Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/433958b8-ab34-3f46-a501-60fd52f379e9.roa
File: 433958b8-ab34-3f46-a501-60fd52f379e9.roa (raw, json)
Hash identifier: /I/6W9w9QqIytgGTyRoroUiGhj6ioMgF7sXqyu36cY0=
Subject key identifier: 6C:4A:AC:9C:25:0A:3B:69:A2:DE:99:AE:70:E3:10:42:14:E1:EA:92
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF481954C5D5D98A3311080
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/433958b8-ab34-3f46-a501-60fd52f379e9.roa
Signing time: Fri 08 Nov 2024 15:04:56 +0000
ROA not before: Fri 08 Nov 2024 15:04:56 +0000
ROA not after: Thu 06 Feb 2025 15:04:56 +0000
asID: 81
IP address blocks: 152.55.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:81:95:4c:5d:5d:98:a3:31:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:56 2024 GMT
Not After : Feb 6 15:04:56 2025 GMT
Subject: CN=6c957e22-fb13-4e3c-b7cc-9567b58f56fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7c:1a:d4:42:39:0b:97:8d:12:d6:d1:eb:1b:
cb:59:28:dd:36:f2:f5:76:d4:35:7e:5c:c3:2b:ce:
c6:35:41:30:e0:cd:23:94:9b:37:c9:fe:0b:02:2f:
89:26:9a:be:78:31:4c:8c:80:ec:8c:ff:4e:85:d6:
0a:ac:27:03:d7:87:14:e5:39:09:bb:8e:6c:0e:54:
15:a7:98:ed:f9:5c:a2:9c:1f:e4:04:05:2e:25:d8:
5d:77:02:40:2f:a6:a7:d8:85:31:9a:26:9a:03:5c:
38:c8:c9:18:e5:63:f7:47:dc:3a:5c:83:8c:b6:1f:
0a:fc:b7:34:eb:f1:76:d6:5f:c4:65:e5:d0:cf:76:
fc:ca:2a:01:81:21:1e:ad:cd:f6:09:d9:13:ca:32:
09:5e:4d:ae:8e:30:52:ec:e3:91:e7:f7:f2:5b:96:
b7:c9:29:dc:79:42:f5:34:44:7e:d0:79:29:ac:73:
d7:e8:81:99:d8:ca:56:3c:d4:42:5c:83:3f:2f:ce:
a4:57:dd:cb:80:22:40:76:e7:5b:36:54:31:bb:5b:
63:09:24:02:d1:e4:9c:72:1a:26:6d:91:ca:c6:dd:
20:b7:0c:18:02:d4:c4:14:db:e5:df:90:e6:73:e4:
f2:1b:0d:59:3c:38:b2:89:38:87:c3:c3:e8:9e:aa:
5d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4A:AC:9C:25:0A:3B:69:A2:DE:99:AE:70:E3:10:42:14:E1:EA:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/433958b8-ab34-3f46-a501-60fd52f379e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:90:4e:e9:a9:d3:52:af:a5:2b:3b:23:d1:ff:1c:a7:79:92:
a3:63:a3:1a:0b:b7:ff:d1:12:06:07:76:24:ee:7e:ca:4e:a5:
07:27:18:e8:74:29:62:93:44:6b:b3:e0:d2:99:14:58:76:fd:
99:38:c3:44:50:17:6a:52:6a:c5:3e:df:9c:c0:f2:c8:98:c6:
a5:4b:49:57:df:a0:10:de:ed:82:9f:2b:0d:62:60:59:a0:14:
60:b6:96:ee:5f:ef:3d:3c:ed:e8:d5:29:4a:fa:f1:9c:f6:f8:
3f:6b:ed:a6:9e:92:39:e9:06:f5:a3:22:08:7c:fa:24:18:ac:
e4:c4:3a:8f:ce:25:8b:4a:ed:ad:ec:a5:4e:77:a8:ac:ec:20:
19:54:b5:e0:73:c7:00:3f:b7:11:19:55:1a:f3:9a:ae:63:06:
dd:80:2d:29:e5:ae:cd:a2:f1:be:f2:1e:15:e2:1b:25:5c:e6:
ed:c5:6b:82:5d:47:bb:15:32:72:1a:ed:34:d0:f0:ae:79:42:
cf:2a:bc:8c:67:f8:70:ac:4e:41:18:d5:fc:1d:0b:d8:47:a3:
f5:b9:9c:6d:42:e1:96:5a:b0:53:e9:a9:45:c6:82:6f:cf:03:
f6:03:54:ab:bf:73:53:a2:63:be:19:51:ab:4e:12:f6:17:b6:
2a:81:40:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:43:55 2025 by rpki-client