Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a26e1844-4ebd-34f3-9792-1746079af2ad.roa
File: a26e1844-4ebd-34f3-9792-1746079af2ad.roa (raw, json)
Hash identifier: s9ANedoKXewgO2rrS/jXtZ5o1sSkzkSv1/KSSHxiszQ=
Subject key identifier: E2:16:B6:CD:1E:CB:EC:3F:4D:13:7D:3C:B3:3F:34:EF:E4:D9:0D:E5
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328584309F9780F98CEAB93626D0580
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a26e1844-4ebd-34f3-9792-1746079af2ad.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f9:78:0f:98:ce:ab:93:62:6d:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3a69df27-e048-4771-9f7f-126933bb5288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b8:25:88:1a:cf:a8:e3:3f:9a:e7:85:78:aa:
18:5c:1c:0c:38:ad:b2:b5:7f:92:80:de:a1:a9:66:
92:53:ef:cb:83:5e:47:ad:4d:e1:28:ec:eb:61:8d:
08:e8:72:8c:ea:5d:89:02:af:cb:d4:e1:6a:24:be:
31:96:5f:cc:0d:7f:36:6f:5a:d1:dd:ed:7b:26:4d:
d0:72:e9:1d:c8:62:b3:b2:a4:4a:33:68:dc:43:b2:
a1:08:ce:9a:2c:2b:c2:55:60:ca:c1:75:e3:0d:35:
42:76:9e:11:73:86:32:71:e4:ff:25:d8:79:e0:4c:
7a:1f:62:d4:53:f4:47:f4:7e:50:cb:41:e6:39:a2:
a5:ac:89:cd:1e:8b:d2:8a:fc:c0:d7:f6:23:f5:b8:
ba:17:33:d0:37:f9:0e:72:01:93:7c:7a:f6:09:65:
8f:e7:e4:2d:df:76:3b:23:5c:b1:19:e8:67:3a:c2:
3a:6e:38:22:9e:d0:ea:86:22:2c:db:b4:32:32:e0:
24:3f:f7:aa:59:67:69:75:1a:15:c4:5d:50:06:69:
7e:6c:7b:95:7a:27:4f:47:41:76:39:b7:3b:5f:10:
8c:6f:f6:ed:a9:55:42:c0:21:a4:01:c3:97:3b:95:
05:14:a2:4c:36:06:ad:f8:83:8f:5b:11:67:2d:ee:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:16:B6:CD:1E:CB:EC:3F:4D:13:7D:3C:B3:3F:34:EF:E4:D9:0D:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a26e1844-4ebd-34f3-9792-1746079af2ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:da:c8:9c:08:f3:b3:50:98:88:83:b9:e6:1a:d5:8a:98:5b:
a5:28:e0:5d:e5:6e:dc:0b:43:8a:85:a9:5a:c7:b2:17:56:34:
e8:54:77:d6:01:f6:f3:74:22:b6:8d:a1:ca:ca:62:2c:20:83:
52:30:1d:3c:80:af:28:36:a4:2d:8b:5b:92:3b:e5:ea:91:97:
7a:68:91:88:45:66:b7:9b:bf:48:e5:bc:4a:7b:33:ef:17:1d:
68:34:9b:ff:a0:74:30:9d:dc:63:61:d4:43:67:5d:f4:ca:7f:
bf:88:e6:2b:79:76:ec:a6:c2:5e:a7:ef:b4:47:07:d9:1f:4f:
7f:15:98:b7:e9:53:6f:f9:14:ef:22:70:34:1b:84:f6:25:9d:
40:24:a5:28:89:c7:1a:71:7b:00:46:83:db:49:01:28:bf:f4:
a2:95:99:1c:ff:68:3e:c0:07:c6:73:3e:af:78:c9:90:a0:31:
d5:8c:ae:46:07:06:0b:37:0d:30:a1:92:5b:1c:53:8e:70:4b:
30:60:95:39:50:31:c2:21:5d:22:5a:ea:6e:3c:89:77:1b:61:
af:c5:42:63:fc:92:97:8a:be:43:25:77:24:55:c2:5b:52:79:
4e:3e:80:ea:b1:21:14:15:73:1f:5f:ca:d4:ef:3b:e7:3a:02:
df:d6:1c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:56:58 2025 by rpki-client