Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/efcc3822-5dbb-3f11-bdae-ed9dcd457db9.roa
File: efcc3822-5dbb-3f11-bdae-ed9dcd457db9.roa (raw, json)
Hash identifier: dY7fQx3jemZesQcrJJR673k4ENjtzGkVoJ/KzG1kXfk=
Subject key identifier: 82:1E:77:60:31:DC:7E:89:33:66:AE:CA:E2:39:3A:E7:40:85:68:8D
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584972E2EF788721E8787D009D00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/efcc3822-5dbb-3f11-bdae-ed9dcd457db9.roa
Signing time: Mon 07 Apr 2025 16:33:13 +0000
ROA not before: Mon 07 Apr 2025 16:33:13 +0000
ROA not after: Sun 06 Jul 2025 16:33:13 +0000
asID: 81
IP address blocks: 152.46.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:e2:ef:78:87:21:e8:78:7d:00:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Apr 7 16:33:13 2025 GMT
Not After : Jul 6 16:33:13 2025 GMT
Subject: CN=715ea6a0-6a98-493c-9fa0-089075b32c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:03:c2:08:9e:db:4d:a9:b2:b9:cb:50:8e:
95:4e:70:ee:00:f1:7f:ab:95:d7:6e:5d:19:21:66:
d1:a8:f8:e3:26:6b:cb:12:98:7d:1d:56:74:c4:f7:
97:3f:34:a0:c7:06:76:0b:bd:f2:2c:61:61:8a:2e:
d0:27:a7:28:2a:a1:70:ba:72:f2:29:4d:e4:3f:14:
67:ad:f4:a4:9a:2e:46:1d:6d:f0:28:d6:1b:f3:2c:
97:0a:ab:ad:78:ec:f9:a5:d1:38:d5:9e:b1:3f:bf:
61:45:26:20:4c:95:f7:ff:e0:e0:c0:da:01:68:08:
d4:61:40:8e:ed:ac:6d:b8:90:72:12:58:5c:fc:c7:
09:05:7f:0b:e6:4b:f9:1e:cc:16:6f:62:40:ba:a3:
9e:b0:e9:a2:94:57:7f:61:35:d8:e1:72:3b:a1:10:
85:7c:c2:8d:53:05:80:40:81:f6:23:d6:3c:f4:20:
ff:bb:00:16:32:f3:4d:77:fa:b0:e4:f1:af:94:17:
06:eb:81:65:d1:94:5d:49:c6:dc:1f:e1:22:72:68:
17:fa:66:8a:d3:32:b9:7d:95:85:96:2c:19:27:a7:
1b:c3:5b:2c:8c:ba:22:b4:4c:42:a7:4e:14:a1:cc:
c4:2c:3a:60:04:d2:22:22:77:00:5f:be:dc:25:f1:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1E:77:60:31:DC:7E:89:33:66:AE:CA:E2:39:3A:E7:40:85:68:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/efcc3822-5dbb-3f11-bdae-ed9dcd457db9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:cf:db:95:1d:05:92:4d:32:1b:6e:4a:8f:11:44:67:28:fb:
18:08:9c:3b:0f:7a:37:86:6e:20:f2:e5:64:f0:6e:1b:ab:c0:
5c:28:04:23:92:42:92:33:d3:2c:19:73:ca:69:09:54:1f:7c:
bf:10:3f:6c:8a:7b:4d:54:9e:40:61:6b:73:bc:14:2b:a4:d2:
44:d4:16:6a:9a:e1:0f:62:96:90:53:26:e4:8b:4c:26:63:3d:
cd:70:8a:6c:75:37:53:9e:f3:d2:12:a9:13:3c:19:63:96:15:
35:a6:2e:a3:ca:8a:fd:61:f9:06:0e:a2:13:49:05:0c:91:24:
96:1c:c7:f8:d0:67:fd:10:63:fa:35:27:08:f2:9b:fb:d9:7d:
29:62:bc:d5:44:a3:ae:28:92:49:a1:c1:63:20:2f:85:e7:50:
3c:ac:68:52:0e:c8:e1:83:27:39:a9:c8:c5:78:03:08:f3:a6:
59:71:5a:81:28:f7:61:54:e7:a8:29:70:69:e0:aa:84:0b:96:
b7:d0:4d:e8:73:c4:5a:70:1d:05:a5:bb:91:5a:01:87:f1:0b:
99:47:e0:11:37:ac:98:b6:bc:ff:d4:b9:15:81:13:59:7c:1c:
80:ac:2d:68:b9:4e:c5:5b:df:24:f2:53:3a:36:0f:ca:c2:73:
6f:f9:ca:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:23:14 2025 by rpki-client