Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bf044384-22af-35b3-b433-e6663dff043f.roa
File: bf044384-22af-35b3-b433-e6663dff043f.roa (raw, json)
Hash identifier: 2VMKDz5fcyXepaBJ5dA7DcvqFJrukXeIvxbaJcLfa6k=
Subject key identifier: 92:90:A0:4E:62:35:B1:18:72:AA:50:97:0E:50:8F:17:0C:1F:E9:D3
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328583AA7AD9BE9DBF54B53F60FFF00
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bf044384-22af-35b3-b433-e6663dff043f.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.144.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ad:9b:e9:db:f5:4b:53:f6:0f:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=89bdb211-2720-4a49-9029-177b428060dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:56:73:35:71:77:a8:98:86:d7:0b:03:ba:32:
25:f3:a8:de:44:09:1b:3e:24:f7:fc:82:fd:cd:84:
d4:18:ce:86:df:23:37:ee:ad:98:e8:c3:da:53:7b:
a6:00:73:9f:3a:d6:43:33:2c:c4:10:15:7d:21:7e:
d7:02:01:06:e4:11:ef:8f:86:ab:bb:23:da:08:27:
1f:af:c9:46:8b:b2:8d:b9:b0:80:2c:71:2f:5e:4e:
63:67:e0:eb:b7:b7:c3:ad:ca:3e:f5:3a:9c:3b:ee:
1e:9e:84:80:ea:a4:1e:60:82:67:88:f5:20:da:a2:
75:bd:44:9b:3b:d0:65:fe:ab:7f:01:ae:1d:81:72:
10:82:67:fb:c7:36:55:b4:84:38:fd:86:a9:2d:d1:
d7:8b:e1:d8:82:56:64:c4:50:fb:25:6f:11:f1:a6:
cd:26:4f:dc:5d:7c:a5:a9:a9:26:a4:0d:b2:dd:45:
1f:4b:4e:d2:33:1c:e4:65:d4:a5:ba:bf:e1:af:93:
da:7d:8e:9f:6e:b5:57:8d:c1:4a:35:a3:61:56:f0:
c5:b1:7b:d3:5e:eb:4e:63:3a:48:ed:1e:8f:96:0e:
4b:a5:b8:27:92:44:d6:8a:47:f5:75:ba:37:73:a4:
2c:47:44:97:18:f2:d2:f9:7c:fd:b3:5f:8e:83:a6:
db:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:90:A0:4E:62:35:B1:18:72:AA:50:97:0E:50:8F:17:0C:1F:E9:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bf044384-22af-35b3-b433-e6663dff043f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:ad:6a:bc:db:c4:b0:e2:fc:eb:2e:6d:c0:c6:be:3c:84:e0:
c2:6c:b1:f4:02:b7:f9:cd:2a:3d:5d:b8:62:d5:9e:af:f7:b9:
cb:30:93:f9:0a:27:53:a1:a1:09:81:f4:6c:76:ce:08:12:74:
b6:c1:62:ac:74:79:34:35:32:db:8f:6d:e8:d3:c8:8a:a6:2f:
94:af:2f:7e:42:89:93:b1:f7:35:c0:a5:44:65:c6:79:80:8e:
8d:7b:11:b5:f3:85:3e:a3:ee:51:f8:12:2b:19:df:42:98:27:
ba:77:5e:d4:5f:f9:da:a5:63:ef:6b:38:d4:1e:43:44:9a:97:
c8:a0:a4:1c:1b:14:19:8f:5d:bd:b8:b0:ee:59:66:a6:4c:a5:
a5:04:a3:1a:8a:e2:f4:9a:fa:9e:7f:7c:a9:d2:6f:75:cd:28:
c3:db:f2:68:6b:6f:a0:75:b4:d5:67:68:0d:cf:58:bf:ba:cd:
80:f4:1c:db:67:4a:c2:12:41:dc:3b:80:a2:73:aa:b7:2e:11:
bd:ea:6a:f0:c3:a1:50:cb:0f:9e:96:e0:6c:28:90:ac:da:b0:
0c:b4:a7:36:50:df:3a:78:78:1b:3e:32:18:48:19:a7:65:39:
17:39:32:9c:2b:97:72:df:73:ec:e9:ff:a5:34:ca:ad:38:1a:
86:d8:c2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:07:44 2025 by rpki-client