Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/22b50d96-2eee-3fa2-bddf-3f59c5c63342.roa
File: 22b50d96-2eee-3fa2-bddf-3f59c5c63342.roa (raw, json)
Hash identifier: BxFyXjjiGCgIks4KzVurZr+4RSYVpwCGgxcBtbs5YZA=
Subject key identifier: 0E:A5:D5:07:4E:F8:77:3D:4B:45:55:0C:CF:03:A3:B7:B6:F6:D0:E7
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBF72FDEC16D528428080
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/22b50d96-2eee-3fa2-bddf-3f59c5c63342.roa
Signing time: Wed 16 Oct 2024 14:26:36 +0000
ROA not before: Wed 16 Oct 2024 14:26:36 +0000
ROA not after: Tue 14 Jan 2025 15:26:36 +0000
asID: 81
IP address blocks: 152.46.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:bf:72:fd:ec:16:d5:28:42:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:36 2024 GMT
Not After : Jan 14 15:26:36 2025 GMT
Subject: CN=09ad6c98-ea8f-4fb0-9589-55253fce593f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5a:3f:73:f0:1e:d4:92:7c:38:d7:91:5b:b6:
72:cb:8f:d2:f3:2b:d8:9c:44:ac:91:c2:35:9c:8f:
07:96:be:93:fb:96:1d:83:ac:53:19:9c:07:9b:ca:
49:93:82:f0:c8:58:14:47:35:41:eb:f9:3c:3c:11:
94:57:59:8e:de:ab:e0:78:e0:9b:78:d3:9c:cf:2d:
f4:be:c5:e7:d8:da:8d:ea:f4:c3:24:c9:76:41:0f:
2e:4f:84:44:ee:6d:50:4b:2e:0b:0f:4f:8d:b8:d8:
f5:d5:01:b6:44:06:7f:2c:ee:8e:d4:15:b5:66:bf:
20:87:8b:02:b2:50:a2:25:91:8a:e5:4e:07:59:fe:
72:99:81:84:11:dc:98:2a:54:4c:a8:f8:45:80:d5:
ff:b7:e2:df:d3:ad:c8:05:e7:ef:41:23:ca:54:a6:
f5:2c:8a:71:ff:b1:95:f6:62:e9:ac:a0:1f:99:bf:
fb:a7:68:cd:e8:b9:a2:a4:35:da:82:f9:1d:c4:6b:
82:55:af:63:8c:e9:17:29:0e:d9:73:51:c9:85:5a:
9d:2e:fc:d5:0c:d7:1e:69:20:bf:ef:5f:80:ee:87:
e7:69:a0:8d:e7:40:5f:cf:0f:f9:9c:c5:13:f6:9f:
3b:9d:97:05:5b:07:70:7e:98:c1:50:07:00:da:c6:
a2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A5:D5:07:4E:F8:77:3D:4B:45:55:0C:CF:03:A3:B7:B6:F6:D0:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/22b50d96-2eee-3fa2-bddf-3f59c5c63342.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:44:9c:03:ec:3e:0e:84:ab:d8:42:8a:ec:c0:fc:69:b4:39:
22:35:ff:51:2e:ab:1d:4a:ee:32:2e:78:34:b6:7b:3b:0a:69:
eb:8d:35:1b:38:f2:4f:78:30:f0:21:93:3c:6d:a8:8a:ad:76:
db:c1:c2:3a:c8:d5:fe:e2:29:3e:6b:fb:76:4c:12:cc:77:c3:
73:88:19:59:ff:11:f6:aa:78:79:0c:e4:cb:a2:18:6f:df:4b:
a7:06:89:a6:a4:8f:8d:ee:c8:3b:72:da:cb:16:53:b4:14:b1:
69:9d:7a:84:d4:dc:7e:18:60:f0:6f:2c:30:61:66:9b:e9:ea:
70:9a:35:e9:d4:92:c0:d5:e1:00:ca:d9:e0:41:9b:87:1a:6b:
2a:b1:4c:07:b0:3d:be:9c:a3:38:0f:f8:5a:21:2b:61:cc:a4:
0c:3c:1e:ce:99:d0:0e:ad:1e:37:3f:64:41:62:4f:10:77:df:
10:b4:26:90:f1:f4:b3:b5:78:44:40:c4:b7:45:7e:30:a0:08:
e7:93:1d:22:81:c9:af:84:e5:05:63:e6:6a:40:7f:9a:7d:0e:
6b:0d:c2:69:be:68:0d:4b:3e:50:c7:c3:83:32:61:fd:51:e0:
7e:8c:20:0f:db:3b:d7:c0:60:67:48:14:47:14:74:10:b8:d0:
60:ae:93:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:07 2025 by rpki-client