Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/377ef10d-17d3-32b8-a0e1-eef5d1ba548c.roa
File: 377ef10d-17d3-32b8-a0e1-eef5d1ba548c.roa (raw, json)
Hash identifier: ugfaBA5VoyMxRuf8ZR40tyd9AS/Ru0d3KLhV45LLiX4=
Subject key identifier: AA:2A:0B:14:6D:1E:5D:14:A4:E7:22:EA:8B:4A:EA:90:65:F3:4B:54
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABB7DDB48C79A11391AC00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/377ef10d-17d3-32b8-a0e1-eef5d1ba548c.roa
Signing time: Wed 16 Oct 2024 14:26:32 +0000
ROA not before: Wed 16 Oct 2024 14:26:32 +0000
ROA not after: Tue 14 Jan 2025 15:26:32 +0000
asID: 81
IP address blocks: 152.16.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:b7:dd:b4:8c:79:a1:13:91:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:32 2024 GMT
Not After : Jan 14 15:26:32 2025 GMT
Subject: CN=5693ea0f-44f0-4801-b961-7abcf9645f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:9b:d4:6b:04:57:41:f9:e5:c3:f4:64:c7:
19:7b:56:e9:7c:04:d4:2e:23:f5:ba:5f:10:19:a0:
f9:fb:17:23:c2:16:d3:bf:97:bf:92:71:44:c6:d1:
61:68:51:2b:8a:50:25:c3:4a:21:35:79:88:d8:6b:
79:cf:5a:8a:66:a9:3b:87:cb:f4:64:f1:a7:65:1a:
1a:bf:76:e9:c8:ae:04:35:c9:ca:51:e1:19:ca:84:
a2:ba:48:35:7f:52:bc:fd:ce:19:4e:f4:4d:f8:a1:
d5:9e:1a:93:14:b9:f6:0a:c2:6d:83:32:66:54:5f:
7e:2b:12:24:d5:86:bf:32:f1:ff:97:ad:5b:43:2b:
3d:16:c3:eb:8e:1b:d1:a3:0f:22:8d:b5:b7:16:0f:
e6:eb:0d:29:89:71:f1:ab:8e:34:5d:bb:02:56:1c:
67:18:b9:80:dc:42:01:8d:d5:b0:e8:52:95:cd:27:
06:a2:38:2b:3f:3e:ef:ec:df:a1:8f:b7:53:78:4e:
9c:fe:a4:64:8a:8d:50:9a:59:44:9e:aa:dc:32:48:
a8:ff:6b:4f:12:9c:9f:51:35:a6:ef:a7:37:59:6f:
bb:5e:17:a3:b7:80:28:51:19:a5:cd:57:fa:26:6e:
88:6b:2b:42:75:08:39:9c:3c:a6:95:3a:ee:de:05:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2A:0B:14:6D:1E:5D:14:A4:E7:22:EA:8B:4A:EA:90:65:F3:4B:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/377ef10d-17d3-32b8-a0e1-eef5d1ba548c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:ab:1c:3c:88:e7:6b:cb:13:5c:2f:3b:74:46:c5:58:2b:12:
24:3a:46:71:91:fa:dd:4a:21:ff:e3:c5:83:6a:98:bb:f1:16:
c2:82:6e:24:fa:fc:99:d2:f3:22:db:4a:03:e1:5f:da:1a:5d:
32:1d:fe:33:22:76:85:ed:5c:2f:90:50:ae:b9:ef:80:f5:19:
e9:7c:a1:72:bc:00:45:9f:06:f2:a9:48:52:47:74:cb:a4:7a:
27:2c:eb:43:24:58:96:c3:04:67:da:2c:2d:eb:ce:a5:91:37:
7b:b3:a9:a0:21:ed:ea:f2:b9:35:d3:7c:70:a9:fc:be:f2:9d:
2f:2c:25:86:8a:9f:72:50:c4:36:cd:4e:45:d6:21:40:6a:aa:
e0:9a:72:c2:48:63:32:37:59:33:67:06:47:ab:55:9a:54:ef:
3e:c5:af:fa:7d:ca:1f:77:86:fa:5b:a3:6a:77:04:65:28:df:
7a:b0:c2:73:9c:e0:ab:89:d9:b4:c7:69:d7:01:1f:9f:7e:3d:
df:3a:f9:dc:ff:7f:2e:58:0b:5a:5f:05:52:89:e5:21:71:db:
ae:c0:5b:20:63:2b:9e:09:cc:2b:32:08:b9:40:2a:8f:48:ee:
c0:80:2c:c2:bb:98:0c:b4:63:1f:ef:bf:e6:8c:c0:50:d1:0e:
5c:d0:eb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:34 2025 by rpki-client