Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5c198043-5651-3967-9f93-b8608d419d0a.roa
File: 5c198043-5651-3967-9f93-b8608d419d0a.roa (raw, json)
Hash identifier: l19ZswlWU41qO4dvchFvQ/pyWS0XLoCxseOfTPOgo64=
Subject key identifier: 23:9A:3E:A1:FF:60:E0:CC:2A:80:88:2A:7D:28:A7:60:A9:D3:D5:54
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48478B6A7919DC323F580
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5c198043-5651-3967-9f93-b8608d419d0a.roa
Signing time: Fri 08 Nov 2024 15:04:57 +0000
ROA not before: Fri 08 Nov 2024 15:04:57 +0000
ROA not after: Thu 06 Feb 2025 15:04:57 +0000
asID: 81
IP address blocks: 152.22.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:84:78:b6:a7:91:9d:c3:23:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:57 2024 GMT
Not After : Feb 6 15:04:57 2025 GMT
Subject: CN=069e56e4-2e32-4c4e-803b-7707b8a6bafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:34:b4:85:6a:16:fa:4a:59:10:f0:50:4c:
ce:5d:e8:4b:ee:d7:8b:2d:f3:b2:1a:2e:76:ee:8f:
7a:f7:3b:e4:6f:c7:e3:dd:79:ec:dc:b7:5a:87:3b:
95:37:12:8d:4e:81:4e:fe:e0:99:1c:81:12:c2:b2:
bf:f8:ee:64:d9:22:28:fe:44:54:f4:5e:8f:f6:f4:
d3:ea:64:b5:6c:78:19:c4:a0:aa:e8:92:24:e3:98:
34:e9:e0:60:d7:b9:ad:e9:37:40:9c:f6:e9:b4:7b:
47:46:7a:5c:20:f7:50:36:52:24:db:8c:bf:f6:43:
87:69:43:6d:0a:92:a2:8b:0a:26:f4:7d:98:5e:6d:
21:5e:37:2c:2d:be:5a:23:34:32:d8:91:32:78:c5:
4a:8e:c1:1f:7b:f7:39:57:b0:2b:92:b7:6b:00:d5:
aa:6a:43:ca:2b:76:a9:dc:68:23:0c:48:ff:9e:3d:
a2:16:92:c5:12:52:21:11:1b:2e:35:9e:85:3f:1b:
bd:8c:4b:07:df:36:18:cc:2b:b5:fe:68:be:30:85:
f5:68:a9:cc:d8:ee:d2:a9:53:bf:71:82:fc:5e:b0:
cc:7f:7a:3c:79:51:73:b7:5e:02:77:5f:77:6c:dd:
ad:8d:c2:0a:ec:bc:2e:28:33:21:14:4f:4e:f2:af:
68:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9A:3E:A1:FF:60:E0:CC:2A:80:88:2A:7D:28:A7:60:A9:D3:D5:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5c198043-5651-3967-9f93-b8608d419d0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:88:d9:65:02:e7:b3:da:a2:19:ce:d8:4f:c6:56:ad:46:de:
9f:d6:36:9d:cd:93:67:ae:61:47:ac:22:30:94:bb:8b:2f:8d:
9d:88:f6:b5:3e:43:bf:7b:08:0f:94:3f:fe:5e:e7:2c:e5:30:
47:f5:79:a7:4c:69:32:fa:31:d2:da:35:55:a4:23:49:c3:b0:
c2:e6:f4:46:5a:31:a8:87:b6:4f:7c:8f:79:0e:b1:f6:5a:91:
78:82:e1:39:f2:c4:0f:c1:55:a5:e6:7a:1c:76:fe:6f:84:37:
1d:1f:5e:68:76:d0:1e:ba:e6:aa:fb:30:d4:01:7f:83:5f:13:
4c:53:ec:82:d4:18:0c:a1:1a:95:d5:e6:b5:f2:01:57:d7:62:
a5:4c:f5:6c:43:6c:a8:ca:e5:f5:bb:f7:8a:53:a8:87:c9:5b:
72:0e:4b:cd:cb:a9:30:ea:0f:e4:45:de:00:d0:b4:80:05:af:
27:a8:c5:d6:13:c3:d8:ab:a7:ef:37:42:07:f5:bc:ca:38:d0:
e8:79:04:52:79:a5:85:fb:a5:69:0f:f3:c4:6d:a8:99:a3:77:
7a:ea:05:10:69:1b:f1:ee:46:44:13:a6:69:ff:fb:fc:2c:4a:
5f:4a:cf:d4:61:71:02:a6:fe:8a:a9:89:26:89:43:f3:b0:59:
b0:7a:33:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:39 2025 by rpki-client