Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/99aa2c52-88fc-3ec8-ab98-8384724b62dc.roa
File: 99aa2c52-88fc-3ec8-ab98-8384724b62dc.roa (raw, json)
Hash identifier: OiX45ySNZ2nPZCWq89AezGaHd9b+G521KnJFs/eN5OE=
Subject key identifier: 6B:31:E9:F5:00:1E:0E:C5:6B:04:DC:1E:15:A6:7A:48:54:2E:E4:22
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328584309F238C54F95F798F69FAFC0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/99aa2c52-88fc-3ec8-ab98-8384724b62dc.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f2:38:c5:4f:95:f7:98:f6:9f:af:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=fd13c621-62d2-43c2-ab00-7a68915ab766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:21:38:f6:c1:d0:20:cc:af:72:e8:67:a0:1f:
0d:0e:c7:88:83:e0:e9:b8:5e:1c:da:77:ed:9a:d4:
ad:a7:2d:73:6f:71:41:ec:89:c8:2d:2a:c4:05:99:
41:a4:4c:3e:1a:c4:2b:d9:3a:00:d4:8b:04:95:7c:
ed:96:53:6c:fb:24:67:c1:47:91:b0:da:43:46:4f:
e2:e0:47:4c:78:f6:42:71:e0:ef:b8:ac:6c:e0:d2:
70:95:cc:04:f5:57:76:e4:6b:df:7c:9b:f8:72:6f:
cb:f0:3c:ea:b5:93:7b:79:48:51:77:1c:05:1f:a3:
6c:2c:f0:5f:dd:23:f4:32:b7:59:c6:94:74:db:0a:
da:40:32:a0:a5:31:ef:a8:26:17:50:5c:70:c7:05:
8c:b7:a8:79:48:cd:a0:7f:bb:25:4a:53:e9:8b:5c:
5e:08:76:6d:7e:ff:4e:aa:cf:63:4d:ea:8f:e2:97:
f5:30:da:5a:a0:14:43:e1:ce:47:d8:4a:23:9a:1f:
83:a3:5e:5b:01:7f:ee:09:07:0c:60:83:00:28:73:
75:11:0d:1c:26:ff:82:81:62:21:41:c2:d3:2a:0e:
6e:6b:67:63:e0:be:4d:47:86:09:24:65:b1:7c:03:
3c:7f:cf:b8:47:0b:a6:73:d3:e4:03:e4:6b:39:24:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:31:E9:F5:00:1E:0E:C5:6B:04:DC:1E:15:A6:7A:48:54:2E:E4:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/99aa2c52-88fc-3ec8-ab98-8384724b62dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:9a:91:a3:42:15:c6:76:db:17:eb:7b:50:3f:cb:a4:d5:00:
0d:26:46:0d:b6:0e:a3:51:64:20:34:cb:73:cf:c6:f6:99:d8:
20:f6:11:1a:60:0f:a4:5a:45:49:85:08:eb:c0:fe:2b:26:82:
d8:7c:ae:6d:dc:4e:d0:9e:2e:bc:97:d6:7c:f4:92:ae:3f:8d:
5a:3b:5b:22:b1:6d:90:f4:18:10:c5:31:be:51:3e:19:92:05:
03:54:6b:74:3b:01:d0:d5:a0:10:fa:d3:7d:86:b0:cd:94:e2:
25:6b:3d:78:ec:59:c8:7a:bd:be:e7:61:41:cf:74:69:b9:ad:
c6:71:ba:97:a2:b7:67:21:83:e6:9e:9e:37:1b:3a:4e:b9:13:
72:4b:bb:1d:34:3b:d4:94:d9:2f:ba:1a:67:24:c0:33:ec:a0:
d5:77:af:20:3f:71:1a:19:f3:c8:ab:2c:8f:dc:e8:43:52:ed:
10:2f:18:ea:bf:44:33:e4:05:46:84:fa:70:76:04:16:3e:39:
e6:72:02:3a:3d:4d:55:7a:a2:2f:1b:c5:2f:a3:9f:72:41:8f:
e4:78:79:e0:6a:51:35:82:06:d3:28:96:90:3c:d2:6f:15:c1:
91:25:12:85:18:af:f2:66:53:25:53:c9:b8:89:65:6c:54:1f:
55:3e:6e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:07:46 2025 by rpki-client