Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a2c53241-e9b9-3f8d-9f65-d3a9395a79cf.roa
File: a2c53241-e9b9-3f8d-9f65-d3a9395a79cf.roa (raw, json)
Hash identifier: y82zWpLYY6o1aol1irTlitaoZVksKbhHTxxBornci2M=
Subject key identifier: 28:BA:89:23:6A:BB:3B:09:32:6E:FC:9F:87:D6:75:9D:A9:CD:EC:54
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328583AA7C1DB5AD84DEDD05B5C1210
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a2c53241-e9b9-3f8d-9f65-d3a9395a79cf.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.132.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c1:db:5a:d8:4d:ed:d0:5b:5c:12:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=4a129e4f-b9f7-40e0-b068-f581dde76d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e9:f5:0e:a6:3b:9c:d3:44:5a:4e:58:4e:2e:
3c:a1:57:81:62:18:2f:27:ce:ca:8c:c6:45:48:e5:
9e:a8:7a:0f:68:7c:04:95:0f:43:30:ed:c9:ab:0c:
52:0a:69:f1:5c:65:c3:a1:1b:79:4d:5c:e4:f0:51:
7e:4a:1b:16:0b:a6:1c:eb:af:74:cb:4d:a3:8e:6b:
ba:65:98:9f:ae:be:8a:90:9b:ff:a7:16:35:38:ec:
62:7f:bd:e6:88:5d:22:ca:9f:f9:a5:4c:6f:51:14:
2d:d5:d5:f7:de:37:e8:5f:66:b3:79:8b:59:15:4e:
8d:a7:4d:77:ed:4f:8d:d3:bb:13:b1:75:d7:1a:99:
9f:81:31:c4:0b:d2:f7:c9:c6:af:ca:e0:f2:aa:d6:
6f:45:cc:3d:c3:78:9f:8c:cd:a7:38:f1:ce:76:92:
6b:95:f8:f5:df:6d:41:30:ca:f7:85:47:cd:76:f1:
f3:3a:59:de:2e:51:d5:75:ea:11:55:47:9e:c0:22:
67:99:3a:4e:bf:90:45:ea:f8:ed:3e:27:96:c2:70:
e3:82:88:d1:c7:39:cb:b6:57:44:d4:c2:d1:38:fe:
df:9c:27:22:09:ce:53:2a:7d:19:2b:03:38:5f:8a:
77:72:4a:31:99:53:d1:b8:e8:8c:71:5c:23:1e:f8:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BA:89:23:6A:BB:3B:09:32:6E:FC:9F:87:D6:75:9D:A9:CD:EC:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a2c53241-e9b9-3f8d-9f65-d3a9395a79cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:d7:2f:4e:93:b9:42:15:67:65:58:5d:2a:0f:a4:a6:32:16:
d8:3a:81:88:f8:7e:8d:ea:89:d3:42:e1:80:b9:27:0c:4f:b6:
09:71:34:a6:f3:97:2c:94:a6:12:74:3c:5a:94:e1:87:b5:2c:
b8:d5:3a:1d:10:fb:2f:54:8a:83:be:f2:e4:80:c0:1b:c5:90:
a5:af:53:52:34:b8:80:bb:91:ad:0a:0b:f1:29:a9:bb:77:13:
7c:b2:a5:8d:fc:5d:b3:6c:94:8a:28:d7:86:54:07:eb:fa:11:
81:b1:f9:ca:5c:33:77:66:31:b0:e4:63:0b:b4:66:bc:d1:e4:
be:c5:f6:3a:7a:df:c6:fa:40:08:7d:a3:ac:f6:a0:ec:a2:65:
06:4d:55:c6:4c:3c:19:c8:05:e2:6f:61:02:04:7e:c7:54:cf:
d8:51:64:88:bd:65:45:9b:d1:2e:56:9d:2e:25:7b:c8:41:e7:
1e:b3:5f:72:3e:93:05:95:56:05:e6:c9:77:1f:af:4a:18:4a:
d9:d8:21:d0:be:cc:b2:14:fc:8c:df:3c:0c:48:be:45:76:db:
1b:3e:4c:7c:fe:9c:12:cb:ef:f4:7b:94:c0:84:0e:6a:d9:38:
27:f4:7e:46:42:ea:75:f6:f2:35:63:3f:8c:79:a9:23:9d:6a:
8e:f9:d8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org