Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7cdac11a-c16c-35b9-9878-b591e872495c.roa
File: 7cdac11a-c16c-35b9-9878-b591e872495c.roa (raw, json)
Hash identifier: SImXh3P5M5mzn5QA90A+6HW7Z6joJAmyP8te3CtIAPk=
Subject key identifier: FC:8B:BF:CE:FC:6D:C4:6C:9A:0E:D2:05:70:06:79:EF:2F:E8:7D:B3
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584972E2F0F9EFC94FBCD1A1D184
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7cdac11a-c16c-35b9-9878-b591e872495c.roa
Signing time: Mon 07 Apr 2025 16:33:14 +0000
ROA not before: Mon 07 Apr 2025 16:33:14 +0000
ROA not after: Sun 06 Jul 2025 16:33:14 +0000
asID: 81
IP address blocks: 152.46.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:e2:f0:f9:ef:c9:4f:bc:d1:a1:d1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Apr 7 16:33:14 2025 GMT
Not After : Jul 6 16:33:14 2025 GMT
Subject: CN=20b13be9-3e0b-49f7-897b-463b53118d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9a:23:46:a9:73:8c:f6:2c:cf:89:33:7e:ba:
8d:c9:b3:14:14:31:03:b6:3d:36:8a:68:d2:00:4d:
33:c0:12:7c:27:cd:44:1b:c7:64:31:eb:98:00:e3:
7c:8d:79:10:15:93:ad:1e:fd:12:41:61:da:14:45:
e4:28:c0:fc:65:94:04:b8:d8:a6:a0:cb:99:b6:bf:
f5:b4:b5:ae:98:ed:5e:94:0c:6f:34:80:bc:d1:fc:
44:6d:4a:dd:4d:be:88:d5:76:ff:88:da:9d:cd:cf:
10:3f:f5:02:b1:72:42:33:84:33:a7:08:05:df:1b:
12:b1:1b:9c:57:fe:b2:6d:b4:9c:c7:82:6d:fa:32:
4c:5e:0f:30:a6:99:ad:28:4e:ec:df:90:99:11:73:
50:7c:37:bf:5c:90:32:44:89:e4:89:bf:b8:80:c6:
d2:49:7a:33:3e:62:33:dd:22:2c:d2:46:19:b0:de:
63:e0:96:bd:8a:ef:e3:22:ec:43:e1:25:86:1b:16:
28:b6:9d:5d:11:fe:7a:79:d2:40:ad:c4:40:53:33:
a5:66:21:5a:83:4f:5f:fb:6a:9e:da:70:f7:32:c8:
29:1b:a2:bb:6b:95:5e:45:44:79:39:3f:f7:48:f0:
a8:b9:a8:08:32:a1:92:e1:19:ac:5b:b3:80:61:1d:
e3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8B:BF:CE:FC:6D:C4:6C:9A:0E:D2:05:70:06:79:EF:2F:E8:7D:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7cdac11a-c16c-35b9-9878-b591e872495c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:70:e3:1d:42:89:90:97:f1:62:c1:a4:8b:90:1a:44:fe:cb:
5d:f3:b2:89:84:36:01:5f:9b:89:62:73:22:ef:fc:f1:69:18:
ef:3f:68:dc:39:55:a2:6d:8c:4e:8f:a5:5b:c5:9d:b5:08:6a:
16:91:aa:6a:2b:a6:ee:19:74:17:6a:58:48:d2:93:35:31:89:
0b:1f:24:6c:5a:90:13:39:3d:6c:8f:84:c7:8a:0a:82:d1:1f:
6b:93:9c:d2:d4:f3:c5:d7:dd:3e:38:82:a1:b7:fc:d6:b4:5f:
e0:76:5b:2e:ae:08:4d:77:f2:89:53:e4:ed:dd:4c:ff:c1:ec:
da:74:10:72:70:21:3b:b4:9f:72:fd:8f:08:d3:de:3e:b3:7b:
98:de:e6:b7:d0:fb:a4:fa:1c:82:6a:34:80:5a:db:fd:2e:74:
33:6d:82:58:ff:dd:4e:17:ed:af:43:65:fc:b0:31:38:6e:d9:
c3:ee:db:49:57:37:5c:70:15:10:09:7f:98:b4:2a:b1:2b:37:
72:3a:7b:08:2e:3c:a7:6e:2e:6e:1a:1a:cd:f1:8a:6b:01:1d:
bb:fa:57:47:af:49:b3:30:db:16:76:9e:cb:5c:d1:73:be:d2:
c2:30:9d:a1:23:9f:4a:cb:9a:f3:0b:f9:86:06:7b:88:df:82:
3b:0d:bf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:22:48 2025 by rpki-client