Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/55f96628-814a-3367-82b4-a205aaa0ad1d.roa
File: 55f96628-814a-3367-82b4-a205aaa0ad1d.roa (raw, json)
Hash identifier: s80UMsfU8YWvdtWpOFuofY+/IcOnwFDhgWfkgh+57Hk=
Subject key identifier: 47:F2:CD:6E:F1:F1:CF:36:30:1B:75:AB:11:D3:3E:AA:55:CD:89:F9
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABB918AC9448C101EBAC00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/55f96628-814a-3367-82b4-a205aaa0ad1d.roa
Signing time: Wed 16 Oct 2024 14:26:33 +0000
ROA not before: Wed 16 Oct 2024 14:26:33 +0000
ROA not after: Tue 14 Jan 2025 15:26:33 +0000
asID: 81
IP address blocks: 192.154.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:b9:18:ac:94:48:c1:01:eb:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:33 2024 GMT
Not After : Jan 14 15:26:33 2025 GMT
Subject: CN=5eb63748-3fba-4c39-aee0-a703d05a633e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:76:32:48:09:5a:90:e3:a0:e0:39:d9:9c:
ae:89:97:94:96:ec:9a:32:93:3b:ba:ac:82:8b:33:
fc:ca:49:fd:f6:82:0e:7b:75:be:35:5f:cc:4b:13:
5c:95:b5:40:4f:b1:91:97:e1:83:c0:11:90:1c:2e:
25:53:40:6f:a0:59:3d:aa:db:22:8b:2c:a7:85:5f:
eb:6c:3f:56:3a:10:6f:1a:cf:22:29:cc:11:e5:71:
92:fd:aa:96:64:c2:c5:1d:b9:75:b3:1d:97:11:ab:
a8:fb:b7:e5:5e:69:d5:81:7e:4d:4c:88:97:98:33:
81:38:c8:8b:51:80:1b:80:bc:0c:8a:ab:e1:7f:07:
38:b1:5e:00:6a:6c:4d:92:a6:ec:9e:c4:d1:c9:a6:
58:0a:61:11:e4:f1:bd:0c:11:81:a9:25:a7:1e:58:
8b:41:ad:ea:66:f4:27:ef:43:40:2c:d0:58:fa:3b:
22:a5:18:c6:18:a6:56:ee:5c:6c:91:e3:24:3d:2d:
6b:ff:da:9d:9d:5e:77:91:c3:b0:af:72:1d:84:19:
c8:bf:2a:17:81:86:e4:84:e4:46:70:17:c3:6e:48:
b7:47:0f:d7:75:84:5b:10:de:ad:c3:f0:17:a9:53:
d7:19:65:ed:66:21:f6:39:ff:bf:b1:cc:6c:43:b9:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F2:CD:6E:F1:F1:CF:36:30:1B:75:AB:11:D3:3E:AA:55:CD:89:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/55f96628-814a-3367-82b4-a205aaa0ad1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:ab:b5:1f:e0:87:fd:69:a8:25:7e:4d:e7:48:3c:3d:c3:8f:
9a:32:30:a0:d8:25:fa:75:01:c1:38:f6:f0:f5:49:4c:29:6d:
0a:54:f9:9e:ad:c3:8a:4f:72:b7:4c:e4:75:b9:9c:5c:9e:6b:
b1:07:00:f6:93:34:72:fc:6f:ec:18:5a:34:a8:96:1b:68:d9:
65:c7:48:2f:9e:de:af:5c:25:68:f1:a1:5d:be:15:2a:67:e2:
cc:28:b7:57:7a:53:8a:ec:86:8f:2e:f5:1b:48:6f:30:d6:0b:
71:bc:27:ca:63:f2:7a:d0:7a:3e:24:2a:eb:bc:67:14:24:c9:
28:aa:1c:98:eb:50:89:4e:a6:0d:c1:a4:ca:9a:e8:e1:7a:1e:
2c:ae:22:c7:0c:43:44:5f:84:2b:01:3b:ab:95:21:1f:13:c9:
d5:f3:b6:df:82:a5:10:17:10:67:d2:10:95:02:5a:10:70:1b:
e4:b0:23:c3:c3:8c:30:15:a0:84:07:75:fe:d1:11:62:fe:b0:
fe:89:a0:f3:51:f9:c6:50:6b:84:27:1e:d5:23:56:71:73:61:
14:79:2d:89:31:00:68:bb:71:4b:34:42:a3:b0:05:a4:9e:20:
f9:0c:8b:0d:e8:f5:44:59:a8:8b:9a:2a:49:95:db:a8:75:1f:
e8:01:b5:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePq7kYrJRIwQHrrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTAxNjE0MjYzM1oXDTI1MDExNDE1MjYzM1owLzEtMCsGA1UEAxMk
NWViNjM3NDgtM2ZiYS00YzM5LWFlZTAtYTcwM2QwNWE2MzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiB2MkgJWpDjoOA52ZyuiZeUluyaMpM7uqyC
izP8ykn99oIOe3W+NV/MSxNclbVAT7GRl+GDwBGQHC4lU0BvoFk9qtsiiyynhV/r
bD9WOhBvGs8iKcwR5XGS/aqWZMLFHbl1sx2XEauo+7flXmnVgX5NTIiXmDOBOMiL
UYAbgLwMiqvhfwc4sV4AamxNkqbsnsTRyaZYCmER5PG9DBGBqSWnHliLQa3qZvQn
70NALNBY+jsipRjGGKZW7lxskeMkPS1r/9qdnV53kcOwr3IdhBnIvyoXgYbkhORG
cBfDbki3Rw/XdYRbEN6tw/AXqVPXGWXtZiH2Of+/scxsQ7lTwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEfyzW7x8c82MBt1qxHTPqpVzYn5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNTVmOTY2MjgtODE0YS0z
MzY3LTgyYjQtYTIwNWFhYTBhZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJo1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKrtR/gh/1pqCV+TedIPD3Dj5oyMKDYJfp1AcE49vD1SUwpbQpU+Z6t
w4pPcrdM5HW5nFyea7EHAPaTNHL8b+wYWjSolhto2WXHSC+e3q9cJWjxoV2+FSpn
4swot1d6U4rsho8u9RtIbzDWC3G8J8pj8nrQej4kKuu8ZxQkySiqHJjrUIlOpg3B
pMqa6OF6HiyuIscMQ0RfhCsBO6uVIR8TydXztt+CpRAXEGfSEJUCWhBwG+SwI8PD
jDAVoIQHdf7REWL+sP6JoPNR+cZQa4QnHtUjVnFzYRR5LYkxAGi7cUs0QqOwBaSe
IPkMiw3o9URZqIuaKkmV26h1H+gBtVI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:51 2025 by rpki-client