Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c3509c81-a108-39e1-94ad-81dac6939841.roa
File: c3509c81-a108-39e1-94ad-81dac6939841.roa (raw, json)
Hash identifier: qleJufBUpi9v/F84YLd39JXc35C2VEI4CTes4rN79/I=
Subject key identifier: 6D:84:21:C0:C2:04:A8:D1:24:24:C5:22:69:B3:00:A6:0E:12:6C:15
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328583AA7BD5B6DA1F1554EEE08FBC0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c3509c81-a108-39e1-94ad-81dac6939841.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.138.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bd:5b:6d:a1:f1:55:4e:ee:08:fb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=bcbde656-f041-46c0-8cba-fb5ad1be1f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c9:06:94:50:75:d2:3a:03:2c:e6:0c:86:44:
08:69:ce:2b:07:51:22:b8:66:36:97:cd:08:70:75:
c0:a6:ae:31:6d:a8:66:42:ae:02:3d:56:c5:5d:4c:
5b:72:3f:f8:29:08:ce:8e:a3:d9:f2:48:77:3d:b9:
1d:d0:33:8c:74:d5:bb:61:a6:55:cb:9b:79:97:59:
86:81:02:f0:c3:e6:6e:1e:13:20:21:7f:39:4c:27:
29:6b:27:fb:b0:20:32:10:00:5d:70:0c:c9:c1:93:
91:32:0d:de:0d:67:39:87:f2:fd:a1:93:2b:57:b9:
5e:bf:55:42:2e:fb:e0:27:d4:40:c6:56:94:36:46:
76:57:6d:71:94:be:f0:ac:58:2b:11:ca:94:28:d1:
69:e0:88:d6:6a:9d:ed:6b:7d:9f:b9:4c:16:b2:6c:
46:ea:6f:09:18:86:7a:39:dc:e4:a8:b7:98:8a:3d:
71:8f:e4:6f:f9:f4:d3:d2:92:f8:d0:64:3d:da:29:
13:76:ae:62:2c:7c:15:22:77:3d:6b:06:83:f6:ee:
d6:b5:8b:5f:c9:56:fa:7b:e1:e9:fc:b7:69:03:97:
af:e5:f3:4c:dd:ad:b6:a2:14:17:75:26:b9:02:27:
de:e3:75:5a:7e:01:25:a2:15:d4:8f:92:80:95:af:
56:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:84:21:C0:C2:04:A8:D1:24:24:C5:22:69:B3:00:A6:0E:12:6C:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c3509c81-a108-39e1-94ad-81dac6939841.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:18:59:b8:74:8b:bc:b1:1d:11:5b:61:20:b1:f0:f2:ef:a5:
ef:36:a6:68:32:c0:32:42:e1:2e:66:19:aa:14:58:dd:44:3f:
03:8b:72:5a:bb:d2:17:02:95:70:44:73:1e:34:2f:24:d3:d7:
a6:0b:de:f0:b6:a9:56:5a:a6:bb:ce:02:de:c5:6f:b4:c8:ad:
a4:b1:b8:d2:75:29:d9:98:8e:85:5e:6e:cc:99:c5:0b:b2:52:
12:69:6b:9d:14:fb:3d:4c:d5:18:8c:98:e9:07:b5:96:ea:59:
e9:91:b5:0d:d8:cd:b3:53:8a:e6:44:78:05:4d:10:84:94:d8:
5f:bb:21:b2:d5:ba:67:dd:57:e3:5c:51:a8:7d:6c:60:b4:86:
45:99:7f:eb:07:8d:38:69:a5:e7:18:96:63:9e:99:68:9e:b7:
80:97:38:9f:79:cc:f9:67:f6:4b:e8:c8:14:b2:4f:65:23:7c:
82:56:7d:dd:c3:61:43:ec:f4:84:02:54:f6:74:43:e8:d6:3c:
f0:65:d8:95:7c:8b:89:4c:d7:95:3e:ea:db:91:8a:43:d5:71:
f5:ba:b4:a6:8b:07:e1:41:46:e7:36:b3:b9:8a:0b:49:da:d1:
ac:66:44:91:06:16:81:d6:c8:e7:e0:57:9c:87:b6:cb:82:86:
3a:b4:20:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:07:46 2025 by rpki-client