Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/35a8e22d-f7ea-34ab-9f1a-6c53e1852be7.roa
File: 35a8e22d-f7ea-34ab-9f1a-6c53e1852be7.roa (raw, json)
Hash identifier: /9DnLjasgZc/jJGH/i7wR4uWsJuYZvaHLAnsrM2zC6U=
Subject key identifier: 12:19:85:66:F7:1E:22:D3:23:FB:F6:34:79:0F:B4:B5:78:F8:8D:0E
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584972E2EFBEF988A2DBB48B36A7
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/35a8e22d-f7ea-34ab-9f1a-6c53e1852be7.roa
Signing time: Mon 07 Apr 2025 16:33:14 +0000
ROA not before: Mon 07 Apr 2025 16:33:14 +0000
ROA not after: Sun 06 Jul 2025 16:33:14 +0000
asID: 81
IP address blocks: 152.46.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:e2:ef:be:f9:88:a2:db:b4:8b:36:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Apr 7 16:33:14 2025 GMT
Not After : Jul 6 16:33:14 2025 GMT
Subject: CN=4fe52579-f5c4-4b6d-b18e-2de9786256e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bd:5c:63:c5:47:a7:65:e2:6d:82:16:ed:5a:
08:68:d5:0c:ed:1a:d2:6a:f8:82:68:0b:e3:55:74:
f0:b6:70:de:90:38:e7:29:80:df:dc:e2:12:77:9e:
95:d2:51:f3:af:9a:d8:47:3d:1f:75:ea:bf:02:5e:
51:7a:f5:4b:a5:16:68:cf:88:d4:78:1a:fd:c8:11:
f7:db:92:7e:26:f0:19:7c:6a:7b:8e:b5:f3:9a:c9:
54:00:0f:17:4e:85:f6:f3:f2:e5:d5:ef:67:b4:cb:
ac:1f:96:27:5e:3f:a2:ca:5a:92:cc:ca:39:c7:a1:
1b:bd:15:57:90:0e:12:1d:3c:13:ad:08:d6:22:88:
d4:66:b2:06:ef:10:c3:f6:70:c2:3b:2a:ca:56:44:
49:e9:2a:13:ca:72:29:c2:8b:95:73:95:51:28:98:
86:a1:36:12:fc:2a:7a:eb:a3:da:ae:e8:f4:b5:c3:
6f:a0:98:1b:3d:b0:83:09:89:7d:82:0d:2a:10:40:
53:fd:57:c6:91:91:09:d3:7e:ea:cb:19:23:72:e1:
79:e0:e4:cc:7f:a6:ed:1d:c5:ce:c8:eb:8b:71:a1:
cc:91:0c:69:ab:c6:46:c9:dd:d7:be:b2:15:ae:ef:
7d:27:d4:39:b8:f6:a2:31:1c:a7:6e:34:16:34:85:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:19:85:66:F7:1E:22:D3:23:FB:F6:34:79:0F:B4:B5:78:F8:8D:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/35a8e22d-f7ea-34ab-9f1a-6c53e1852be7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:7c:1c:a7:61:6c:37:06:7e:d9:32:a8:a1:5a:60:bd:1a:fc:
ef:de:f7:21:39:8e:d2:78:03:e1:c5:04:ca:b5:81:be:bc:67:
80:c4:24:17:67:9e:66:e0:02:23:2b:b1:9e:89:bf:1a:4a:8b:
65:e7:86:aa:49:1b:5f:87:a6:2a:fb:9e:47:2e:ed:98:09:1b:
08:fc:f7:b6:27:96:3a:e5:a0:e2:eb:24:2c:9e:ef:ea:a5:c0:
ba:da:2b:ef:bd:5a:5a:70:da:71:ae:94:c8:c9:41:93:1e:6d:
df:90:86:9e:33:59:ce:18:0d:50:7b:df:11:12:f0:ad:30:55:
29:cb:6c:bd:b2:d0:d5:bc:fa:4a:d9:ab:c7:5e:ab:36:ff:8a:
3b:2c:03:cd:2c:08:98:1f:d1:fd:58:69:a1:20:db:0b:85:5d:
89:b8:39:78:a0:27:4e:4c:95:90:87:21:f7:f7:25:ec:ea:46:
f6:f5:13:ed:6e:70:47:9d:05:70:06:94:34:88:ec:e0:cd:88:
d1:0e:09:18:2f:45:15:3b:ba:bf:22:b5:f1:8a:ee:50:3c:9c:
6c:7a:69:a0:c6:05:d2:6f:d1:0d:af:62:1c:1a:ee:d1:15:ac:
5d:1d:8b:74:32:be:c6:a0:82:55:e4:2d:ed:76:a0:54:95:7d:
e4:bd:a5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:22:07 2025 by rpki-client