Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3ea68a9d-a566-35da-8a78-d1cfee5eede2.roa
File: 3ea68a9d-a566-35da-8a78-d1cfee5eede2.roa (raw, json)
Hash identifier: Pt2B2TVXsYNsllR9oMoTDtj3BDLQ9acPMqPlNvpbaec=
Subject key identifier: F0:54:19:B2:3E:B8:8D:4D:A7:5A:01:E2:2D:B9:34:A3:03:B1:DA:79
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF488D345341D981FEC4960
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3ea68a9d-a566-35da-8a78-d1cfee5eede2.roa
Signing time: Fri 08 Nov 2024 15:04:59 +0000
ROA not before: Fri 08 Nov 2024 15:04:59 +0000
ROA not after: Thu 06 Feb 2025 15:04:59 +0000
asID: 6559
IP address blocks: 152.34.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:88:d3:45:34:1d:98:1f:ec:49:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:59 2024 GMT
Not After : Feb 6 15:04:59 2025 GMT
Subject: CN=6984cda3-b326-498e-9010-6954762e9373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:f3:a8:97:fb:80:55:67:ee:de:f0:ba:42:
52:dc:53:17:35:b0:2c:45:b3:55:83:43:d4:c7:5d:
10:49:96:10:4a:76:73:94:05:8f:c0:21:34:20:71:
33:6f:c7:9c:e4:52:14:30:f8:12:d9:b6:ac:aa:68:
3c:64:4b:4c:02:b9:16:91:8f:6d:df:d3:fa:70:7e:
35:26:47:59:2b:59:28:4a:c9:8d:c8:ed:72:9e:7a:
bc:ed:9b:99:87:f5:f7:9c:09:ea:16:c4:af:b8:85:
1b:07:81:53:ce:3c:b8:5b:d1:bb:86:85:7e:ed:61:
53:ea:f6:86:fa:ee:3b:e6:1f:57:d8:4d:ea:c2:5e:
22:17:6f:ce:2e:d3:be:19:15:e6:31:f4:9a:ad:38:
7a:20:42:ed:11:03:a2:99:0a:7d:2d:7a:28:9a:2a:
59:46:78:f4:7c:ef:9a:07:cb:48:36:2d:e7:19:9d:
98:0d:88:b0:8e:0f:7b:92:83:fc:db:1b:c3:09:fc:
a1:9e:02:99:d3:cd:5b:76:2d:c9:4a:c0:4b:ea:a3:
31:0a:42:bd:ca:e1:9a:65:fa:b6:f3:a4:df:c8:71:
e5:32:98:c8:96:1c:fc:27:8f:37:e4:31:d3:2d:b0:
ce:1c:a9:36:f8:f7:c7:e2:67:2e:7b:62:4e:56:5f:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:54:19:B2:3E:B8:8D:4D:A7:5A:01:E2:2D:B9:34:A3:03:B1:DA:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3ea68a9d-a566-35da-8a78-d1cfee5eede2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.34.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:b0:d9:87:fc:09:ba:04:5d:6a:b7:fa:23:a2:95:e2:55:5e:
42:88:d4:79:51:ee:93:51:54:cb:fd:db:d2:c6:35:f6:05:86:
82:c8:a4:05:6d:db:49:67:10:71:46:24:a1:97:2b:92:13:91:
6a:d4:42:54:a9:72:40:9d:fa:4b:58:5c:1a:2f:ff:f0:5f:01:
7a:1f:7c:d6:d7:12:4f:5a:a1:a1:47:7e:0e:f6:b1:60:bd:2d:
4a:de:e4:17:46:51:ba:f9:5a:a2:20:00:8f:ef:fa:af:05:e6:
9c:84:1e:70:2e:45:e5:13:95:17:ce:46:1f:2f:9e:0e:09:ef:
3b:08:24:6b:2d:41:b4:a6:3e:21:9e:a1:b8:c5:2b:cb:29:95:
e5:77:81:13:6b:e6:f1:58:e6:2d:03:b7:80:a4:8f:8e:2d:c9:
94:2f:33:cc:86:1c:0d:f1:28:d4:3a:f6:c2:e9:21:57:3e:ce:
30:76:3c:28:cf:71:a7:4c:a2:ee:8a:19:4d:d5:57:b5:81:c5:
9d:95:a5:3f:35:ce:af:89:78:15:40:4d:db:f4:53:98:33:6a:
bb:a3:a5:d7:fd:bc:3a:c1:77:50:a2:59:5d:e8:70:3a:e5:6c:
5d:3c:68:3d:0d:a8:36:99:4d:07:4d:e9:67:0d:21:8f:85:81:
60:a9:c4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:51 2025 by rpki-client