Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/388bf680-58d3-3744-8f96-f060f4b338d1.roa
File: 388bf680-58d3-3744-8f96-f060f4b338d1.roa (raw, json)
Hash identifier: mIMpMBXwfTSa4RWXhX/EuRFZBM+ZkWFuzlwrP0iYhjY=
Subject key identifier: D6:BD:3D:F3:E2:C5:22:B9:68:3B:0F:30:8C:4F:12:1B:56:E0:2C:C9
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF484D34171898B25AAB940
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/388bf680-58d3-3744-8f96-f060f4b338d1.roa
Signing time: Fri 08 Nov 2024 15:04:57 +0000
ROA not before: Fri 08 Nov 2024 15:04:57 +0000
ROA not after: Thu 06 Feb 2025 15:04:57 +0000
asID: 81
IP address blocks: 152.22.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:84:d3:41:71:89:8b:25:aa:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:57 2024 GMT
Not After : Feb 6 15:04:57 2025 GMT
Subject: CN=7d33d412-2b4f-420d-938c-47acdd5c76c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:14:fb:a3:10:e4:71:d4:21:17:6b:76:a8:e2:
ab:8d:c0:1b:44:f7:3d:00:60:9b:a0:9a:30:7a:ad:
2f:69:61:e6:b5:ec:5c:2f:d7:3c:40:c3:1e:44:dc:
64:a4:c7:1d:c8:f3:40:d5:0c:bf:94:54:57:65:16:
cc:dd:b9:1a:0c:7c:22:14:18:82:ac:2b:5f:ac:a8:
fe:af:e1:c4:88:51:59:56:ad:43:7a:cd:5d:c8:3a:
ff:03:f5:20:8b:c3:82:8a:56:6b:aa:22:78:19:8a:
54:1f:2f:d2:9d:72:91:d8:74:54:09:50:83:7c:dc:
8f:b0:d2:13:ea:dc:54:aa:fc:8c:6d:53:c5:4b:5e:
f0:8b:7f:46:bc:06:fa:ee:cb:19:c3:66:3a:f2:d8:
24:69:b5:09:4a:d9:aa:47:3c:f7:29:e2:b2:c3:37:
dc:1b:a9:0c:30:66:c1:79:e3:24:6e:93:00:df:98:
11:f6:a1:2f:f7:7b:84:72:2b:dc:cc:8b:e9:8b:78:
59:73:00:f6:6b:1e:bb:76:13:a8:a1:3d:29:ab:55:
91:8e:9e:e9:f6:19:e1:dd:5c:d9:92:32:d1:78:63:
61:41:03:d5:f6:3c:71:53:96:4c:ab:e7:4f:7d:18:
1a:dc:2f:ff:ef:a9:60:db:c9:0f:af:45:99:0e:54:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BD:3D:F3:E2:C5:22:B9:68:3B:0F:30:8C:4F:12:1B:56:E0:2C:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/388bf680-58d3-3744-8f96-f060f4b338d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:de:ab:2b:28:63:99:4b:10:6c:45:1f:fb:41:c4:8d:ba:22:
3d:cb:26:93:a1:08:15:d9:f0:df:12:4a:59:11:d1:59:5d:41:
f8:69:ce:b8:ca:9c:ab:f8:91:8e:96:35:36:46:e1:c4:30:d9:
6e:81:31:c9:9e:cb:1c:40:de:0b:ad:02:16:98:65:db:69:bd:
89:e1:06:1b:44:df:fc:50:b7:da:5c:d0:1f:34:ba:48:e7:ac:
dd:bd:63:ca:fb:5c:e8:d4:30:ba:e0:2e:78:2b:e2:4b:49:5d:
1e:9d:38:ca:38:2a:a9:f9:3d:61:dc:d2:a6:f6:1e:eb:17:12:
86:4b:00:c6:ab:a2:ab:e2:4f:92:e2:db:03:8d:8f:03:9b:59:
d1:60:94:31:db:90:60:74:67:eb:0c:b7:83:63:a1:b3:d2:d0:
e9:36:90:d8:5b:c5:c9:3c:0e:62:56:76:0d:a5:a6:79:e1:51:
89:d9:0d:ea:61:cb:93:89:f1:73:90:4b:87:bc:c0:ce:e4:be:
46:6e:7e:20:1c:4d:d3:49:b2:fa:61:ca:ed:bc:d3:ba:d0:64:
b9:43:0a:5f:e2:45:8c:67:14:29:a3:47:0b:7b:73:5f:f3:cd:
0f:0f:a5:d2:0f:2e:20:44:ce:fc:4a:d5:da:45:a4:2f:1d:fa:
d7:ce:64:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP9ITTQXGJiyWquUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDQ1N1oXDTI1MDIwNjE1MDQ1N1owLzEtMCsGA1UEAxMk
N2QzM2Q0MTItMmI0Zi00MjBkLTkzOGMtNDdhY2RkNWM3NmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRT7oxDkcdQhF2t2qOKrjcAbRPc9AGCboJow
eq0vaWHmtexcL9c8QMMeRNxkpMcdyPNA1Qy/lFRXZRbM3bkaDHwiFBiCrCtfrKj+
r+HEiFFZVq1Des1dyDr/A/Ugi8OCilZrqiJ4GYpUHy/SnXKR2HRUCVCDfNyPsNIT
6txUqvyMbVPFS17wi39GvAb67ssZw2Y68tgkabUJStmqRzz3KeKywzfcG6kMMGbB
eeMkbpMA35gR9qEv93uEcivczIvpi3hZcwD2ax67dhOooT0pq1WRjp7p9hnh3VzZ
kjLReGNhQQPV9jxxU5ZMq+dPfRga3C//76lg28kPr0WZDlS6jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNa9PfPixSK5aDsPMIxPEhtW4CzJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMzg4YmY2ODAtNThkMy0z
NzQ0LThmOTYtZjA2MGY0YjMzOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmBZgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABXeqysoY5lLEGxFH/tBxI26Ij3LJpOhCBXZ8N8SSlkR0VldQfhpzrjK
nKv4kY6WNTZG4cQw2W6BMcmeyxxA3gutAhaYZdtpvYnhBhtE3/xQt9pc0B80ukjn
rN29Y8r7XOjUMLrgLngr4ktJXR6dOMo4Kqn5PWHc0qb2HusXEoZLAMaroqviT5Li
2wONjwObWdFglDHbkGB0Z+sMt4NjobPS0Ok2kNhbxck8DmJWdg2lpnnhUYnZDeph
y5OJ8XOQS4e8wM7kvkZufiAcTdNJsvphyu2807rQZLlDCl/iRYxnFCmjRwt7c1/z
zQ8PpdIPLiBEzvxK1dpFpC8d+tfOZB4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:26 2025 by rpki-client