Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b52a7d42-8a8e-3c7b-97eb-be631259e8c7.roa
File: b52a7d42-8a8e-3c7b-97eb-be631259e8c7.roa (raw, json)
Hash identifier: p4s/S74relB3mqFbVt6npCyMq27/Ho3dJTa9O/UfiHU=
Subject key identifier: 18:3D:D5:BA:47:10:C9:11:F7:A8:12:42:5A:A2:B2:FA:68:AC:4F:18
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328584309F63907D13826ABC8E635C0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b52a7d42-8a8e-3c7b-97eb-be631259e8c7.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f6:39:07:d1:38:26:ab:c8:e6:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=98c1dd51-1feb-49e0-97cd-89d01be9ea26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:44:7c:cf:7c:db:00:a0:34:d0:b3:f9:e3:58:
69:81:6e:65:83:15:f6:e5:23:28:46:49:91:37:78:
bb:54:52:c0:07:ec:2e:48:f3:40:a4:86:76:0a:91:
74:da:07:1d:7c:d5:a5:57:40:7c:c9:2a:f1:a0:b8:
cf:b4:31:af:88:e0:85:da:be:25:6b:10:6b:7d:37:
22:79:5a:55:ab:65:47:7b:a5:9e:93:54:5a:68:5c:
04:32:50:61:16:6b:8c:a6:ea:67:05:fe:d0:e3:e6:
77:14:8c:60:6c:3c:b2:6e:4c:87:12:3c:f8:0b:f9:
29:aa:2b:3d:f1:41:c3:b8:ff:d4:c6:c9:21:af:09:
70:ca:91:97:dc:e5:cf:cb:b5:a8:1f:b9:88:36:bf:
ed:f6:27:c0:a3:45:7d:d8:40:cf:54:37:4e:c3:d6:
24:fa:32:36:c1:08:83:79:af:e5:6f:43:65:32:77:
db:eb:20:67:a8:0a:91:f6:c4:c7:af:10:5f:4c:61:
3f:30:3b:59:7c:e2:42:1c:81:bf:ec:6b:54:38:02:
a6:21:6a:5e:a3:13:01:80:7e:48:0e:0b:a6:3f:61:
f2:dd:bd:7c:9f:b0:57:6b:58:59:64:9d:aa:9c:08:
38:a1:eb:6d:78:86:28:f4:8b:99:ed:23:36:b0:3e:
72:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3D:D5:BA:47:10:C9:11:F7:A8:12:42:5A:A2:B2:FA:68:AC:4F:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b52a7d42-8a8e-3c7b-97eb-be631259e8c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:0c:93:e6:79:cb:f0:ce:19:7e:4a:0f:66:f2:dc:0c:01:e9:
2d:eb:37:19:a2:44:ad:c6:d2:79:db:aa:2f:0c:6b:cd:59:fb:
23:b9:48:47:58:16:c0:78:50:be:41:fa:df:04:e4:c5:1e:ca:
13:e2:4a:ef:6c:8c:d1:d0:e6:d8:e4:0d:4e:14:cf:55:3d:5b:
a7:7d:34:58:85:14:49:54:1d:27:d4:26:fd:50:b5:e9:fa:f0:
6a:54:13:e7:29:2a:3d:e0:83:a6:1d:ae:87:a7:f2:ab:45:bd:
94:5f:51:3e:2e:36:58:d3:a1:6b:6e:72:bc:8d:89:fd:c3:c0:
54:9c:52:3b:ef:43:6b:d9:91:01:ab:70:f5:06:41:80:11:d4:
44:82:9a:eb:33:36:f4:40:09:8a:d2:3c:cb:39:4b:83:d2:b2:
db:61:ea:8a:ac:05:53:c5:90:ae:39:e1:d9:66:d4:e9:05:77:
6a:6c:62:2a:54:01:d7:1d:5d:5a:a0:8b:eb:88:c3:3a:2a:8e:
a5:8d:a8:b3:80:4f:12:1e:19:44:79:f1:8e:de:52:25:75:29:
10:08:b7:bb:d2:bf:49:dc:27:5d:51:ce:d3:13:69:56:79:a7:
a2:6e:14:32:fe:38:cf:8b:60:dd:d2:8d:bd:6d:c6:55:dd:d3:
ca:ce:d9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:45:12 2025 by rpki-client