Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/42865b8e-4be2-368e-b1a6-456aaf0d069b.roa
File: 42865b8e-4be2-368e-b1a6-456aaf0d069b.roa (raw, json)
Hash identifier: BbWCKIhtveHukEaVymOLEGCPun29guP19kiJC0qWaDk=
Subject key identifier: 3C:EA:ED:ED:E2:2F:70:05:29:39:C7:CC:AC:C9:1B:9C:B5:7C:94:B6
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBDCF6663A9239E172480
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/42865b8e-4be2-368e-b1a6-456aaf0d069b.roa
Signing time: Wed 16 Oct 2024 14:26:35 +0000
ROA not before: Wed 16 Oct 2024 14:26:35 +0000
ROA not after: Tue 14 Jan 2025 15:26:35 +0000
asID: 81
IP address blocks: 152.46.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:bd:cf:66:63:a9:23:9e:17:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:35 2024 GMT
Not After : Jan 14 15:26:35 2025 GMT
Subject: CN=7a712399-a8cc-4130-a990-d31e905791cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:df:5d:99:81:da:13:8c:a8:d9:5b:c9:f6:
b3:c4:cd:7a:51:7c:74:3d:c1:df:04:05:ef:d1:19:
3f:85:18:11:0e:8a:92:81:26:d7:fe:e9:c9:22:9e:
69:11:a3:78:43:cf:63:6b:b4:11:40:d2:70:79:83:
e8:2c:90:41:4c:5f:5b:92:97:e4:99:fd:5e:3f:d8:
d5:bb:9f:90:87:a3:c9:00:17:d9:05:4d:4a:f9:e5:
12:fa:b2:36:5e:3d:69:90:aa:72:c0:a7:a7:01:79:
8f:8e:64:e3:d2:60:c7:9d:b6:23:b1:fb:99:4d:be:
9e:c7:11:3f:a1:b6:1b:f8:89:9e:99:09:10:88:a0:
c5:f8:53:f0:39:5e:56:b2:5f:ed:26:90:6c:92:eb:
af:27:4a:a2:12:02:67:e7:b9:2a:67:e1:00:1f:88:
81:89:0a:5d:53:d8:2a:30:74:a4:80:86:90:2d:65:
cc:4d:0e:04:a5:6b:75:44:b0:2e:b5:a0:a7:5b:e0:
bb:9c:9c:8b:f3:ea:ea:b9:95:de:45:96:b7:cc:8c:
07:b0:98:8a:3f:3c:e3:66:ce:39:ea:e5:39:93:2e:
2f:2d:9f:ec:fc:37:ee:e5:fb:f9:3a:04:a4:01:3d:
60:7a:0b:1b:09:48:c6:36:cc:7e:0c:6c:9b:63:94:
b2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EA:ED:ED:E2:2F:70:05:29:39:C7:CC:AC:C9:1B:9C:B5:7C:94:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/42865b8e-4be2-368e-b1a6-456aaf0d069b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:db:d4:e9:fa:2d:ad:02:60:6d:96:bb:cb:fc:f5:58:01:d9:
81:13:01:a9:12:70:3e:1e:64:2c:91:56:86:06:de:97:73:de:
53:98:41:22:76:08:4c:b2:be:5c:28:6b:50:53:2e:33:db:e3:
b6:79:b5:6a:67:13:2d:8b:95:80:d3:a7:4f:e3:b4:b2:dc:70:
57:80:4d:08:7f:ba:f7:44:80:43:1e:e4:1a:a6:ec:27:e7:68:
e5:44:04:33:f8:bc:21:78:fd:ab:83:c9:03:6e:7c:60:b4:aa:
f8:d2:36:34:4f:dc:04:0b:cf:60:39:9f:c4:c7:58:82:7e:7f:
8d:e8:20:19:88:7f:40:50:84:3a:1e:b8:2a:41:65:c3:a5:47:
4f:4e:2d:14:7c:77:1c:7c:c3:d2:81:22:03:6c:b3:10:2b:16:
92:16:a5:24:6a:48:4e:88:87:81:df:a6:b2:12:b5:11:4e:0e:
41:41:d2:ca:60:05:9e:b6:35:22:d5:3c:dc:59:b8:af:17:28:
2b:04:7b:bf:c6:79:53:f3:ba:7d:b0:88:e8:71:9a:95:6b:25:
b6:3b:8e:88:bc:1e:2e:03:e1:14:4e:c0:80:ed:da:d3:ec:3e:
8e:60:f9:11:20:4b:50:d9:72:9f:5c:9b:40:12:47:f9:84:0e:
ec:2a:eb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:42 2025 by rpki-client