Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23e032e6-3f6d-3991-81e7-9288eea2ba97.roa
File: 23e032e6-3f6d-3991-81e7-9288eea2ba97.roa (raw, json)
Hash identifier: 3q3WVHvZiWg8uC9GEGUqBb7baD0hQiipUrVa6tG2KZs=
Subject key identifier: 94:4B:6B:6F:AE:14:32:72:44:83:91:CD:2C:0C:AA:1A:CD:65:49:2F
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48682C3C4106534C61F40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23e032e6-3f6d-3991-81e7-9288eea2ba97.roa
Signing time: Fri 08 Nov 2024 15:04:58 +0000
ROA not before: Fri 08 Nov 2024 15:04:58 +0000
ROA not after: Thu 06 Feb 2025 15:04:58 +0000
asID: 81
IP address blocks: 152.26.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:86:82:c3:c4:10:65:34:c6:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:58 2024 GMT
Not After : Feb 6 15:04:58 2025 GMT
Subject: CN=730d9549-4ced-46d2-aa4b-8002bc5c9f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:93:e9:45:35:91:89:2e:71:2c:b0:94:bd:
2c:0f:21:a9:dd:de:ff:ef:dd:8d:5b:0b:b1:ce:3b:
20:5c:a3:47:8f:41:af:1e:20:a2:1b:74:c5:15:6f:
52:4a:7c:53:e8:aa:d9:ea:74:ec:79:51:31:85:0d:
65:c7:ae:1f:47:a7:cb:a0:5c:71:67:b6:69:f3:0b:
0b:66:6b:c4:9b:51:80:3b:45:d5:bc:79:76:11:ba:
6e:5f:f8:c8:37:bf:87:17:16:a0:89:45:6c:b5:68:
f6:e1:d6:79:98:e0:7c:d7:23:4b:77:99:f5:b8:00:
f4:78:30:6e:a9:1e:a2:ed:e7:0a:92:42:8c:33:6e:
25:fc:96:ee:e4:7b:ca:38:b3:ca:57:f9:dd:c2:23:
e7:61:98:e3:2e:e7:63:94:81:81:73:0f:e4:bb:d8:
b3:41:49:ad:44:6d:7e:cf:7b:be:29:ed:cf:5b:ae:
32:3e:17:cb:76:63:90:0b:a7:b5:3f:a2:68:f0:17:
98:68:7f:fe:b1:4d:16:3c:38:32:7c:d1:2f:9e:63:
e1:f2:8e:37:01:62:ac:54:60:ec:db:68:11:47:ff:
ae:c9:da:91:ef:df:1d:62:6a:1a:77:ad:45:2e:8d:
2b:02:4e:57:4f:ca:ca:52:df:b6:f2:67:42:d1:c8:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4B:6B:6F:AE:14:32:72:44:83:91:CD:2C:0C:AA:1A:CD:65:49:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23e032e6-3f6d-3991-81e7-9288eea2ba97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.26.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:94:f9:ab:dc:59:b5:c0:e4:90:d8:4a:6c:b5:15:93:4d:d4:
1e:c9:e8:c3:8d:9f:29:75:fd:de:a1:e5:92:92:80:b9:9b:7b:
14:28:9b:f3:d1:3f:48:be:f7:d4:ac:89:c6:57:d4:f4:3c:2b:
40:09:9d:70:98:27:19:13:3c:f3:ad:c0:19:bc:8f:d8:d2:35:
6b:79:de:a5:f8:6b:28:fa:b0:3b:5f:a1:87:0f:67:00:20:dd:
df:7d:f9:de:d3:5a:18:a6:da:ed:0b:00:fd:ce:b2:0b:4a:6a:
23:f2:9d:d7:3e:73:27:ba:86:1a:f5:ac:28:fc:d0:b4:bc:f8:
a1:96:ad:f5:e5:63:f3:8a:3c:dc:e1:7d:d6:87:3a:16:85:5b:
76:23:e6:e7:6c:ae:46:60:7b:a8:bb:07:2d:70:52:c6:d8:be:
dd:35:3e:38:b7:f6:40:7b:f7:d6:8f:51:a0:d6:89:19:4c:e1:
85:db:ae:af:26:08:41:d1:9b:3d:c4:6e:4f:9a:c2:b3:01:08:
82:10:2d:18:8d:21:fa:9a:a7:15:61:e8:7e:b7:51:f4:bb:7b:
24:75:ac:4f:87:83:c4:5d:69:46:2f:72:79:f4:04:7e:48:48:
e8:ca:22:79:78:cc:7c:db:01:09:2e:d1:91:5c:0d:91:29:77:
33:69:ac:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP9IaCw8QQZTTGH0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDQ1OFoXDTI1MDIwNjE1MDQ1OFowLzEtMCsGA1UEAxMk
NzMwZDk1NDktNGNlZC00NmQyLWFhNGItODAwMmJjNWM5ZjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA2T6UU1kYkucSywlL0sDyGp3d7/792NWwux
zjsgXKNHj0GvHiCiG3TFFW9SSnxT6KrZ6nTseVExhQ1lx64fR6fLoFxxZ7Zp8wsL
ZmvEm1GAO0XVvHl2EbpuX/jIN7+HFxagiUVstWj24dZ5mOB81yNLd5n1uAD0eDBu
qR6i7ecKkkKMM24l/Jbu5HvKOLPKV/ndwiPnYZjjLudjlIGBcw/ku9izQUmtRG1+
z3u+Ke3PW64yPhfLdmOQC6e1P6Jo8BeYaH/+sU0WPDgyfNEvnmPh8o43AWKsVGDs
22gRR/+uydqR798dYmoad61FLo0rAk5XT8rKUt+28mdC0ciKswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJRLa2+uFDJyRIORzSwMqhrNZUkvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMjNlMDMyZTYtM2Y2ZC0z
OTkxLTgxZTctOTI4OGVlYTJiYTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBrSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEqU+avcWbXA5JDYSmy1FZNN1B7J6MONnyl1/d6h5ZKSgLmbexQom/PR
P0i+99SsicZX1PQ8K0AJnXCYJxkTPPOtwBm8j9jSNWt53qX4ayj6sDtfoYcPZwAg
3d99+d7TWhim2u0LAP3OsgtKaiPyndc+cye6hhr1rCj80LS8+KGWrfXlY/OKPNzh
fdaHOhaFW3Yj5udsrkZge6i7By1wUsbYvt01Pji39kB799aPUaDWiRlM4YXbrq8m
CEHRmz3Ebk+awrMBCIIQLRiNIfqapxVh6H63UfS7eyR1rE+Hg8RdaUYvcnn0BH5I
SOjKInl4zHzbAQku0ZFcDZEpdzNprBE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:20:40 2025 by rpki-client