Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5f3ca128-88b1-3b2a-8df3-d6bdfc7d0f6e.roa
File: 5f3ca128-88b1-3b2a-8df3-d6bdfc7d0f6e.roa (raw, json)
Hash identifier: jvznqMbAQS6gbLAvmmLajwjzAh2pKM8RJfbwDVq218A=
Subject key identifier: 8D:A1:D4:C8:75:43:17:FD:06:81:5F:30:1F:62:2C:B3:CD:10:95:9E
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABB7CF175B521461B0D700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5f3ca128-88b1-3b2a-8df3-d6bdfc7d0f6e.roa
Signing time: Wed 16 Oct 2024 14:26:32 +0000
ROA not before: Wed 16 Oct 2024 14:26:32 +0000
ROA not after: Tue 14 Jan 2025 15:26:32 +0000
asID: 81
IP address blocks: 152.14.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:b7:cf:17:5b:52:14:61:b0:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:32 2024 GMT
Not After : Jan 14 15:26:32 2025 GMT
Subject: CN=ec0724d5-2e75-47a8-bfc8-feffb1b0b279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:be:47:f4:89:f8:7a:70:29:14:d4:2d:44:
52:6f:1e:f2:b2:e5:b1:20:21:de:81:4f:7f:17:74:
62:33:6b:88:bb:2e:c4:0c:9b:78:c0:1d:e7:93:d9:
eb:c1:d6:74:3b:72:0c:da:28:8c:33:19:01:c7:5b:
2e:74:1f:48:10:73:fd:cc:46:93:cf:a6:5c:89:0c:
23:62:c3:90:0b:45:23:c8:2f:29:c5:03:18:b6:46:
12:39:4f:c8:79:98:73:e5:54:84:73:d3:4e:35:c0:
d7:63:6b:0a:7e:95:3e:f6:0e:f3:06:a7:b4:4b:01:
c1:92:83:c4:0d:e5:35:dd:90:ad:3b:ec:f5:2a:ae:
76:80:0e:fb:94:04:71:51:0a:2f:3e:79:07:77:3e:
44:95:00:5f:0b:35:a3:44:fd:37:67:f2:86:c2:02:
11:82:45:3e:0c:12:f8:3e:d9:d9:1b:07:b9:12:b8:
70:81:b2:0f:92:93:bb:09:cb:13:14:54:d4:59:1a:
c1:fd:ae:f7:2b:d7:2b:aa:3c:06:6a:a8:40:c8:71:
1b:be:8d:3a:06:83:59:c9:b8:52:b7:12:ae:14:55:
e3:d7:bd:24:36:bb:33:8c:e2:59:34:77:45:0e:0f:
81:9a:6e:b4:e5:a1:06:7f:59:48:8c:b4:31:7d:4e:
81:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A1:D4:C8:75:43:17:FD:06:81:5F:30:1F:62:2C:B3:CD:10:95:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5f3ca128-88b1-3b2a-8df3-d6bdfc7d0f6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.14.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:32:49:d3:c9:5d:13:20:00:ed:be:6b:20:20:52:c8:bc:a8:
14:d1:73:8c:f0:ba:84:9d:88:58:43:f9:af:99:06:87:a5:92:
23:bb:7e:64:29:cd:c3:b4:72:b3:1c:3e:82:1c:cc:eb:55:8c:
c1:dd:ff:ce:b8:fc:fd:94:90:a3:47:50:88:39:f2:95:52:fb:
2d:be:fb:3a:d8:5e:23:05:4a:4f:c6:e9:f3:b6:aa:12:7a:7d:
98:a7:9b:12:6f:e2:1a:73:c5:53:01:81:77:3a:59:b6:ab:fe:
df:de:97:6e:c0:f8:ce:cd:ad:44:7e:72:74:6d:09:76:99:32:
ab:7c:16:27:54:08:44:38:0a:da:8f:39:a4:91:13:28:36:28:
81:f3:6d:aa:80:ea:d4:16:3c:04:0e:12:93:17:a9:45:ca:44:
c5:cd:c9:dc:3f:75:1a:e1:3e:5f:2b:62:43:15:de:f2:76:b5:
76:aa:bc:b6:5f:bd:e0:98:b8:74:8d:32:f6:47:2e:c0:77:f6:
f3:09:5f:4d:a0:bf:49:dc:fb:18:81:fa:a5:7b:0b:ea:85:d5:
17:e0:f9:dd:87:65:f2:a5:d9:95:74:40:0f:62:8a:2b:ba:ca:
a7:aa:07:98:49:7a:a9:ce:6a:54:98:d8:21:63:c4:67:ab:83:
e5:d4:3e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:48 2025 by rpki-client