9e:16:47:0d:17:5d:f0:b3:ac:09:
cd:89:0e:63:ee:60:67:a7:e0:96:7c:93:55:27:2b:
10:77:81:49:d9:1f:bc:a0:a9:c6:95:60:e9:ae:fa:
bb:7f:30:20:e6:df:6a:d0:f3:52:8f:7f:ec:18:a1:
7b:aa:20:cb:9a:5e:e7:28:84:8d:91:c7:ec:83:26:
d4:d4:de:db:45:f2:77:55:85:77:41:10:87:de:8e:
76:0d:90:a2:55:70:f5:54:e2:c9:13:55:74:ea:5b:
39:35:ef:c6:29:bc:37:0c:90:5e:39:72:56:d3:c4:
79:92:0b:bd:62:ca:78:9c:44:9d:78:58:50:9a:25:
39:0f:fc:83:31:3b:42:58:24:e7:c6:33:cb:97:23:
65:e3:5d:f3:e8:a3:19:e2:8a:e1:20:41:9c:12:35:
a1:ae:17:9f:f5:0d:86:39:1b:e7:2b:e6:95:ec:bd:
c5:21:7b:31:01:05:39:8c:a6:3b:4c:87:c4:c5:0c:
95:f6:e6:8e:de:2e:93:9f:5f:f1:f6:b3:91:10:4f:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B6:6B:B4:B1:68:B8:6F:17:FF:4C:41:CA:14:91:37:4C:79:23:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/637269dc-7502-3984-8aa6-28199a759f6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:e0:28:70:fa:f8:50:69:6a:57:45:61:ac:fd:7b:91:94:91:
ba:ae:26:0b:d2:28:77:02:77:c9:70:a6:19:4e:1c:3c:a7:3c:
7b:ed:72:49:74:15:e0:06:ad:98:24:22:f1:7b:f8:2a:76:e2:
83:43:5f:44:f2:5a:43:bb:7d:e5:9f:07:a7:b3:1c:fe:1a:83:
a3:00:87:46:a1:d0:e7:43:3c:83:b6:d0:de:7c:63:be:f4:04:
d1:b3:fc:c1:30:a7:ad:87:c9:85:cc:7f:17:31:4b:f4:91:47:
a0:cd:e0:60:c2:a6:21:84:41:9b:8d:b7:ad:45:b6:b1:ac:b3:
1d:14:1d:55:56:0a:92:9f:46:b7:87:d7:e8:89:a1:09:d7:fe:
6d:b8:49:a5:32:3f:1d:bb:35:83:a8:d7:39:81:bf:01:94:d6:
c0:4e:d5:9a:b6:32:cd:e3:df:84:96:fe:95:08:fa:d3:6f:75:
17:3b:6a:96:f5:52:4f:76:fb:8b:66:b6:79:80:f4:fd:b1:e2:
f8:51:3b:2d:f9:ad:f8:e0:d5:60:17:66:0c:bd:a0:3d:48:36:
58:61:40:d4:c9:b4:79:45:9f:ce:dd:cb:bc:c1:89:72:8d:2a:
91:56:28:5d:91:35:2d:19:d7:31:1d:a5:5e:7d:08:bd:d5:88:
da:33:e3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:10:26 2025 by rpki-client