Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d3a8533e-f38f-33c8-9031-8a15b67629e3.roa
File: d3a8533e-f38f-33c8-9031-8a15b67629e3.roa (raw, json)
Hash identifier: t6CQuUWX68vz8EmPTtRVQ1TeBdq/aCxjzoh23qAn/98=
Subject key identifier: 40:75:16:C2:88:8D:8D:66:F3:3D:0D:64:21:E4:CE:58:E7:DD:1A:FF
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F432858430A1BEC58AD53A1D949C64E80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d3a8533e-f38f-33c8-9031-8a15b67629e3.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1b:ec:58:ad:53:a1:d9:49:c6:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a1ae17ca-7d0e-420c-ad3d-006da2f8afec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:dd:77:19:66:04:e2:be:34:20:12:4f:f0:
57:ec:18:de:28:f0:8d:cb:e4:3b:17:7c:67:c9:7f:
ef:a7:36:1a:d8:e0:22:f8:6b:61:f3:db:21:32:eb:
54:cf:8b:5c:52:3a:ed:4f:09:00:45:64:f5:9d:b8:
03:b8:41:c0:94:5c:af:e9:4a:32:72:73:03:b0:c7:
3b:2e:c0:17:e6:02:8d:1d:b3:62:0c:79:97:f8:e8:
9b:3f:ac:3a:89:5c:fd:e2:e5:97:4e:f2:4e:19:37:
6e:8b:c8:2e:f2:5e:6c:86:79:49:5b:d9:fd:4f:28:
aa:fc:16:ab:f0:ec:57:12:40:47:b8:f8:a1:72:52:
67:3f:7c:41:d9:b9:97:29:a1:29:73:26:75:ea:51:
d9:dd:77:dc:06:18:8e:6a:03:d9:50:89:a7:09:50:
25:67:fd:8d:30:ae:26:a4:f3:ec:2e:15:27:88:35:
54:18:d8:78:41:93:22:12:2a:18:9f:fc:65:81:b6:
ab:11:bc:99:cc:7b:1f:22:4b:ba:66:66:65:91:17:
d8:24:af:67:e2:12:1f:b9:5a:bb:fe:b8:a4:0c:98:
0c:43:5e:7b:f3:93:67:95:92:10:3a:35:aa:2b:2f:
c3:83:f2:c3:f4:ed:d1:d8:7e:de:e2:11:45:15:19:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:75:16:C2:88:8D:8D:66:F3:3D:0D:64:21:E4:CE:58:E7:DD:1A:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d3a8533e-f38f-33c8-9031-8a15b67629e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:e1:fe:21:42:1d:14:c4:86:c0:90:a6:60:41:e6:c4:55:b5:
46:68:e0:71:47:2c:d2:23:ad:8f:0a:e5:f7:cf:97:c2:0e:0c:
7b:8d:c7:73:ad:63:29:e7:da:68:0c:ad:8c:b6:81:a3:bf:43:
c6:c1:92:b9:7f:21:84:8f:ee:e3:6a:2e:0e:3f:de:c6:66:c1:
63:3f:03:2e:f7:7b:40:e3:88:12:2a:3f:62:e9:f5:10:cd:13:
66:dd:78:e0:44:04:9e:8a:b6:0c:47:97:48:e2:0c:19:a6:f8:
20:cf:26:3e:0d:ff:51:05:7f:55:45:ef:6a:79:c6:30:0e:8e:
e5:a1:1e:4e:66:55:3d:5e:9b:64:96:a0:34:1d:fd:22:04:97:
99:ea:0c:46:02:c9:dc:30:57:7b:f2:48:e0:67:42:0d:64:34:
99:bb:7e:59:c2:4d:9a:39:99:c5:2c:fd:7c:27:0d:c9:63:9f:
49:46:57:32:6c:0c:fb:5e:2c:62:76:8e:de:51:5a:a1:6a:a7:
b3:b0:d9:b2:c3:3a:31:71:e7:5a:35:07:16:aa:06:72:ad:4b:
05:05:2f:87:39:8d:69:29:f7:0d:db:4a:24:cd:77:73:0c:67:
b0:09:65:14:a7:83:7d:2c:79:53:0b:80:26:7d:32:e4:d4:79:
97:83:f7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:42:55 2025 by rpki-client