Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0c7374a0-9739-3edb-a38c-ba662165fbe7.roa
File: 0c7374a0-9739-3edb-a38c-ba662165fbe7.roa (raw, json)
Hash identifier: UJ3t/DZwmfuwRGRKZ6Xnsj7wVlZ4JsV2ZfvllNO+SHA=
Subject key identifier: D0:D2:29:AE:EA:C1:CD:93:EF:1C:B2:BB:EC:37:19:25:E8:CC:89:28
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBA14BBF84AC8AE2C0940
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0c7374a0-9739-3edb-a38c-ba662165fbe7.roa
Signing time: Wed 16 Oct 2024 14:26:33 +0000
ROA not before: Wed 16 Oct 2024 14:26:33 +0000
ROA not after: Tue 14 Jan 2025 15:26:33 +0000
asID: 81
IP address blocks: 152.22.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:ba:14:bb:f8:4a:c8:ae:2c:09:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:33 2024 GMT
Not After : Jan 14 15:26:33 2025 GMT
Subject: CN=40858c9e-cb35-4a73-9c2d-792aa95a24b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3c:08:a5:57:dc:65:0a:cd:44:e2:63:30:15:
d8:d3:e2:9b:a6:09:d2:47:87:3c:44:87:80:b3:f9:
9c:23:ae:4b:f6:29:fc:21:10:68:fa:19:c5:84:8f:
83:29:0f:cb:b5:1b:8c:a9:3d:64:30:02:f3:16:e2:
c9:e7:8b:eb:eb:e5:51:91:4d:12:d5:9b:7b:36:4f:
cc:f1:42:ef:9c:eb:77:9d:9a:20:97:09:99:e4:b2:
28:3c:4b:ae:f2:42:26:a3:f5:32:89:fc:b7:a9:29:
14:98:cf:26:78:86:e3:94:69:c4:84:75:87:86:04:
58:ba:69:64:c7:ac:b5:83:28:13:4b:25:8b:3d:47:
b8:1f:3d:1d:8d:f4:f7:95:01:2d:89:a3:d4:53:24:
99:cf:fd:a8:bc:51:a9:76:df:e4:3a:24:f7:28:b0:
af:8d:10:b9:34:2c:84:dc:10:76:9e:bb:7b:de:e0:
98:e1:2b:18:4a:a9:f4:1d:29:60:63:72:03:d4:b3:
29:34:4b:fc:e1:3a:52:30:92:fc:83:60:29:7c:46:
8e:41:1d:73:3c:c3:10:b0:47:f3:68:04:21:bd:bd:
90:8b:d5:c2:9f:ab:e9:b9:36:a3:fd:c6:5f:b0:88:
bb:b2:07:21:5e:be:7a:a1:55:f2:28:d2:4c:c7:db:
e0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D2:29:AE:EA:C1:CD:93:EF:1C:B2:BB:EC:37:19:25:E8:CC:89:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0c7374a0-9739-3edb-a38c-ba662165fbe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:9e:97:67:99:51:0b:6e:d5:bb:eb:a3:2e:7f:f2:72:6a:db:
f3:54:24:a1:0b:ce:42:96:fe:ae:ed:b5:8f:65:f6:8f:b9:a8:
0e:e5:cf:18:a9:d9:f8:28:4b:a5:ff:00:55:07:54:4b:80:9c:
f5:2d:b2:0b:a1:e7:69:e0:7a:00:49:01:df:b3:9a:15:73:12:
a3:f4:94:ad:3f:f7:13:db:b0:a3:ce:e9:ba:35:25:64:d7:86:
d8:4a:73:aa:da:fd:0a:6a:1f:4e:6c:bd:31:09:0b:c4:85:5a:
45:8f:de:36:63:7e:42:06:bb:7d:87:b1:1d:32:38:b0:2b:55:
d6:ad:3d:2a:a8:55:d0:d5:0e:0d:b5:c4:7d:bd:17:e8:05:d0:
2a:ae:38:60:2c:fd:04:b4:c3:11:95:e8:f1:be:fc:6c:a2:85:
98:48:7e:e2:94:0e:ac:9b:65:dd:c1:fc:b9:86:17:53:b0:a3:
b9:94:64:5e:c0:b6:1f:7f:a9:f7:76:9f:a6:70:f4:13:b6:a9:
47:46:6a:c2:38:67:94:d3:2a:8c:1d:76:d5:2d:d8:de:c6:c7:
5f:0e:a4:71:c8:a9:e6:83:0c:1f:94:f1:4d:20:c3:de:fc:96:
11:92:18:70:7c:64:66:6c:bd:97:1e:5f:db:1d:8c:05:79:63:
20:18:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:31 2025 by rpki-client