Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5675a0cc-3b49-3c00-aab1-3660765f11b1.roa
File: 5675a0cc-3b49-3c00-aab1-3660765f11b1.roa (raw, json)
Hash identifier: tU7nDz1aeKfCFsBo1e/ZRLmP13NLpCXurEBjLHaCp9w=
Subject key identifier: A6:25:61:40:9F:6E:D1:25:60:36:2F:61:0D:24:A6:DB:D7:5A:5F:1C
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBCFD0D9D31E18F7B5700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5675a0cc-3b49-3c00-aab1-3660765f11b1.roa
Signing time: Wed 16 Oct 2024 14:26:34 +0000
ROA not before: Wed 16 Oct 2024 14:26:34 +0000
ROA not after: Tue 14 Jan 2025 15:26:34 +0000
asID: 81
IP address blocks: 152.45.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:bc:fd:0d:9d:31:e1:8f:7b:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:34 2024 GMT
Not After : Jan 14 15:26:34 2025 GMT
Subject: CN=2278e36b-4c0b-471e-923a-974f60f15a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:98:ab:f9:b4:8b:cc:e9:0b:1f:aa:09:97:
dc:ae:19:22:b3:b5:ba:75:cf:45:7b:cc:fb:71:28:
52:8d:58:fb:e3:f2:6b:28:69:2b:b6:bd:f5:63:79:
08:fa:b5:98:95:02:1c:e0:87:e7:40:3a:96:51:e5:
36:ef:5d:eb:87:02:a6:fd:9a:d0:4d:dc:e5:b6:96:
cf:c1:a7:2b:da:06:2b:5a:8b:64:0c:b6:9e:fb:1b:
a0:18:f9:ef:23:4d:3b:73:70:39:ab:f4:f8:b6:df:
2b:39:0d:47:39:0e:84:ed:0a:f6:d7:27:88:ea:62:
00:0c:23:e2:df:24:bb:5d:75:5e:be:05:c7:0d:f3:
e1:d6:10:79:df:56:5f:21:2f:8f:7c:40:51:7e:94:
02:ed:a6:42:09:de:9d:2c:e6:ff:33:1f:fa:95:bc:
41:e2:10:15:1c:72:ed:8e:e5:5b:2c:6c:b9:d4:99:
b0:0e:25:28:10:d5:de:24:70:8a:44:04:07:17:40:
71:50:07:70:51:86:a9:15:2d:ea:56:aa:6e:d8:8e:
24:21:9d:03:77:0d:db:b0:4d:2f:20:b4:7d:ff:74:
d4:d4:4e:b6:3f:bd:e8:d4:7d:de:33:74:d4:11:03:
80:e1:c5:c3:12:c5:00:66:61:ab:1c:32:a0:7c:b8:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:25:61:40:9F:6E:D1:25:60:36:2F:61:0D:24:A6:DB:D7:5A:5F:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5675a0cc-3b49-3c00-aab1-3660765f11b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.45.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:89:d5:11:af:e4:c9:1c:69:ac:60:fa:62:05:2f:1d:9e:76:
ba:41:f8:f1:93:29:94:ae:62:e6:28:d1:ff:fb:ce:cc:e4:11:
10:ad:00:50:51:d0:4b:7b:5f:9c:c4:bd:b3:86:35:eb:2f:20:
e2:fa:94:51:4d:ea:30:55:d8:50:7e:38:8c:6f:4e:cc:bf:d3:
e2:04:12:6f:79:6d:1e:93:c5:32:2e:4d:73:70:b7:87:51:5e:
fb:4f:c4:b0:38:a0:b4:9a:22:19:26:d6:3a:02:57:45:02:5b:
65:e0:25:57:b0:9f:66:a1:44:78:06:5f:6d:52:af:4e:24:f4:
da:21:6e:4f:be:52:6e:c9:8e:97:02:4a:b5:61:93:bb:80:09:
1e:12:94:18:39:95:a1:3f:68:99:f8:cb:4a:d5:f4:71:6c:b9:
3d:5a:94:2e:cf:74:f3:31:77:48:51:6c:8f:d3:00:00:9e:9f:
2e:09:bd:43:3d:5b:5d:56:c2:2d:5a:75:80:7a:ba:c0:18:02:
31:69:74:99:59:be:ac:8a:cf:e9:be:72:2e:78:cc:a4:13:c1:
35:d9:eb:5a:f8:a4:18:66:e8:93:78:27:36:07:49:d0:5e:7c:
57:2d:86:11:70:17:e5:65:38:86:11:f1:cd:b1:78:a3:d9:ec:
75:d6:24:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePq7z9DZ0x4Y97VwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTAxNjE0MjYzNFoXDTI1MDExNDE1MjYzNFowLzEtMCsGA1UEAxMk
MjI3OGUzNmItNGMwYi00NzFlLTkyM2EtOTc0ZjYwZjE1YTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEeYq/m0i8zpCx+qCZfcrhkis7W6dc9Fe8z7
cShSjVj74/JrKGkrtr31Y3kI+rWYlQIc4IfnQDqWUeU2713rhwKm/ZrQTdzltpbP
wacr2gYrWotkDLae+xugGPnvI007c3A5q/T4tt8rOQ1HOQ6E7Qr21yeI6mIADCPi
3yS7XXVevgXHDfPh1hB531ZfIS+PfEBRfpQC7aZCCd6dLOb/Mx/6lbxB4hAVHHLt
juVbLGy51JmwDiUoENXeJHCKRAQHF0BxUAdwUYapFS3qVqpu2I4kIZ0Ddw3bsE0v
ILR9/3TU1E62P73o1H3eM3TUEQOA4cXDEsUAZmGrHDKgfLiBXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKYlYUCfbtElYDYvYQ0kptvXWl8cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNTY3NWEwY2MtM2I0OS0z
YzAwLWFhYjEtMzY2MDc2NWYxMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHWJ1RGv5Mkcaaxg+mIFLx2edrpB+PGTKZSuYuYo0f/7zszkERCtAFBR
0Et7X5zEvbOGNesvIOL6lFFN6jBV2FB+OIxvTsy/0+IEEm95bR6TxTIuTXNwt4dR
XvtPxLA4oLSaIhkm1joCV0UCW2XgJVewn2ahRHgGX21Sr04k9Nohbk++Um7JjpcC
SrVhk7uACR4SlBg5laE/aJn4y0rV9HFsuT1alC7PdPMxd0hRbI/TAACeny4JvUM9
W11Wwi1adYB6usAYAjFpdJlZvqyKz+m+ci54zKQTwTXZ61r4pBhm6JN4JzYHSdBe
fFcthhFwF+VlOIYR8c2xeKPZ7HXWJB8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:33 2025 by rpki-client