Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/8432477e-0f8b-3ee0-be58-ca2f721d1d0b.roa
File: 8432477e-0f8b-3ee0-be58-ca2f721d1d0b.roa (raw, json)
Hash identifier: OHHqcA1RtYdDyex8O1W80y/WR5fAYq1/6PixQHhlMkQ=
Subject key identifier: 67:CD:43:1D:29:84:62:E6:04:96:1A:DE:70:A0:D7:41:50:4A:EF:1E
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328583AA7A3285FAA2DE4BFA29DD080
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/8432477e-0f8b-3ee0-be58-ca2f721d1d0b.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.130.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a3:28:5f:aa:2d:e4:bf:a2:9d:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=cd73918e-1775-4d0b-903f-07e1150dc35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:06:d1:a3:56:10:aa:5a:0f:8e:b5:56:2b:
a4:79:82:ff:83:c7:2c:f6:0b:c5:6e:1f:05:b2:6a:
05:ee:3c:ba:6c:c7:93:10:52:51:5e:44:70:d4:65:
51:8d:bc:e3:87:d2:5d:a9:18:cf:c8:35:bc:74:87:
71:b8:9c:b7:4f:67:f9:6a:bf:7f:15:9f:98:1f:c4:
4d:6c:b3:19:21:67:36:ee:de:b2:dd:4a:47:3f:d0:
21:8e:b6:4c:55:32:ee:79:cd:f4:d4:7f:de:a7:b7:
9f:14:f4:0a:8a:2b:bd:1e:84:49:18:f7:76:8b:f6:
1a:ea:d9:d3:11:91:a0:41:d6:a4:86:13:da:fd:7f:
0a:73:f6:c3:06:f6:26:82:30:9c:88:75:1d:cf:1f:
7f:b2:da:4a:b9:79:59:38:0b:84:62:bd:f8:99:71:
67:69:c9:50:a3:da:1e:7b:62:33:b2:fc:58:29:c7:
98:32:30:d7:cb:7f:83:cc:bf:c7:db:0c:5a:94:bc:
59:fd:09:b0:bc:3c:17:58:5b:d7:18:66:cc:a0:07:
32:bd:7c:dc:9f:8b:4b:4b:0d:b0:e3:52:49:dc:16:
6d:57:f1:12:d5:f0:52:e0:07:02:a8:95:2d:34:46:
b7:ca:6b:b9:47:ee:bc:3d:58:41:72:ea:88:98:a4:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CD:43:1D:29:84:62:E6:04:96:1A:DE:70:A0:D7:41:50:4A:EF:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/8432477e-0f8b-3ee0-be58-ca2f721d1d0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.130.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:cc:9d:7a:76:dd:bd:03:20:54:b0:47:cd:83:8f:4e:6d:7d:
44:b5:60:6e:aa:7d:94:72:cc:58:6e:b3:df:d0:40:25:e5:d5:
b5:6a:06:fa:fb:08:47:c3:52:0e:05:1f:f2:fe:20:90:db:df:
97:96:09:fb:8b:52:d8:70:26:48:69:0a:18:eb:53:77:4e:98:
86:ca:a3:cb:1c:ce:03:62:67:d1:80:ac:54:18:0a:7e:70:a3:
5e:e4:30:4a:55:c1:ac:7a:14:ef:17:16:4d:79:ef:79:ce:32:
e4:18:5f:31:f8:f5:78:07:5e:2f:73:9b:c4:6f:15:98:8a:75:
3c:97:41:0e:0a:09:be:55:c7:a8:32:ff:8f:16:e1:d7:12:a0:
b1:24:1d:08:19:25:98:85:6b:ab:d5:5d:24:46:14:68:d9:57:
91:de:47:b9:25:b6:56:10:4e:fa:62:91:33:88:ed:55:c4:2f:
6f:b8:41:b1:71:ae:d2:1c:09:bc:e8:3a:6b:4f:be:8e:0a:7b:
11:b6:e1:ef:88:ea:31:c2:57:9f:c1:da:95:47:17:a0:27:76:
7a:55:68:ee:8d:fb:a1:d5:85:b8:f7:50:61:f6:17:f2:9c:b6:
0e:65:99:23:90:a5:97:9f:dc:55:4f:36:7e:16:c2:9a:45:fe:
ab:91:85:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnoyhfqi3kv6Kd0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
Y2Q3MzkxOGUtMTc3NS00ZDBiLTkwM2YtMDdlMTE1MGRjMzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfMG0aNWEKpaD461ViukeYL/g8cs9gvFbh8F
smoF7jy6bMeTEFJRXkRw1GVRjbzjh9JdqRjPyDW8dIdxuJy3T2f5ar9/FZ+YH8RN
bLMZIWc27t6y3UpHP9AhjrZMVTLuec301H/ep7efFPQKiiu9HoRJGPd2i/Ya6tnT
EZGgQdakhhPa/X8Kc/bDBvYmgjCciHUdzx9/stpKuXlZOAuEYr34mXFnaclQo9oe
e2IzsvxYKceYMjDXy3+DzL/H2wxalLxZ/QmwvDwXWFvXGGbMoAcyvXzcn4tLSw2w
41JJ3BZtV/ES1fBS4AcCqJUtNEa3ymu5R+68PVhBcuqImKRlqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGfNQx0phGLmBJYa3nCg10FQSu8eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvODQzMjQ3N2UtMGY4Yi0z
ZWUwLWJlNTgtY2EyZjcyMWQxZDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAITMnXp23b0DIFSwR82Dj05tfUS1YG6qfZRyzFhus9/QQCXl1bVqBvr7
CEfDUg4FH/L+IJDb35eWCfuLUthwJkhpChjrU3dOmIbKo8sczgNiZ9GArFQYCn5w
o17kMEpVwax6FO8XFk1573nOMuQYXzH49XgHXi9zm8RvFZiKdTyXQQ4KCb5Vx6gy
/48W4dcSoLEkHQgZJZiFa6vVXSRGFGjZV5HeR7kltlYQTvpikTOI7VXEL2+4QbFx
rtIcCbzoOmtPvo4KexG24e+I6jHCV5/B2pVHF6AndnpVaO6N+6HVhbj3UGH2F/Kc
tg5lmSOQpZef3FVPNn4WwppF/quRhRg=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org