Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/41bcff28-9c96-31ad-b761-ae34ddb2656e.roa
File: 41bcff28-9c96-31ad-b761-ae34ddb2656e.roa (raw, json)
Hash identifier: +WzihvPEYRRN7Im44tlGl6B8n4NN7JcOj2Nfvw9V3kk=
Subject key identifier: 39:84:4D:CA:6C:44:2F:93:2B:11:ED:D0:F5:98:D4:58:38:91:56:49
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF488BD0B38D681DB1368A0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/41bcff28-9c96-31ad-b761-ae34ddb2656e.roa
Signing time: Fri 08 Nov 2024 15:04:59 +0000
ROA not before: Fri 08 Nov 2024 15:04:59 +0000
ROA not after: Thu 06 Feb 2025 15:04:59 +0000
asID: 6559
IP address blocks: 152.31.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:88:bd:0b:38:d6:81:db:13:68:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:59 2024 GMT
Not After : Feb 6 15:04:59 2025 GMT
Subject: CN=ed1e4692-8e04-4de9-8972-0ce01d3bcf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:24:1a:fc:04:42:e5:0b:cf:e7:8a:42:d5:
a3:46:f0:ec:32:06:c6:70:f7:92:1a:ee:d5:12:84:
25:5c:83:78:20:41:fc:3a:ff:65:57:71:fd:16:22:
57:57:d1:aa:2e:e1:97:43:16:fc:26:3a:1a:40:a2:
4e:49:9a:85:41:e3:28:69:98:c4:6b:8c:47:90:0d:
62:67:6d:8a:b1:38:06:10:82:12:dc:ac:fe:7e:d2:
a1:53:30:1f:10:42:96:44:89:c2:21:46:64:3d:6a:
61:d8:a1:b5:9a:a7:6a:1a:97:e3:35:ab:3d:4c:eb:
ce:e3:f3:b3:d3:2d:bd:1a:31:7c:be:3b:4e:5a:2a:
f9:82:f2:ac:4c:78:63:3e:1c:bd:c4:1a:54:b3:99:
e8:ad:b6:7b:08:40:21:75:63:cd:68:e3:a7:02:f3:
79:80:5d:a5:58:c4:b5:06:81:4f:be:4a:42:d4:aa:
30:27:8d:ea:ae:ad:72:dc:11:49:2f:50:17:7e:41:
d5:f5:72:dd:18:f6:e4:7e:38:c1:52:50:66:1b:6e:
e2:1c:ec:67:4c:ee:fa:82:54:9c:9e:4b:99:fc:e9:
6b:b9:0e:e6:f0:09:d4:15:24:ff:8d:5d:02:a3:d2:
67:8c:58:ae:f1:4b:6e:73:ae:fb:73:6a:41:b4:df:
54:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:84:4D:CA:6C:44:2F:93:2B:11:ED:D0:F5:98:D4:58:38:91:56:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/41bcff28-9c96-31ad-b761-ae34ddb2656e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.31.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:9d:6a:28:42:62:ce:2d:1b:ec:bd:b3:49:d2:7f:d0:56:3c:
d4:48:b8:10:c0:42:3c:05:4d:c5:de:30:a4:f3:e1:e8:34:f4:
e9:d1:49:9b:76:6a:4b:67:13:48:94:6f:39:49:a8:4f:ff:c7:
fa:76:a2:2e:93:1b:61:c4:39:0e:19:28:dd:96:5f:08:89:5b:
5d:59:51:c3:5b:d1:bd:62:7e:45:c7:32:bd:2f:91:55:2f:7b:
9d:69:27:16:c3:87:5c:b2:6e:03:bd:cb:91:3a:49:ae:3f:0b:
10:77:72:0f:36:8b:ef:a2:2d:91:01:74:70:f4:c4:d2:fe:08:
d8:e1:65:21:8e:68:15:af:40:6b:03:8c:5f:b1:f1:2a:d4:de:
92:54:20:17:44:55:c4:34:17:cf:b5:32:a0:92:71:04:a4:a4:
40:ed:9b:bf:1b:43:5f:8e:d7:93:8b:c3:ec:e1:1b:63:9b:f9:
64:77:0c:4f:bb:21:45:b7:55:90:35:06:cc:b5:46:98:14:3e:
4f:b9:50:3e:5b:c5:28:d0:45:db:c0:c1:8c:25:55:22:af:fb:
08:a1:e2:59:ec:da:ff:bf:88:0a:ba:7a:8e:19:c1:b4:9c:4d:
ff:e1:18:7a:e3:6b:cf:6f:98:5f:8a:55:8b:97:88:f9:a0:a9:
02:7b:29:c0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfP9Ii9CzjWgdsTaKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDQ1OVoXDTI1MDIwNjE1MDQ1OVowLzEtMCsGA1UEAxMk
ZWQxZTQ2OTItOGUwNC00ZGU5LTg5NzItMGNlMDFkM2JjZjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwgkGvwEQuULz+eKQtWjRvDsMgbGcPeSGu7V
EoQlXIN4IEH8Ov9lV3H9FiJXV9GqLuGXQxb8JjoaQKJOSZqFQeMoaZjEa4xHkA1i
Z22KsTgGEIIS3Kz+ftKhUzAfEEKWRInCIUZkPWph2KG1mqdqGpfjNas9TOvO4/Oz
0y29GjF8vjtOWir5gvKsTHhjPhy9xBpUs5norbZ7CEAhdWPNaOOnAvN5gF2lWMS1
BoFPvkpC1KowJ43qrq1y3BFJL1AXfkHV9XLdGPbkfjjBUlBmG27iHOxnTO76glSc
nkuZ/OlruQ7m8AnUFST/jV0Co9JnjFiu8Utuc677c2pBtN9UwwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDmETcpsRC+TKxHt0PWY1Fg4kVZJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNDFiY2ZmMjgtOWM5Ni0z
MWFkLWI3NjEtYWUzNGRkYjI2NTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmB8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFp1qKEJizi0b7L2zSdJ/0FY81Ei4EMBCPAVNxd4wpPPh6DT06dFJm3Zq
S2cTSJRvOUmoT//H+naiLpMbYcQ5Dhko3ZZfCIlbXVlRw1vRvWJ+RccyvS+RVS97
nWknFsOHXLJuA73LkTpJrj8LEHdyDzaL76ItkQF0cPTE0v4I2OFlIY5oFa9AawOM
X7HxKtTeklQgF0RVxDQXz7UyoJJxBKSkQO2bvxtDX47Xk4vD7OEbY5v5ZHcMT7sh
RbdVkDUGzLVGmBQ+T7lQPlvFKNBF28DBjCVVIq/7CKHiWeza/7+ICrp6jhnBtJxN
/+EYeuNrz2+YX4pVi5eI+aCpAnspwA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:27 2025 by rpki-client