Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/30bf074c-a80a-3d77-8446-f4aeffec0ae1.roa
File: 30bf074c-a80a-3d77-8446-f4aeffec0ae1.roa (raw, json)
Hash identifier: QK25LKg7JjXGC3aa4rdwozm3jpdF/d7EjuQU9hNewYE=
Subject key identifier: 2F:EB:15:FB:C9:A3:50:2B:30:A0:5D:A2:87:24:90:13:DC:9E:C2:1D
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF481813A9062CEC37B2540
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/30bf074c-a80a-3d77-8446-f4aeffec0ae1.roa
Signing time: Fri 08 Nov 2024 15:04:56 +0000
ROA not before: Fri 08 Nov 2024 15:04:56 +0000
ROA not after: Thu 06 Feb 2025 15:04:56 +0000
asID: 81
IP address blocks: 152.54.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:81:81:3a:90:62:ce:c3:7b:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:56 2024 GMT
Not After : Feb 6 15:04:56 2025 GMT
Subject: CN=47f8e0ba-3c53-48e9-93b5-152964562153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:cc:ba:75:52:4b:ed:6a:b5:42:74:d6:df:
a3:6f:3c:ac:44:eb:28:04:bb:42:64:26:e8:fb:ff:
9e:5c:2a:ef:26:73:b5:95:d7:03:4a:af:ab:0b:de:
70:03:62:d6:c9:51:47:0c:32:96:6a:f5:87:3e:08:
86:dc:49:44:11:93:d8:43:de:0a:f6:bf:b9:1f:24:
f6:85:92:fd:d3:34:96:71:7f:c5:58:7d:30:ec:07:
00:8c:c8:60:35:93:f0:68:25:38:45:1f:ea:3d:41:
23:b2:9e:7b:d5:20:d6:22:e7:ae:7c:78:40:39:78:
48:be:6a:b8:40:a1:0e:8e:7e:9a:ac:e8:09:f2:97:
bc:fd:c7:dd:f1:27:2c:21:97:fc:7e:09:63:e5:b2:
e4:e5:44:45:dd:f0:20:39:09:06:15:02:2c:fd:f5:
a0:91:c1:31:a5:45:91:b5:9e:0c:eb:05:bf:70:51:
d4:38:cb:9c:5c:23:18:78:b4:3f:0f:fb:35:64:c4:
29:f9:14:d4:b6:27:e6:5f:79:a3:99:2c:39:47:44:
b8:a6:e7:bf:53:0e:cd:54:f3:96:c9:25:bd:24:45:
42:27:07:33:d9:97:c7:19:c9:33:05:e9:05:2f:e2:
5b:1f:eb:ba:9d:56:14:86:95:9f:42:ee:27:cd:4f:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EB:15:FB:C9:A3:50:2B:30:A0:5D:A2:87:24:90:13:DC:9E:C2:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/30bf074c-a80a-3d77-8446-f4aeffec0ae1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.54.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:71:ad:38:8f:12:c8:40:b3:56:7b:31:94:97:ee:3c:76:32:
f9:1b:2a:93:ea:76:8b:0c:cc:7f:68:7b:26:64:05:af:0e:72:
d3:19:79:f5:de:07:40:c9:65:64:25:ad:84:1d:92:e6:e9:a6:
83:a4:19:f1:43:35:37:02:1c:1e:fb:a5:18:18:dc:a8:c0:29:
25:e1:57:a5:21:a3:92:99:b0:8d:a9:ae:b6:c7:fc:fd:e6:b2:
6f:6c:d0:8c:f8:4f:b2:d7:3e:0e:4c:ee:a7:3e:d7:d1:2c:32:
e3:5f:76:04:fa:58:62:1b:2c:8e:0e:e2:67:b7:8e:66:92:87:
e4:84:2c:97:d2:93:c9:77:2d:ef:c5:41:e2:77:29:77:ee:09:
b3:62:9b:8f:7d:c8:58:78:fe:16:89:2d:7b:4f:7e:1b:13:16:
36:7d:01:6d:6d:41:5f:30:2a:c9:3e:b0:2e:66:25:b9:df:6e:
af:1a:e5:41:85:7f:21:a7:51:49:b3:9a:94:76:9b:d7:b6:52:
4f:60:58:af:17:25:a4:a0:db:ec:89:29:83:44:94:69:d3:89:
34:e4:2b:95:64:8a:2f:74:8d:62:c1:72:d0:56:39:f0:46:c4:
88:a8:26:54:3a:fc:b6:44:fd:8a:a6:0d:28:59:e1:db:2f:6f:
07:1b:c6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:28:13 2025 by rpki-client