Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4caf10e7-8922-3788-847a-b9e5bb1f9a86.roa
File: 4caf10e7-8922-3788-847a-b9e5bb1f9a86.roa (raw, json)
Hash identifier: H3vqhHyot9ELqlaIeWhHnuTR6feikvDMEy2qRugEHjE=
Subject key identifier: 14:5E:22:FE:0A:EE:12:C3:EF:F7:96:91:A0:05:ED:A8:A8:53:DD:B8
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF4806276E68A855E93B780
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4caf10e7-8922-3788-847a-b9e5bb1f9a86.roa
Signing time: Fri 08 Nov 2024 15:04:55 +0000
ROA not before: Fri 08 Nov 2024 15:04:55 +0000
ROA not after: Thu 06 Feb 2025 15:04:55 +0000
asID: 81
IP address blocks: 152.16.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:80:62:76:e6:8a:85:5e:93:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:55 2024 GMT
Not After : Feb 6 15:04:55 2025 GMT
Subject: CN=ae21bd7b-63ad-4321-91a9-f008e76c2ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:a5:f4:8f:03:15:aa:a3:27:0b:d2:8f:ce:
4e:c8:05:b6:07:45:78:0a:18:24:3c:ab:c8:1c:7c:
3b:92:eb:b8:ed:ed:34:c8:63:ca:77:29:dd:34:92:
03:97:0c:5e:74:82:52:f0:6b:a9:1f:e3:99:c1:58:
51:29:f1:5e:1f:b5:10:62:11:46:8e:f6:04:8b:cf:
af:cf:68:c0:b7:06:0d:ba:88:4c:3f:92:0a:ac:a5:
fd:c8:cc:86:70:15:92:b4:76:c6:4c:02:34:e3:a6:
b4:f0:96:de:3d:1b:51:af:d9:56:01:ba:fc:4f:63:
ed:71:c9:b8:6a:42:21:54:51:1d:f1:da:bb:dc:a3:
d7:26:4b:4a:db:37:e5:98:09:3d:f2:fb:3a:d3:bf:
c8:b1:dc:89:46:36:b6:1d:62:03:f2:8b:5c:a9:91:
68:30:d6:80:24:91:63:cb:25:c8:0a:6e:f9:70:80:
ab:37:50:db:03:28:ff:29:1b:a6:32:d2:2e:45:03:
44:80:df:fd:46:70:6b:fb:59:46:79:bc:ab:ee:34:
1d:e2:12:de:a3:74:c6:f3:29:64:3f:75:06:32:10:
bb:c7:1c:ec:4c:ef:95:db:af:02:9f:8c:10:9a:a8:
5e:94:6b:a0:fe:d8:19:24:07:bf:0f:6b:6d:74:29:
35:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5E:22:FE:0A:EE:12:C3:EF:F7:96:91:A0:05:ED:A8:A8:53:DD:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4caf10e7-8922-3788-847a-b9e5bb1f9a86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:22:f8:7d:ae:71:27:4d:17:2d:5f:61:d4:77:81:89:9a:f8:
ed:21:1b:1f:bc:3f:62:28:e0:15:9e:6f:3f:b1:52:c8:d6:05:
d0:79:99:f8:60:a4:54:85:7e:71:a5:fd:9c:0a:c5:84:a8:96:
c7:b0:7e:99:45:e2:64:43:d2:69:f5:1c:95:62:3e:24:bf:f6:
46:e8:17:99:bb:44:29:96:b8:4c:9e:64:76:cb:d4:a4:db:06:
34:7f:9c:7c:11:35:1a:03:3b:69:09:a5:37:8f:3d:6b:f0:72:
10:53:5a:23:58:7d:db:3a:b7:cc:0f:5c:97:21:65:a8:d5:7d:
49:26:b7:d7:b4:69:08:50:b5:e8:7d:f1:eb:61:0c:73:ad:a6:
bd:60:ad:26:e4:85:c0:5b:d5:48:8a:43:97:b7:da:74:4d:7d:
ea:d8:ae:3a:05:ab:68:76:70:ee:fa:c9:d3:ec:f7:5c:fa:c3:
11:e8:f3:e2:99:19:6c:58:f1:38:64:cf:5f:17:5d:26:80:fc:
6c:38:7e:18:40:4b:13:d3:c2:d6:1f:c4:24:9f:88:cf:57:7d:
9b:eb:89:12:c4:9a:71:03:8d:08:8a:82:0b:96:55:f4:42:84:
5c:5b:e4:d9:d9:ff:8f:11:b1:f1:ee:da:57:b6:89:0e:4f:70:
71:ee:68:dc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfP9IBiduaKhV6Tt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDQ1NVoXDTI1MDIwNjE1MDQ1NVowLzEtMCsGA1UEAxMk
YWUyMWJkN2ItNjNhZC00MzIxLTkxYTktZjAwOGU3NmMyZWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1yl9I8DFaqjJwvSj85OyAW2B0V4ChgkPKvI
HHw7kuu47e00yGPKdyndNJIDlwxedIJS8GupH+OZwVhRKfFeH7UQYhFGjvYEi8+v
z2jAtwYNuohMP5IKrKX9yMyGcBWStHbGTAI046a08JbePRtRr9lWAbr8T2Ptccm4
akIhVFEd8dq73KPXJktK2zflmAk98vs607/IsdyJRja2HWID8otcqZFoMNaAJJFj
yyXICm75cICrN1DbAyj/KRumMtIuRQNEgN/9RnBr+1lGebyr7jQd4hLeo3TG8ylk
P3UGMhC7xxzsTO+V268Cn4wQmqhelGug/tgZJAe/D2ttdCk1fQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBReIv4K7hLD7/eWkaAF7aioU924MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNGNhZjEwZTctODkyMi0z
Nzg4LTg0N2EtYjllNWJiMWY5YTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmBAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAAiL4fa5xJ00XLV9h1HeBiZr47SEbH7w/YijgFZ5vP7FSyNYF0HmZ+GCk
VIV+caX9nArFhKiWx7B+mUXiZEPSafUclWI+JL/2RugXmbtEKZa4TJ5kdsvUpNsG
NH+cfBE1GgM7aQmlN489a/ByEFNaI1h92zq3zA9clyFlqNV9SSa317RpCFC16H3x
62EMc62mvWCtJuSFwFvVSIpDl7fadE196tiuOgWraHZw7vrJ0+z3XPrDEejz4pkZ
bFjxOGTPXxddJoD8bDh+GEBLE9PC1h/EJJ+Iz1d9m+uJEsSacQONCIqCC5ZV9EKE
XFvk2dn/jxGx8e7aV7aJDk9wce5o3A==
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:37:59 2025 by rpki-client