Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/117e558f-8cef-32dc-94d2-9728217ba29d.roa
File: 117e558f-8cef-32dc-94d2-9728217ba29d.roa (raw, json)
Hash identifier: kWDOUFH3P30lqNaGb63g+Z8H2sdG70+xsxx01k5wEEc=
Subject key identifier: 50:AD:37:50:D0:48:D1:31:39:3A:D2:0A:45:EE:D6:3B:28:CF:93:CF
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48D426F08BD64C6B54840
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/117e558f-8cef-32dc-94d2-9728217ba29d.roa
Signing time: Fri 08 Nov 2024 15:05:01 +0000
ROA not before: Fri 08 Nov 2024 15:05:01 +0000
ROA not after: Thu 06 Feb 2025 15:05:01 +0000
asID: 81
IP address blocks: 152.46.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:8d:42:6f:08:bd:64:c6:b5:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:01 2024 GMT
Not After : Feb 6 15:05:01 2025 GMT
Subject: CN=2a88ab34-973b-4dd9-b132-b3162a5730db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:c1:84:aa:44:8f:07:22:8b:0a:41:5b:35:
c0:15:67:06:00:69:6d:96:6f:2d:0e:ab:22:c9:e9:
dd:70:d3:25:fa:49:1b:6c:c3:fb:e6:70:6c:88:68:
91:a1:ff:9d:72:20:d2:22:19:12:f6:0f:b5:c3:50:
b8:17:12:8a:25:c5:88:d9:fd:af:91:ca:e3:a5:02:
75:6c:e3:ad:04:08:1b:14:06:f0:b3:f1:f4:17:7a:
50:de:f4:13:d0:15:8e:7a:53:32:f3:b7:5d:26:44:
0a:61:8a:da:1f:4d:84:f9:a9:f6:f1:7b:72:5c:7a:
5c:ac:d4:52:d8:5f:8c:f1:cf:39:f6:4a:fd:58:a5:
85:3f:86:4e:a7:d3:c5:5e:dc:90:e7:5d:31:ca:a6:
a3:03:20:85:dc:0a:d1:7a:e6:e8:79:d5:10:db:17:
14:88:38:56:f1:cc:06:8d:92:3b:b8:14:00:4f:cb:
f0:cf:24:ad:52:fb:ff:4a:e5:86:cd:eb:3e:c1:f7:
f1:2b:e7:1a:11:d2:7c:fe:0f:36:fc:1d:e6:38:17:
7b:fa:9f:32:31:5b:58:31:bb:bf:af:62:70:86:64:
13:42:c0:26:bc:aa:bf:56:ad:aa:c4:9d:24:c5:8b:
14:dd:59:29:5a:fd:c5:1d:9f:da:cf:8c:55:c9:50:
ec:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AD:37:50:D0:48:D1:31:39:3A:D2:0A:45:EE:D6:3B:28:CF:93:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/117e558f-8cef-32dc-94d2-9728217ba29d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:7a:f1:18:53:d6:ba:de:5e:28:7e:01:48:e3:c5:bf:fa:51:
fa:5d:3b:8f:5e:b8:01:13:43:e1:6f:27:38:a8:6a:3f:97:30:
0a:d2:92:e3:e9:82:24:50:16:34:98:9b:d0:a6:9e:fc:7d:a9:
92:0a:93:2b:6d:0c:92:35:d5:cf:5b:d7:e7:b8:04:5e:59:30:
69:b5:e9:ae:e2:28:71:a8:d2:00:ce:b0:09:1a:0b:6e:ad:ca:
81:1f:4b:1d:0b:39:9f:a2:03:ac:b7:1e:1d:68:95:c0:c0:01:
c7:6d:f8:3c:a2:dd:d4:57:3c:74:fb:42:6e:ef:a8:c4:1a:31:
00:28:a9:17:62:bd:7a:c5:0e:f8:eb:b3:ef:a4:bf:9c:0b:af:
3c:99:ba:f0:2f:9a:c9:be:92:38:64:fb:27:92:de:20:41:5d:
db:74:6e:03:2e:37:9d:76:dc:e2:be:39:ff:00:a9:44:dd:ee:
4b:e4:dc:79:d0:96:8b:35:eb:4a:2b:e3:68:2f:fb:5b:73:c2:
82:64:ea:f3:5e:dc:fd:ec:ba:73:d0:11:31:c6:3e:fa:51:0b:
da:be:b2:2f:c5:bf:ff:bf:3a:f4:bc:1b:16:22:49:86:31:b1:
40:b0:d6:db:2e:b8:cb:5a:43:d0:7a:42:5a:a5:9c:9d:82:ef:
d4:56:9c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:30:58 2025 by rpki-client