Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/38fbb552-ddf0-3ae2-9ad9-1e9435c2d41b.roa
File: 38fbb552-ddf0-3ae2-9ad9-1e9435c2d41b.roa (raw, json)
Hash identifier: OS0PUGLXHAKIzygvX+fi0wx8/VcOgrbzZ9sU84FdGNQ=
Subject key identifier: E8:A7:CA:B3:37:E6:32:23:6B:8F:C0:CF:D2:DF:8B:86:40:F1:A3:32
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48912BAB18A8B7CF6DC80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/38fbb552-ddf0-3ae2-9ad9-1e9435c2d41b.roa
Signing time: Fri 08 Nov 2024 15:04:59 +0000
ROA not before: Fri 08 Nov 2024 15:04:59 +0000
ROA not after: Thu 06 Feb 2025 15:04:59 +0000
asID: 81
IP address blocks: 152.45.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:89:12:ba:b1:8a:8b:7c:f6:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:59 2024 GMT
Not After : Feb 6 15:04:59 2025 GMT
Subject: CN=77960f6f-5a05-4e95-8cdd-3323f0c421fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d3:26:9c:d2:9c:98:5e:a7:3f:5d:86:7f:a0:
04:9d:10:19:84:a5:ce:ac:39:9b:33:63:1f:91:ea:
02:e4:69:2a:f1:16:05:aa:14:bc:4b:2c:b4:5d:20:
8f:7b:41:1a:57:7a:8c:0f:c2:0e:41:3a:78:7b:6a:
21:12:4d:d9:23:fc:ab:57:8e:54:48:ac:ac:42:ee:
8c:ee:cd:de:fe:14:66:7b:1b:8f:56:74:27:fb:2a:
c2:c8:7a:ea:8b:1a:43:95:65:61:22:be:e4:43:64:
82:0e:d3:7f:49:3f:37:24:f2:a9:ce:3e:08:d0:14:
79:ab:03:11:57:57:f3:4b:9b:01:93:9b:da:f7:62:
b9:14:4b:4f:f3:8f:ba:22:2c:f1:01:7a:24:5f:71:
c1:32:c8:2a:45:59:44:5e:3a:b3:b8:5e:c9:4a:ba:
8f:7f:b0:15:07:19:58:a2:a1:72:01:5b:35:3a:fd:
49:84:e7:21:e6:ad:fd:9c:fa:1b:1a:cd:ac:43:66:
52:be:a2:90:f1:05:cc:38:e0:cd:13:49:32:76:0b:
cd:81:63:8f:51:ed:92:ad:66:49:5e:0a:90:22:48:
30:da:e5:b2:5a:bc:44:95:f5:d4:34:5e:52:12:07:
47:c7:8c:8c:b3:ab:ce:3f:b6:77:9d:d9:c3:01:9c:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A7:CA:B3:37:E6:32:23:6B:8F:C0:CF:D2:DF:8B:86:40:F1:A3:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/38fbb552-ddf0-3ae2-9ad9-1e9435c2d41b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.45.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:aa:e3:80:c6:bd:9f:69:99:53:2b:1d:62:bf:4b:93:7b:04:
91:8d:60:b5:3e:e8:4e:d0:8e:0f:5c:61:2b:1c:56:c7:07:bd:
80:d9:95:9f:73:e0:0e:7f:53:a5:ce:aa:42:57:5f:41:90:8e:
40:a3:17:a5:8f:04:e9:f4:23:c2:1e:5a:ff:df:0f:76:0e:a1:
db:65:81:33:64:a1:b0:b3:ad:3f:0f:b9:eb:cc:2f:33:fe:bb:
26:55:c5:83:a7:90:42:2d:43:15:00:25:56:5c:96:b1:8f:3d:
96:db:c1:e9:0b:c1:6b:c4:76:5c:a9:a0:14:00:8f:cd:5e:4d:
11:98:e2:9c:19:2c:9f:4f:18:0f:84:63:12:bf:78:7d:71:d5:
a2:29:ea:ad:e5:b8:4f:18:7f:75:f3:18:a7:ae:bd:81:13:ab:
f3:a3:44:41:91:61:24:0c:54:4d:fe:49:a5:b4:3f:42:0d:ed:
fb:b9:f2:80:af:3d:e4:fc:53:d1:51:1c:89:a5:4d:2a:ec:3f:
7b:1a:73:e8:68:2b:43:0d:e5:23:61:3c:da:1f:89:7f:41:3b:
a4:94:fd:28:f4:84:5a:fa:6e:b7:7c:79:db:f9:4d:d8:48:59:
0b:b6:d4:e9:0d:83:7a:e4:14:ce:b1:3f:3f:2c:c2:ad:d8:36:
d1:2c:3c:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP9IkSurGKi3z23IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDQ1OVoXDTI1MDIwNjE1MDQ1OVowLzEtMCsGA1UEAxMk
Nzc5NjBmNmYtNWEwNS00ZTk1LThjZGQtMzMyM2YwYzQyMWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9MmnNKcmF6nP12Gf6AEnRAZhKXOrDmbM2Mf
keoC5Gkq8RYFqhS8Syy0XSCPe0EaV3qMD8IOQTp4e2ohEk3ZI/yrV45USKysQu6M
7s3e/hRmexuPVnQn+yrCyHrqixpDlWVhIr7kQ2SCDtN/ST83JPKpzj4I0BR5qwMR
V1fzS5sBk5va92K5FEtP84+6IizxAXokX3HBMsgqRVlEXjqzuF7JSrqPf7AVBxlY
oqFyAVs1Ov1JhOch5q39nPobGs2sQ2ZSvqKQ8QXMOODNE0kydgvNgWOPUe2SrWZJ
XgqQIkgw2uWyWrxElfXUNF5SEgdHx4yMs6vOP7Z3ndnDAZzM3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOinyrM35jIja4/Az9Lfi4ZA8aMyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMzhmYmI1NTItZGRmMC0z
YWUyLTlhZDktMWU5NDM1YzJkNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFOq44DGvZ9pmVMrHWK/S5N7BJGNYLU+6E7Qjg9cYSscVscHvYDZlZ9z
4A5/U6XOqkJXX0GQjkCjF6WPBOn0I8IeWv/fD3YOodtlgTNkobCzrT8PuevMLzP+
uyZVxYOnkEItQxUAJVZclrGPPZbbwekLwWvEdlypoBQAj81eTRGY4pwZLJ9PGA+E
YxK/eH1x1aIp6q3luE8Yf3XzGKeuvYETq/OjREGRYSQMVE3+SaW0P0IN7fu58oCv
PeT8U9FRHImlTSrsP3sac+hoK0MN5SNhPNofiX9BO6SU/Sj0hFr6brd8edv5TdhI
WQu21OkNg3rkFM6xPz8swq3YNtEsPNM=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:07:02 2025 by rpki-client