Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cd097b25-a311-35b3-b4a7-ff316d887e06.roa
File: cd097b25-a311-35b3-b4a7-ff316d887e06.roa (raw, json)
Hash identifier: afg5YbAcBCXmR5tY9q4ENIoOHFlTFrcXZ75UT56EFcI=
Subject key identifier: F4:90:89:17:FF:16:F2:A9:B5:15:F2:AF:BE:34:3A:6A:DE:A7:E0:27
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F432858430A1C12733A2A5E584D2B5E00
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cd097b25-a311-35b3-b4a7-ff316d887e06.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1c:12:73:3a:2a:5e:58:4d:2b:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=4541cfe1-8fa3-4844-b311-10357b1c8719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e2:5d:69:9e:ae:25:75:32:d6:b2:b1:f1:a0:
cf:92:06:13:1b:f4:cd:fa:b2:7a:62:8f:07:0c:97:
49:25:dc:e1:99:0e:93:63:01:4b:06:e3:8a:1d:0e:
b5:55:54:93:06:2d:1d:31:56:c4:9a:b8:0b:0d:be:
d3:60:13:8b:1a:37:8c:6f:87:8f:8b:bd:5f:5c:57:
17:c7:a7:72:60:b2:67:a0:e4:bc:84:8b:f3:1c:ba:
a5:85:86:a9:bd:ac:1b:5e:f9:d0:5e:c2:72:97:ed:
ec:cb:09:ea:ac:14:bc:b2:c8:25:5d:04:59:18:72:
66:1d:07:5c:1e:ec:7d:df:73:f4:76:b7:c5:00:61:
cc:a4:b7:0e:f3:94:7e:8c:e6:9a:01:ac:23:3f:08:
f9:99:dc:c7:df:d4:b7:e4:cb:d2:a7:35:87:3a:73:
6e:ae:8f:dc:1a:eb:24:36:56:81:82:8c:83:ca:52:
66:0d:a9:af:ca:ab:8d:fa:ce:6b:d3:f8:24:82:b8:
8f:1a:58:1a:8d:99:0d:4c:26:f8:fe:de:b3:56:ae:
53:70:b5:9a:a5:32:8e:31:09:0f:bf:81:22:5a:dc:
08:35:ec:1e:41:9d:d8:8e:8f:14:c3:21:f1:92:2b:
f4:f7:09:62:c5:ce:2f:ca:16:c6:79:25:7f:8b:74:
3a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:90:89:17:FF:16:F2:A9:B5:15:F2:AF:BE:34:3A:6A:DE:A7:E0:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cd097b25-a311-35b3-b4a7-ff316d887e06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:19:63:56:e9:85:ba:56:6e:9e:9e:02:b0:9b:55:ca:50:e5:
b0:2e:c6:10:84:8b:63:ad:05:16:15:14:3d:26:cb:9d:18:2d:
62:29:0b:f0:34:79:04:f9:4f:f3:15:de:2e:a7:99:cd:a5:7f:
93:62:aa:a4:e5:6f:0e:14:b4:04:9d:23:34:cb:c5:43:a4:17:
dd:df:3e:37:9f:f3:a7:bb:00:f3:d0:d6:49:d2:9c:ab:3e:e4:
16:ad:85:1a:16:64:77:9e:e3:8f:dc:1b:e1:55:ec:fd:03:cb:
00:3c:59:0a:57:ed:de:e3:81:95:d5:fe:43:6b:f0:0b:6a:78:
cf:4c:c7:13:5e:03:04:4d:ad:bf:6c:49:cb:f8:70:95:99:95:
66:b7:e9:92:22:2b:a1:79:33:73:7c:c5:55:07:9a:4c:52:c5:
ee:1a:3a:30:7b:83:bd:70:ee:aa:ea:fd:7f:b4:8e:78:ac:00:
0f:72:72:e7:f9:5e:84:2c:66:30:25:cd:14:fc:9e:65:2b:5b:
40:8c:87:41:c5:83:ba:05:5c:e9:83:5b:b2:11:57:fd:69:a2:
33:0c:32:8a:f7:23:9b:fb:2d:e1:fc:8d:d8:c5:6b:a1:8d:ec:
b9:65:b0:b4:ca:f7:69:e9:57:00:ca:90:83:07:50:89:dc:f0:
e9:ca:8f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:56:55 2025 by rpki-client