Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1a0f2c42-e00d-3258-9b80-978969589fc5.roa
File: 1a0f2c42-e00d-3258-9b80-978969589fc5.roa (raw, json)
Hash identifier: WSltGxqq2WY94XJWXl3geGIgOrfT5XtPW+uqi5ccVrE=
Subject key identifier: 9A:F1:DE:C1:A9:1A:84:48:A4:8D:71:27:56:FA:BD:63:59:75:9E:6F
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBD39BCAAEB1B4868F9E0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1a0f2c42-e00d-3258-9b80-978969589fc5.roa
Signing time: Wed 16 Oct 2024 14:26:35 +0000
ROA not before: Wed 16 Oct 2024 14:26:35 +0000
ROA not after: Tue 14 Jan 2025 15:26:35 +0000
asID: 81
IP address blocks: 152.45.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:bd:39:bc:aa:eb:1b:48:68:f9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:35 2024 GMT
Not After : Jan 14 15:26:35 2025 GMT
Subject: CN=9edefd0f-7ca1-42b5-9894-52fdebe9ea70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:a0:be:27:b0:99:1f:07:2e:d5:e8:98:b6:
c3:65:a9:40:c2:79:6f:96:bf:72:2b:8a:37:88:2b:
d5:99:a0:02:74:ad:57:cc:50:e9:89:b3:4c:fb:93:
0e:33:8f:34:14:d3:d6:2b:82:c3:95:3b:ea:4a:01:
31:00:bb:a3:2e:12:70:0f:fc:a8:b0:3d:db:54:17:
60:12:a5:ac:95:bb:68:44:38:ae:67:17:9a:2d:4a:
7f:65:8a:d0:8b:77:a0:97:1a:86:5d:3e:19:76:7c:
e9:02:73:69:e4:29:7e:54:6a:b0:9f:53:1a:3a:65:
6e:48:98:01:63:97:35:ab:44:f7:20:9e:e4:b2:b8:
07:64:6e:1c:3f:18:56:54:d8:6d:7c:4c:58:2e:a6:
1e:4c:b8:48:98:46:3b:0f:8c:97:13:8c:42:b1:57:
aa:18:d0:96:0e:00:fe:6c:da:1e:c3:a6:74:06:01:
d7:6f:df:3f:1a:23:45:a6:35:13:9f:09:d4:3e:d2:
7a:3c:5a:04:78:c4:7f:ef:52:09:54:4d:c7:33:2d:
65:a5:07:c8:e8:48:4c:5c:1e:b5:f9:85:e3:3e:2c:
14:cd:dc:d4:67:20:32:d6:58:16:96:5b:8c:9a:a5:
79:6d:4e:a9:21:89:43:03:39:57:26:59:e6:9a:b7:
85:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F1:DE:C1:A9:1A:84:48:A4:8D:71:27:56:FA:BD:63:59:75:9E:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1a0f2c42-e00d-3258-9b80-978969589fc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.45.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:24:db:f8:c1:9b:56:b6:e7:59:e8:27:83:86:ab:21:5a:85:
f8:fc:cb:f2:0d:61:0d:42:2d:ee:21:f7:ae:fe:7a:15:97:c1:
69:77:a7:2f:6f:0c:ad:79:30:96:f6:d8:e5:72:3b:0f:87:aa:
3c:01:86:87:38:77:60:69:b1:e6:a7:6a:c0:44:84:73:72:3a:
fc:4e:91:ee:b5:ed:6c:b2:b0:0b:44:4c:68:7d:10:6c:9d:55:
09:e3:24:05:98:60:e6:94:62:40:48:a3:e5:ab:9b:a7:a4:53:
60:b5:37:ce:68:97:26:f5:29:b5:d8:b5:c3:80:30:65:a2:72:
e0:f1:f5:9e:4e:fc:e0:83:53:16:f4:b1:f0:4d:de:eb:2b:0b:
f3:2b:a9:db:9b:d9:af:40:c3:ff:dc:84:30:3c:05:23:72:13:
26:fb:09:6c:0c:d4:e3:03:b4:da:b6:5a:22:70:cc:fb:0f:cb:
e0:99:8d:57:79:43:43:e4:46:25:d2:88:2a:05:73:5d:a2:46:
e3:e3:88:8f:5e:33:27:c2:9a:fe:60:c3:1f:07:ab:b8:5b:e3:
e8:9c:d8:01:24:2c:07:6b:93:16:26:a1:23:bd:6e:2b:c9:35:
a3:01:82:f5:1c:7b:67:65:9a:7c:33:d4:a0:1a:0e:4d:c9:24:
76:be:f8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:18 2025 by rpki-client