Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5cccf84d-7558-3868-bf19-4792c8b66140.roa
File: 5cccf84d-7558-3868-bf19-4792c8b66140.roa (raw, json)
Hash identifier: EsSaFSQJGG/iEi1Keiv2yO7rcIPRzYGeC+KT8WvMYjI=
Subject key identifier: C9:91:9A:7F:C0:4D:FA:21:F7:BA:00:F7:B6:5C:F6:3E:ED:22:5E:11
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48431B697D7495C72CB00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5cccf84d-7558-3868-bf19-4792c8b66140.roa
Signing time: Fri 08 Nov 2024 15:04:57 +0000
ROA not before: Fri 08 Nov 2024 15:04:57 +0000
ROA not after: Thu 06 Feb 2025 15:04:57 +0000
asID: 81
IP address blocks: 152.22.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:84:31:b6:97:d7:49:5c:72:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:57 2024 GMT
Not After : Feb 6 15:04:57 2025 GMT
Subject: CN=4bd3dc68-f72b-432d-b843-b33eb854b05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:cc:fe:71:81:c3:a6:20:ba:ef:75:da:c2:
dc:3a:c8:93:dd:75:34:a3:e2:4d:27:99:d6:e9:05:
68:4a:11:a2:89:94:d4:7b:95:28:a7:e0:90:77:f1:
51:a6:ba:4e:94:cb:64:0b:03:3a:59:7a:4d:c2:d1:
8c:4a:14:c4:3f:81:2d:d2:22:65:78:5c:e9:e3:b4:
40:2d:08:09:d3:2a:d8:b7:47:a6:03:3c:b4:24:15:
1f:19:8a:5e:40:f5:00:3b:35:2a:10:53:65:5b:27:
6b:fa:b9:58:b4:58:cd:09:f2:be:a3:d8:4d:1c:f4:
3e:f3:66:ec:51:32:ac:fd:b2:a7:d4:c6:d1:c0:9e:
09:51:76:42:05:5f:51:ee:36:33:bf:d8:ee:04:53:
e3:9c:a7:ad:aa:bd:3b:b4:ae:f0:75:33:90:c5:40:
06:d7:e8:49:a2:f3:ce:86:91:c8:52:c5:d4:42:46:
43:25:bf:0c:20:96:44:c0:63:10:5d:09:14:73:ec:
74:06:7e:05:0a:93:05:45:a3:26:b2:33:ac:11:67:
18:9c:d6:97:27:cc:93:04:20:cc:bd:71:03:e5:eb:
e2:b1:49:b9:6b:27:79:23:67:d1:03:8f:11:78:55:
12:6b:11:a3:58:96:33:e4:36:0f:1d:3f:74:6a:0c:
84:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:91:9A:7F:C0:4D:FA:21:F7:BA:00:F7:B6:5C:F6:3E:ED:22:5E:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5cccf84d-7558-3868-bf19-4792c8b66140.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:88:ec:e2:74:21:37:af:e3:8e:99:5e:7d:f5:a4:ac:38:49:
69:c4:04:fd:ed:ff:0e:93:3b:10:cc:31:49:c0:67:01:f1:18:
d8:9c:0a:74:b9:91:4c:82:9c:a0:8e:49:14:3a:e7:9b:a9:15:
1d:23:45:7d:3b:5a:c3:78:b5:d9:16:99:c3:4a:31:1b:b6:a5:
87:4f:ad:93:39:b6:f1:99:3d:03:6a:9d:2a:38:53:cc:57:97:
f8:04:56:6c:5d:95:74:42:8b:65:27:42:20:f7:1b:bd:9e:e3:
22:c1:3a:50:c9:5b:69:65:5c:9a:7b:3b:4d:ac:b6:1b:2d:ed:
c5:96:ee:a8:a7:12:45:e1:00:fd:f2:25:7f:4a:79:18:70:90:
17:2a:4f:2f:f6:33:c6:29:06:a2:82:70:4f:34:5b:a2:ac:36:
07:02:de:02:c7:78:35:ba:a1:16:c2:cf:f1:e8:06:2e:05:53:
92:3e:98:f0:bb:d3:47:de:31:c5:66:f1:10:b1:65:2f:00:19:
d7:63:3b:85:77:f4:33:97:0d:1c:f2:f3:8f:64:78:de:8c:9f:
b8:1b:05:2c:0e:45:5a:79:e1:cf:99:92:6c:da:50:d8:b1:bb:
a0:88:0e:90:25:f8:cb:1f:61:a2:29:bb:5e:e7:b6:4c:37:98:
1d:f8:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:03:33 2025 by rpki-client