Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/70ec1793-f49f-3c8b-8f10-aa813ad49a9a.roa
File: 70ec1793-f49f-3c8b-8f10-aa813ad49a9a.roa (raw, json)
Hash identifier: OXWbzO0N669s+CTISWG5O+Ca9/fdkCig/kD+RjdbvUA=
Subject key identifier: DE:D1:53:71:C5:A7:00:07:85:27:C5:DD:27:63:CD:C5:D3:5D:46:82
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F432858430A26675BFAFB41DB78D10400
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/70ec1793-f49f-3c8b-8f10-aa813ad49a9a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.142.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:26:67:5b:fa:fb:41:db:78:d1:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f7cfd880-5204-4e51-b6cd-81e5db344e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:fd:9d:b3:dc:d4:9d:49:ee:8d:a3:df:85:
8d:c8:60:08:4e:38:5e:af:77:49:81:e0:e7:8b:75:
b0:ee:96:89:8c:8b:56:8a:9b:77:8c:7e:52:b9:87:
45:5e:c7:74:16:14:64:06:30:48:ae:c1:66:49:57:
b5:c3:ab:fc:0a:3b:5a:63:3f:79:17:c7:16:92:32:
9c:ed:62:25:ca:b9:0d:1e:ea:87:d7:ac:0b:3e:32:
b7:07:34:5a:49:c8:cf:c5:fa:eb:85:ad:b6:1c:01:
b7:7a:ba:7e:ee:e1:2e:5d:49:d3:0e:40:d9:bc:83:
bf:d9:23:f3:af:e5:86:c3:0c:a3:15:80:de:c1:75:
a2:dd:18:b8:8f:83:c7:57:1e:91:de:94:76:61:09:
f3:9b:5b:33:ed:0e:ff:1e:af:a6:2e:18:63:dd:a8:
b9:02:1c:43:f5:e7:f1:e2:93:6f:7d:b9:29:19:41:
01:ae:35:36:61:53:92:81:21:45:59:3a:c4:14:91:
51:34:ec:c3:69:2e:42:c8:2c:bd:91:71:b5:c9:34:
eb:5a:a5:01:0f:6c:91:d3:7f:29:ae:c5:6d:e5:5e:
27:9d:6e:42:ae:d7:06:fe:d1:9f:b0:d0:04:17:3f:
15:61:b5:b9:e5:95:5b:10:a1:98:e4:ee:cf:e9:e4:
70:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D1:53:71:C5:A7:00:07:85:27:C5:DD:27:63:CD:C5:D3:5D:46:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/70ec1793-f49f-3c8b-8f10-aa813ad49a9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:d9:ce:e4:36:e2:69:de:64:d6:90:9b:85:92:0e:53:7d:26:
fe:59:d6:9d:42:0d:05:e6:d6:74:bc:e2:4b:40:da:2c:38:83:
17:21:1c:3f:ce:71:50:b8:b9:df:21:cb:27:6d:ce:b8:b8:4d:
32:80:12:e5:2d:f9:35:13:37:97:44:9e:ef:c7:8e:b2:4a:08:
65:bb:dc:56:2d:3a:41:ef:b7:d3:ae:85:5c:6d:6d:21:c1:7d:
93:f8:fc:d9:34:df:3e:c1:3b:c5:7c:ed:13:7e:a4:02:84:41:
15:96:b8:3d:b1:27:0a:3a:2c:a7:da:74:ca:68:06:e6:0e:71:
d0:17:e9:bb:55:63:6d:43:77:4d:2a:6d:eb:02:e0:d4:30:96:
b6:0a:c7:19:d0:fb:ed:db:ba:33:f6:19:07:9d:46:cc:6f:ba:
d5:e4:26:d0:96:66:21:6c:fb:cd:e3:37:3f:ce:cd:b4:38:92:
42:7e:2d:e6:be:4c:5f:2a:9f:fc:c1:50:42:67:82:4e:a3:c9:
75:52:d5:d6:8a:43:26:a7:1b:cb:79:20:a4:7c:b4:49:15:ef:
8e:8e:76:55:c1:21:33:ca:27:35:9e:6f:2b:3a:15:ea:4e:c3:
14:db:09:43:06:d8:b4:97:ba:48:8b:30:a3:4b:86:f4:f8:1e:
d9:ee:22:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:59:41 2025 by rpki-client