Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1db233a1-b432-3232-9679-bbd28ac37471.roa
File: 1db233a1-b432-3232-9679-bbd28ac37471.roa (raw, json)
Hash identifier: K7qB5CG2rbgdGRxz2ZEVouojw8QYdFt3Rr38UagjeuM=
Subject key identifier: 70:CE:17:CB:AE:DE:B4:C6:18:BE:B6:C1:B9:0A:63:8A:BE:EB:EC:D1
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABB88422CA033BF76EAD00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1db233a1-b432-3232-9679-bbd28ac37471.roa
Signing time: Wed 16 Oct 2024 14:26:32 +0000
ROA not before: Wed 16 Oct 2024 14:26:32 +0000
ROA not after: Tue 14 Jan 2025 15:26:32 +0000
asID: 81
IP address blocks: 152.47.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:b8:84:22:ca:03:3b:f7:6e:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:32 2024 GMT
Not After : Jan 14 15:26:32 2025 GMT
Subject: CN=2dba9ef8-3cc5-45fb-9f4d-b91660e32f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:65:26:f4:3a:94:1e:7c:35:38:e0:08:70:
04:be:10:78:e5:49:bf:2b:62:b3:69:c7:2e:b1:fb:
5c:64:ca:78:04:c3:4e:97:e3:c3:08:26:a1:4c:ac:
dc:dc:18:fe:f9:9f:91:6e:c3:93:1e:33:6a:b5:f6:
c4:dc:1f:48:27:3e:9f:1a:24:a0:7a:60:98:d4:f5:
1e:46:bb:f7:26:22:9e:94:5c:2d:1f:0c:c7:0c:32:
dc:e5:37:08:b1:db:7c:c3:67:6d:5f:94:a5:79:da:
08:a7:45:f6:80:bd:16:c0:0f:31:39:e8:da:94:68:
86:eb:e1:71:40:95:4a:1b:90:40:a7:c3:4e:df:75:
f9:e4:21:f1:95:ea:19:35:4a:4b:f8:9d:48:36:0a:
01:ce:9b:d4:a6:6d:dd:8e:25:d0:ef:b2:63:7c:f6:
cf:37:47:32:8f:f3:f4:cd:81:e1:d2:36:25:92:69:
17:33:25:3c:c2:94:64:85:bf:ce:6b:7a:82:cf:25:
37:bf:bf:7a:9c:b3:58:c2:55:e3:7d:24:83:c2:7d:
69:1e:90:7d:46:b7:d2:51:42:05:40:07:b2:87:f6:
bb:42:12:b8:fe:48:46:0d:d3:09:d3:c6:56:54:f8:
32:35:80:86:4c:bf:f3:bb:39:05:b4:4b:e1:c5:dd:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CE:17:CB:AE:DE:B4:C6:18:BE:B6:C1:B9:0A:63:8A:BE:EB:EC:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1db233a1-b432-3232-9679-bbd28ac37471.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:61:c5:a8:9a:5e:ad:e1:a5:84:f8:25:2c:fe:1b:34:73:96:
44:a1:bf:56:c6:fd:73:3b:7d:3d:b1:84:7a:13:bc:1c:3d:0d:
a3:10:0b:f8:1d:7b:b3:18:66:b2:e5:02:d5:ee:9b:cc:b8:5d:
9f:df:35:fe:4f:73:72:b0:e6:0b:cb:c0:fb:b3:d0:b1:b9:01:
41:04:da:4d:9b:cf:69:8d:b2:55:f2:5d:d0:bc:b9:8a:fc:ce:
d0:08:f0:24:2d:09:ff:ee:33:b1:6d:c1:69:22:c3:aa:1a:c2:
c9:ab:da:c7:d3:57:d1:1a:f7:6e:56:bb:8c:e7:fc:28:12:ed:
1b:8e:2d:b5:92:0f:75:d6:ed:de:c7:13:84:5f:a2:6b:8d:51:
e3:e4:e2:a6:e6:ea:a6:47:ad:32:b4:0b:42:d2:cc:24:4c:b1:
ee:5b:7a:38:55:77:62:9f:97:a9:b5:20:d3:e6:fe:0e:4b:9c:
58:48:28:3d:4c:06:c3:03:6f:3f:bb:dd:5b:0c:9f:ee:79:d1:
bc:22:23:48:60:2c:6f:7d:58:a7:45:c6:82:cf:b8:bc:39:e2:
3c:23:c4:40:cb:5d:a1:9d:a3:c4:8b:ba:e5:e4:74:e6:ce:5d:
f1:96:7c:61:ef:19:cd:df:77:e6:1d:c4:3d:82:ac:c3:fc:a9:
b2:1c:12:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:42 2025 by rpki-client