Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/358a0b9c-8578-31f0-b8e7-a183ff8a0124.roa
File: 358a0b9c-8578-31f0-b8e7-a183ff8a0124.roa (raw, json)
Hash identifier: bim4KcbOWwZndBA3K5hg52DDy8MAF1XQeglZVpU74d4=
Subject key identifier: D8:D5:D4:E6:7A:43:D8:05:9E:68:AA:DC:8F:1C:8C:CC:E7:30:8D:3C
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584972E2F12B4B7FD584B64AF600
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/358a0b9c-8578-31f0-b8e7-a183ff8a0124.roa
Signing time: Mon 07 Apr 2025 16:33:14 +0000
ROA not before: Mon 07 Apr 2025 16:33:14 +0000
ROA not after: Sun 06 Jul 2025 16:33:14 +0000
asID: 81
IP address blocks: 152.46.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:e2:f1:2b:4b:7f:d5:84:b6:4a:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Apr 7 16:33:14 2025 GMT
Not After : Jul 6 16:33:14 2025 GMT
Subject: CN=0d7f6269-36dc-482d-95e7-90199d7dd52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2a:b9:f1:9f:fa:a7:da:a4:94:83:36:0e:03:
3d:47:e0:ec:93:81:b5:08:8b:d4:bd:ef:3b:aa:93:
c6:e8:0b:24:38:d1:0a:d7:22:78:45:9f:1c:14:a9:
3b:46:6a:b4:59:e2:92:13:73:c3:b6:1a:b4:23:82:
53:60:a4:2f:77:5c:47:18:95:58:24:76:0f:fb:dc:
78:65:26:2f:a7:f7:9e:9f:36:7e:e8:ed:cc:3f:29:
14:f6:c1:7e:89:bd:8d:ea:ad:5e:03:6c:40:12:4f:
08:a3:0f:c6:cb:44:89:39:70:ee:17:e1:bd:16:4d:
09:7d:8c:c8:41:29:cc:64:aa:5d:32:68:a8:fe:96:
4c:bd:96:81:92:da:d8:6c:47:42:b2:c8:6a:b0:3b:
c4:c5:25:ad:87:92:91:b5:db:8b:fc:ad:b1:5a:97:
73:5e:84:d9:45:60:90:c9:68:64:89:d3:2c:8d:c1:
23:07:03:5b:5c:54:fa:af:b0:85:19:2d:45:8d:c7:
34:e8:dc:d2:d8:b8:6d:ca:8c:bf:ff:ec:53:26:27:
18:24:60:6a:5d:10:dd:a4:e0:85:41:e7:d9:8e:d7:
f9:5a:57:13:0f:e9:a9:2f:d9:40:d0:36:31:cf:58:
00:33:5a:c4:ea:81:ec:05:5f:52:d1:50:00:79:b3:
65:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D5:D4:E6:7A:43:D8:05:9E:68:AA:DC:8F:1C:8C:CC:E7:30:8D:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/358a0b9c-8578-31f0-b8e7-a183ff8a0124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:99:73:b1:a9:3f:51:84:c7:e7:72:f5:d7:7f:d8:d0:70:d7:
fc:1d:27:68:40:4d:0e:21:d4:48:57:9b:f8:e9:23:80:93:fc:
e8:db:ed:6f:be:56:ce:ef:0a:a8:b3:7d:68:66:7d:e9:29:a1:
d9:c7:1b:ca:a4:ba:75:e3:ca:32:ed:75:a2:fd:63:c4:12:2b:
d7:26:d9:1d:47:ae:61:82:5d:05:2f:93:70:61:f1:a1:04:68:
57:6d:d0:5d:3a:53:ce:9d:ba:30:2d:1d:5f:06:9f:70:23:47:
3e:3a:cb:42:33:b0:a7:eb:54:b5:60:29:2a:68:af:7a:64:75:
8b:7e:d9:b8:7b:f1:50:66:ba:9e:30:2f:3d:5b:33:8c:9a:83:
4c:2a:87:5c:3a:80:27:c6:c9:d9:fd:35:b5:45:18:f8:3c:3e:
0d:a4:09:97:70:32:10:d9:95:d8:01:80:e5:e9:08:47:b4:03:
c3:0d:0f:c1:ea:84:a0:c2:88:e9:3e:93:ad:7c:bc:97:1b:e2:
f8:d3:f5:75:98:5d:39:2c:c1:15:96:a4:ee:b8:a5:ab:fb:70:
a5:c1:0a:f9:06:ac:a8:60:3d:60:03:65:71:f4:09:28:61:9c:
e0:16:93:9b:f3:1b:6f:c5:22:14:0c:98:63:0d:df:b9:80:c3:
e9:93:12:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:23:02 2025 by rpki-client