Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/236ae2dc-1e67-3b18-951d-3db4742f7fdf.roa
File: 236ae2dc-1e67-3b18-951d-3db4742f7fdf.roa (raw, json)
Hash identifier: mvF8mS+maceYQVJer/vHjN9QRs85CVM6wAvZKjWnN1s=
Subject key identifier: A9:E3:12:5E:03:AA:31:77:A0:70:44:4F:CE:86:0A:5E:44:F3:00:46
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF484BD9491D466B5727280
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/236ae2dc-1e67-3b18-951d-3db4742f7fdf.roa
Signing time: Fri 08 Nov 2024 15:04:57 +0000
ROA not before: Fri 08 Nov 2024 15:04:57 +0000
ROA not after: Thu 06 Feb 2025 15:04:57 +0000
asID: 81
IP address blocks: 152.22.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:84:bd:94:91:d4:66:b5:72:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:57 2024 GMT
Not After : Feb 6 15:04:57 2025 GMT
Subject: CN=5e16a16a-4f6e-4150-b355-00c9db7db0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:40:a8:ba:ab:f9:f8:cc:7f:0f:38:0e:58:
6f:ba:b8:c7:a4:6f:de:3d:23:4a:57:1c:90:44:48:
39:fc:f9:7e:1a:38:34:1e:f8:d0:bc:e9:f2:8c:b5:
57:98:38:85:be:a8:04:b7:37:92:c0:ac:dc:66:fc:
e9:8a:a3:7e:96:c9:09:7c:1e:4b:af:8d:0d:f4:cf:
24:fa:8c:14:79:30:b0:93:40:8e:ba:c3:cf:ee:44:
c3:2e:11:5e:85:6a:b7:b8:f1:43:45:c0:3d:16:d0:
e6:5b:5a:1e:30:5a:30:20:b8:f4:64:36:3f:2a:15:
f8:fb:52:84:1f:69:36:8e:39:4b:32:6d:ab:3d:9d:
70:bb:7b:af:bd:4b:7e:ee:48:f5:ce:a5:33:d0:7c:
35:c6:b9:c7:96:d0:da:fc:c5:af:6d:84:09:f7:a0:
13:ea:18:36:c3:51:d4:59:82:9c:a1:4e:f9:cb:02:
d9:60:ef:2a:00:9c:6f:50:34:ff:30:1d:b5:74:4d:
79:d3:88:ca:e4:e9:7d:ff:36:1f:72:0a:94:6c:01:
ee:da:fe:16:72:6a:c2:17:d0:89:37:47:18:da:ab:
1b:e3:3c:be:04:87:37:2d:8c:b6:a9:b4:9c:53:80:
01:a6:7e:94:ad:47:27:f4:93:33:7d:1a:11:4b:45:
c5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E3:12:5E:03:AA:31:77:A0:70:44:4F:CE:86:0A:5E:44:F3:00:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/236ae2dc-1e67-3b18-951d-3db4742f7fdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:39:40:9d:b9:12:06:2c:0e:54:68:76:ae:76:72:b5:45:6c:
d4:a0:bb:fd:33:2e:8c:2d:b8:da:14:b6:23:2d:05:44:ac:65:
69:01:cf:53:00:e6:ab:21:5d:ba:15:a6:ae:ec:9b:b1:a9:db:
ad:a0:a7:4e:bd:53:05:c0:0b:70:a7:6e:3d:02:7a:89:e8:88:
e1:48:2d:ec:39:a6:a5:0d:3e:3e:95:b8:87:03:dc:96:ed:3d:
1d:d1:3d:4d:12:c4:62:f0:d3:c7:1e:bc:94:9f:2e:02:d1:96:
98:c8:9b:ed:08:37:4a:54:60:b0:67:a9:88:17:ee:c8:ca:ef:
c8:c9:af:67:fd:94:f6:fc:72:b3:89:cf:ec:ad:48:43:17:97:
d6:12:d4:4b:1f:84:da:97:f5:4b:b5:46:37:d8:86:4a:75:33:
d7:9e:7d:17:a4:51:8a:9d:5d:97:5a:43:fd:22:98:c7:e4:22:
fc:5e:d0:e9:ef:8e:26:b4:24:73:fd:26:04:e5:e0:55:96:f0:
44:68:8c:0c:d7:9f:17:45:14:ac:33:c4:5a:c1:d3:36:7e:9f:
1e:a2:b1:fd:44:6b:5e:77:c2:f5:de:c7:50:d9:81:39:a5:ce:
12:3a:a3:a0:1b:32:ba:cb:6a:c8:fa:4f:75:fb:b6:9a:a5:ad:
f7:9d:87:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP9IS9lJHUZrVycoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDQ1N1oXDTI1MDIwNjE1MDQ1N1owLzEtMCsGA1UEAxMk
NWUxNmExNmEtNGY2ZS00MTUwLWIzNTUtMDBjOWRiN2RiMGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZBAqLqr+fjMfw84DlhvurjHpG/ePSNKVxyQ
REg5/Pl+Gjg0HvjQvOnyjLVXmDiFvqgEtzeSwKzcZvzpiqN+lskJfB5Lr40N9M8k
+owUeTCwk0COusPP7kTDLhFehWq3uPFDRcA9FtDmW1oeMFowILj0ZDY/KhX4+1KE
H2k2jjlLMm2rPZ1wu3uvvUt+7kj1zqUz0Hw1xrnHltDa/MWvbYQJ96AT6hg2w1HU
WYKcoU75ywLZYO8qAJxvUDT/MB21dE1504jK5Ol9/zYfcgqUbAHu2v4WcmrCF9CJ
N0cY2qsb4zy+BIc3LYy2qbScU4ABpn6UrUcn9JMzfRoRS0XFZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKnjEl4DqjF3oHBET86GCl5E8wBGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMjM2YWUyZGMtMWU2Ny0z
YjE4LTk1MWQtM2RiNDc0MmY3ZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmBZQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGY5QJ25EgYsDlRodq52crVFbNSgu/0zLowtuNoUtiMtBUSsZWkBz1MA
5qshXboVpq7sm7Gp262gp069UwXAC3Cnbj0CeonoiOFILew5pqUNPj6VuIcD3Jbt
PR3RPU0SxGLw08cevJSfLgLRlpjIm+0IN0pUYLBnqYgX7sjK78jJr2f9lPb8crOJ
z+ytSEMXl9YS1EsfhNqX9Uu1RjfYhkp1M9eefRekUYqdXZdaQ/0imMfkIvxe0Onv
jia0JHP9JgTl4FWW8ERojAzXnxdFFKwzxFrB0zZ+nx6isf1Ea153wvXex1DZgTml
zhI6o6AbMrrLasj6T3X7tpqlrfedh3g=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:41:16 2025 by rpki-client