Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0eb711ea-6f29-3e5c-aaf2-c0eaa0615782.roa
File: 0eb711ea-6f29-3e5c-aaf2-c0eaa0615782.roa (raw, json)
Hash identifier: 3xyPL9XlGkf2L4gsyIsvbV9tShwXA2mtlLuFqDQ2XGw=
Subject key identifier: B2:DE:D6:4D:C6:DF:69:06:F0:9D:7F:22:FC:88:4F:30:EF:13:70:A5
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF4895BE81C2068796FD400
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0eb711ea-6f29-3e5c-aaf2-c0eaa0615782.roa
Signing time: Fri 08 Nov 2024 15:04:59 +0000
ROA not before: Fri 08 Nov 2024 15:04:59 +0000
ROA not after: Thu 06 Feb 2025 15:04:59 +0000
asID: 81
IP address blocks: 152.45.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:89:5b:e8:1c:20:68:79:6f:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:59 2024 GMT
Not After : Feb 6 15:04:59 2025 GMT
Subject: CN=b200243d-171b-4d6a-9524-adc654f3dad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:00:91:03:03:74:71:c1:c3:ea:4a:09:38:4b:
3f:f8:d5:e1:31:9e:c5:22:ce:52:ab:0a:cf:5a:3e:
6a:52:31:97:5c:65:bd:71:c9:e1:5b:fb:b9:2a:3c:
3f:21:f4:6a:54:14:1e:dc:87:8d:62:88:84:3c:c0:
1b:b0:e8:20:52:b9:24:f2:22:56:15:03:84:53:a1:
da:c2:27:21:a1:28:71:69:44:c8:af:8f:a8:4f:06:
b5:b0:7a:f2:43:6e:a1:89:93:cf:71:39:fc:ed:10:
81:71:70:00:65:4d:61:86:e5:98:dc:dd:2b:44:00:
ed:e5:3f:e5:92:0c:dd:23:8d:5a:d1:5c:fd:ac:12:
4f:36:46:d2:d8:dd:39:78:00:00:f5:aa:2a:c9:f1:
f8:8e:cc:f7:85:58:91:6d:00:53:60:d6:71:9f:01:
15:74:39:97:ef:fa:94:35:db:60:77:1e:04:84:a2:
bb:66:3d:2b:d5:ef:f7:36:43:01:34:3a:4e:ed:cd:
8f:f7:40:c7:e6:5e:22:30:e6:57:7c:05:c6:c2:47:
16:6e:6b:c6:0c:bf:a1:f5:0c:c8:37:af:7d:fa:36:
f5:4a:34:6c:18:8d:44:19:06:92:20:52:53:e4:37:
c9:c6:19:71:dc:ce:b0:07:27:38:c8:c4:19:d2:35:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DE:D6:4D:C6:DF:69:06:F0:9D:7F:22:FC:88:4F:30:EF:13:70:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0eb711ea-6f29-3e5c-aaf2-c0eaa0615782.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.45.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:c3:17:5d:0d:d7:9d:2e:c5:95:53:c1:83:48:10:5f:7f:1e:
33:3f:86:81:36:9c:d3:06:1f:e0:18:1a:3d:49:84:ef:b4:6d:
3b:13:5b:c0:1e:1d:4b:b7:34:43:77:17:d6:80:e2:0e:ef:89:
d6:09:89:48:77:68:ea:d2:b2:0d:e8:37:92:6e:b7:7c:cb:bd:
4b:77:4b:a6:5a:db:16:a3:4d:f0:20:94:88:7e:44:02:48:49:
52:11:b7:99:0f:06:a2:e1:8d:f8:10:21:35:68:bf:32:ff:77:
78:61:9f:c3:81:9c:96:5d:72:a2:85:0d:53:4b:87:f9:7d:d4:
45:0b:ba:ad:22:ac:40:ca:9c:52:c3:cd:98:66:55:3f:50:95:
01:3e:7f:42:56:a9:50:12:d0:90:c3:8c:db:11:cc:9d:c9:65:
5d:8e:55:ac:92:0f:41:e5:be:a5:fa:3f:0f:07:34:20:c8:ce:
99:b4:0c:dd:ae:d7:e5:61:e6:43:8b:93:3e:10:d4:d3:bf:0b:
01:2f:15:99:0c:de:c0:14:56:02:88:54:63:f0:28:6e:4d:5d:
4f:1a:e6:11:02:b7:c0:79:1b:de:c2:a3:3d:da:79:5e:ec:50:
e2:1f:d4:d2:e2:73:79:a4:2a:87:c5:15:3b:83:7c:e8:70:07:
23:75:50:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:18 2025 by rpki-client