Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/02ae4aa7-1c90-3b24-86d3-e08d6c1170ee.roa
File: 02ae4aa7-1c90-3b24-86d3-e08d6c1170ee.roa (raw, json)
Hash identifier: +HlWeUiGLetBNaRgpGNh65F/iSjiZVg9CjuOUMmJy9c=
Subject key identifier: E2:3A:4D:DF:E4:2B:50:04:5C:70:95:CE:1A:34:20:3B:53:AD:6C:00
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48B08B16670B35FA9D180
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/02ae4aa7-1c90-3b24-86d3-e08d6c1170ee.roa
Signing time: Fri 08 Nov 2024 15:05:00 +0000
ROA not before: Fri 08 Nov 2024 15:05:00 +0000
ROA not after: Thu 06 Feb 2025 15:05:00 +0000
asID: 81
IP address blocks: 152.46.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:8b:08:b1:66:70:b3:5f:a9:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:00 2024 GMT
Not After : Feb 6 15:05:00 2025 GMT
Subject: CN=2957bead-1337-41ca-8f19-f37df2d69f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:63:0c:6d:6b:c7:1b:be:66:df:dd:b5:9a:
8e:b3:01:59:7e:05:8f:02:81:32:88:ee:2b:e3:26:
39:b7:aa:57:52:42:d7:23:8a:71:48:f2:09:83:f8:
24:3e:b5:de:a1:5d:52:61:3c:c9:a2:3e:c5:a4:33:
2b:d0:87:2b:fa:bf:89:d6:d0:97:ea:f1:d1:c5:8e:
71:38:78:b0:95:2b:03:aa:ec:c0:16:a2:43:5c:b4:
79:94:8e:e8:32:f8:c7:6f:9a:fc:2a:9c:89:88:51:
4f:04:ee:f2:2f:ed:1c:d0:0c:d4:af:c0:ce:b7:f1:
93:16:bf:09:ee:9f:17:28:df:69:5c:93:e7:fe:b8:
68:36:73:36:53:e2:56:f4:0a:e9:d0:89:21:83:bb:
e9:c6:e6:ca:2f:96:de:20:5d:24:ae:1f:cc:62:7b:
51:b6:1f:4e:bd:c2:90:f0:2c:f4:e9:e1:9e:2b:21:
75:bc:a7:e7:63:a7:0b:4c:a1:17:cb:9b:40:cc:05:
d5:a7:3b:a6:83:57:21:f8:28:d5:12:74:66:e9:32:
00:58:64:e7:d7:92:0f:9d:97:1a:32:29:df:f2:53:
76:5e:6f:93:1a:1f:61:a8:d5:e9:64:a0:90:0a:07:
6e:ca:84:44:fa:47:aa:cb:9c:0b:c4:9c:60:5d:48:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3A:4D:DF:E4:2B:50:04:5C:70:95:CE:1A:34:20:3B:53:AD:6C:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/02ae4aa7-1c90-3b24-86d3-e08d6c1170ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:7c:8f:f2:ba:49:85:15:18:5a:f0:c9:98:5d:ea:5b:26:a0:
17:88:1d:68:b8:86:a5:9d:a8:e5:18:18:57:00:79:7b:e2:61:
ee:a0:68:60:7c:ff:5e:ad:d9:fc:fc:f0:f2:7b:60:7e:ac:b0:
27:d2:7d:eb:61:67:75:e0:c4:9b:ec:65:0b:ad:ea:94:25:55:
62:9d:c8:98:f6:2f:e1:e0:da:81:fb:43:e9:18:86:29:19:d3:
ab:4e:0d:b9:0c:5f:17:47:96:c0:2f:7e:39:50:00:22:69:b0:
9e:27:9e:1b:ca:ea:c8:06:90:88:1a:20:b9:df:07:e5:6b:92:
2d:ab:65:5a:06:ad:0e:05:b9:c7:d0:54:6a:ab:7d:d1:1b:2b:
25:ad:c7:97:96:af:26:7a:c6:d0:5c:9e:dd:1d:f1:16:5d:e8:
24:63:b5:1e:bb:30:13:82:fe:1f:16:3f:38:0c:b2:c8:eb:50:
ab:25:19:d6:ad:ef:6d:cd:1e:b5:ae:31:03:a7:32:b3:8f:be:
7b:41:bb:e3:ed:5f:e0:89:65:5b:ad:b9:79:ef:75:c4:0d:3b:
f5:1e:6a:b1:dc:7d:0e:4c:03:5f:bd:82:80:e1:9b:d8:0b:32:
d5:a2:f0:c4:72:d0:2a:4a:e9:f1:02:a6:76:83:39:1c:fe:6e:
b4:14:55:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:30 2025 by rpki-client