Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2e4a3895-dd64-3ba1-9ea6-a95a53adb6a3.roa
File: 2e4a3895-dd64-3ba1-9ea6-a95a53adb6a3.roa (raw, json)
Hash identifier: LCcR4oykxmDC5lxZX/RYyxIaGAUIPi8ppIx5GXwqkqM=
Subject key identifier: 7D:F8:9C:08:DB:81:7F:33:B4:AB:CE:B9:B5:04:62:20:4F:21:FA:54
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBCDF3AA619569E1F7280
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2e4a3895-dd64-3ba1-9ea6-a95a53adb6a3.roa
Signing time: Wed 16 Oct 2024 14:26:34 +0000
ROA not before: Wed 16 Oct 2024 14:26:34 +0000
ROA not after: Tue 14 Jan 2025 15:26:34 +0000
asID: 81
IP address blocks: 152.45.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:bc:df:3a:a6:19:56:9e:1f:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:34 2024 GMT
Not After : Jan 14 15:26:34 2025 GMT
Subject: CN=5e77f2c5-737a-4335-8ea2-127eb6f4b03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7c:26:06:6c:82:89:93:4e:06:3a:60:5f:fe:
17:87:54:e7:02:ed:6b:ba:e5:3d:cc:2d:b0:fa:21:
97:ed:dd:5a:c8:08:a6:b0:0f:7d:d9:80:ec:fb:b5:
31:b5:df:47:05:06:35:d3:2e:ac:4a:10:da:f4:01:
16:2d:50:77:11:24:30:d1:f2:5b:1b:b4:0c:0f:62:
dd:7a:03:42:31:a3:b4:f0:eb:b9:d4:b2:bb:47:2e:
17:eb:a5:fc:c8:c3:63:e1:e6:ee:fe:9b:ff:0d:6f:
62:24:53:26:a2:df:cd:52:7d:23:b4:93:d0:81:9c:
10:a8:61:b0:99:d0:82:eb:57:8a:87:ec:87:81:66:
49:be:84:24:92:b4:ec:7f:68:43:d0:21:e2:4f:01:
a1:0e:9a:c8:55:d1:9a:47:79:52:33:11:87:ed:7e:
87:17:db:93:a1:d6:0e:6d:1f:d6:a4:3b:09:83:5b:
40:c8:b7:8e:1b:d2:b0:b8:c9:6a:be:d4:e2:f6:85:
87:03:5f:26:be:12:2f:63:22:ba:93:e2:b7:3e:26:
32:8b:2c:5b:85:4e:d0:fb:be:23:37:c2:37:e1:36:
05:3e:1e:49:3d:e6:c1:d5:1c:b9:1c:c4:e2:ec:4e:
14:c2:c4:1e:1f:97:a0:38:1c:e2:4b:2d:1a:76:05:
5d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F8:9C:08:DB:81:7F:33:B4:AB:CE:B9:B5:04:62:20:4F:21:FA:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2e4a3895-dd64-3ba1-9ea6-a95a53adb6a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.45.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:fb:24:de:5d:99:ce:6d:c7:cf:f9:f6:2c:d5:01:de:86:2b:
8c:19:90:e0:de:be:4b:d3:20:30:4a:c6:8e:b8:93:a3:bf:9f:
b0:f5:16:ff:7e:82:ec:57:ba:e3:a0:c4:12:99:94:c4:e8:69:
10:11:19:e2:68:ec:2e:44:ad:d3:92:81:69:ef:ee:a9:d4:d4:
59:f2:69:e1:ab:de:07:13:eb:58:e3:46:0d:2d:9e:20:62:6e:
e6:86:51:ec:2f:85:f7:35:ab:74:ae:97:a9:2c:73:71:32:a0:
ad:6f:d2:68:b2:78:e6:b3:3e:dd:b2:42:ed:bb:6a:be:bc:aa:
2b:8c:22:69:8a:f8:88:16:73:b7:9e:5a:a9:f9:93:20:a2:cf:
72:22:2a:10:69:a6:d7:62:3e:5a:a3:41:21:f9:d4:8d:f1:e1:
cc:28:53:02:9c:25:7c:29:c4:f4:20:ce:29:0a:a7:31:4e:22:
1c:d3:5e:c1:8a:2d:c6:ee:76:35:9c:01:4a:4b:a6:9d:f7:27:
0b:c3:34:fe:0b:69:f0:dd:29:1f:ff:72:d7:26:0f:96:8f:b9:
78:90:62:03:4f:57:f4:6f:6c:5c:2e:92:90:d2:d2:88:a6:db:
ac:33:e6:18:43:06:64:b4:15:46:fb:9f:3d:be:d3:7c:42:27:
bd:d1:02:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:04 2025 by rpki-client