Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2f984819-c90b-3ef8-9584-1d91c0bb9a2d.roa
File: 2f984819-c90b-3ef8-9584-1d91c0bb9a2d.roa (raw, json)
Hash identifier: QEX6XQaeBLfxCxOedtWzi+ntKqPoOD7lbnwXeYYfYMs=
Subject key identifier: 1D:96:A3:E1:45:02:D4:D9:2D:DA:87:A7:A0:4F:A7:3C:90:D1:3E:25
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBE472D812E3F230771C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2f984819-c90b-3ef8-9584-1d91c0bb9a2d.roa
Signing time: Wed 16 Oct 2024 14:26:35 +0000
ROA not before: Wed 16 Oct 2024 14:26:35 +0000
ROA not after: Tue 14 Jan 2025 15:26:35 +0000
asID: 81
IP address blocks: 152.46.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:be:47:2d:81:2e:3f:23:07:71:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:35 2024 GMT
Not After : Jan 14 15:26:35 2025 GMT
Subject: CN=d30c8271-57c6-43ba-8353-edea8ec98e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ff:51:d9:35:7e:c2:5e:78:b6:64:06:d2:f4:
5f:09:48:ee:33:87:3f:a9:4b:ac:16:36:82:ee:e5:
9e:9f:db:04:51:d8:80:50:ec:cd:f5:3c:fb:92:49:
6c:51:1f:e5:e8:96:b7:df:7c:a4:c9:b8:a6:d7:40:
16:89:5e:3c:d4:f5:97:83:7d:b9:89:2f:65:6c:48:
eb:37:03:d4:df:ac:10:35:4c:6c:39:8c:64:5f:a9:
f2:0d:3b:06:00:96:f3:cd:e3:e0:f2:8c:c6:df:cc:
8a:76:74:98:a2:65:9a:d1:98:60:5b:e5:e9:d0:b5:
f1:dd:b7:00:5d:59:fc:63:46:7d:4c:ad:f7:35:3a:
c6:22:28:87:da:73:6b:2c:17:29:70:51:98:4f:50:
f8:3e:57:cb:7c:c3:c9:fe:eb:70:72:f8:bf:de:63:
c2:38:f6:0e:3b:f7:e3:34:61:b2:96:04:0c:5d:10:
81:48:94:b6:84:ff:55:92:f1:aa:c6:c9:6b:9c:72:
7d:4d:d5:e2:61:1c:86:be:84:dc:a4:5a:86:95:80:
e3:4e:f0:19:65:bb:ea:c8:c6:82:29:b1:5e:ab:54:
c1:6b:23:c7:99:15:2e:fe:92:2c:30:73:2b:13:c1:
95:c4:2d:8d:4e:ea:6c:15:c1:f3:48:d0:33:f6:f8:
0b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:96:A3:E1:45:02:D4:D9:2D:DA:87:A7:A0:4F:A7:3C:90:D1:3E:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2f984819-c90b-3ef8-9584-1d91c0bb9a2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:8d:40:6a:c0:2a:68:14:76:46:8f:18:61:55:95:ea:14:d8:
90:6d:36:78:ee:bb:52:82:1c:09:6a:d2:1a:bc:6b:a1:f9:3b:
e5:ef:15:c2:6f:ef:ff:4a:de:32:7f:b8:b1:8b:75:85:0c:40:
c1:47:a1:68:fb:08:a5:54:d0:4f:92:75:bc:a5:e1:77:c7:6e:
b9:fb:08:58:7d:bf:07:ec:b7:18:fc:00:b8:c9:80:59:2c:4d:
e8:0b:22:b9:95:46:83:1a:2c:93:41:65:27:41:52:2b:4e:91:
d6:2d:e8:de:f7:40:05:99:78:e8:73:0c:ce:7c:d7:14:08:89:
f6:75:32:f9:b7:3e:be:aa:77:b0:b3:bc:ab:53:09:72:ac:d0:
10:97:50:cc:7c:74:52:63:8a:61:5d:29:dc:b6:af:60:17:0c:
a3:78:db:77:a6:d9:5d:62:16:44:0c:9b:c0:a2:a5:2b:d7:55:
02:d8:9f:fe:b4:0e:72:6b:ec:1d:77:06:56:41:f5:44:a7:09:
99:0d:d8:f6:60:a7:db:2b:80:19:77:47:e2:63:54:2c:73:6e:
09:7b:c5:10:12:c4:46:53:ef:c1:f7:65:40:46:5a:8b:ef:d0:
8b:eb:d6:43:5f:71:c4:04:8a:01:00:e8:6b:4b:8e:51:70:f7:
7c:f5:05:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:30:18 2025 by rpki-client