Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6111178e-165c-3923-b9fc-d848c022e7e4.roa
File: 6111178e-165c-3923-b9fc-d848c022e7e4.roa (raw, json)
Hash identifier: 6S6d7XOEzmuvWeWCQKbp/ujktXFwP1E8nXr5hSNtp8Q=
Subject key identifier: 66:25:17:8D:DB:97:30:7C:1B:5D:D5:6B:6E:F3:CE:0C:C5:A1:C3:61
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBE0B8BB1635270810600
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6111178e-165c-3923-b9fc-d848c022e7e4.roa
Signing time: Wed 16 Oct 2024 14:26:35 +0000
ROA not before: Wed 16 Oct 2024 14:26:35 +0000
ROA not after: Tue 14 Jan 2025 15:26:35 +0000
asID: 81
IP address blocks: 152.46.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:be:0b:8b:b1:63:52:70:81:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:35 2024 GMT
Not After : Jan 14 15:26:35 2025 GMT
Subject: CN=10a95396-2bf6-4aac-9f5b-945eb96e6bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:40:35:a8:82:8f:c7:22:6a:ba:a5:f2:56:
df:56:17:7e:87:b0:cb:ed:36:74:08:5f:4d:08:50:
f7:7f:2b:69:f4:b9:07:cc:ab:77:f6:ab:c9:cf:e8:
18:8e:38:57:1f:81:1d:dc:9e:79:d8:24:93:5b:f9:
f8:e3:74:53:a0:38:fe:d8:89:21:f3:ba:93:37:5c:
c1:8e:f5:ae:0d:56:4f:1a:d7:22:6b:e5:a5:9b:f2:
28:11:a4:40:37:a4:38:98:03:75:63:e6:d2:3d:f0:
c8:5c:56:08:16:7b:c0:2a:3b:2c:66:89:df:c1:e4:
e8:34:d4:82:bd:6f:12:43:61:63:0c:6c:02:61:17:
e0:8d:cd:2a:42:64:82:66:fa:8c:76:3d:d6:8e:30:
c6:6b:4e:7e:fe:68:76:51:bf:57:99:10:b6:6f:de:
46:5a:52:f4:17:9c:60:57:53:98:19:33:f0:c3:58:
81:a9:b1:2e:ef:d4:26:fa:50:ea:8b:f6:5c:d7:b6:
f7:df:dd:ea:c3:2b:2c:b9:76:b9:d2:11:96:c4:5f:
3b:2d:28:ca:d3:80:aa:10:1e:33:6b:03:24:db:6c:
8c:87:81:3c:39:ec:fb:12:ee:dd:a9:9f:73:e1:27:
05:d7:d4:f8:c4:d6:b2:dc:e5:3d:89:3d:2d:29:70:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:25:17:8D:DB:97:30:7C:1B:5D:D5:6B:6E:F3:CE:0C:C5:A1:C3:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6111178e-165c-3923-b9fc-d848c022e7e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:8b:53:da:59:9d:c3:ec:59:0c:fe:2f:ef:9f:c6:c2:14:f7:
5f:15:7a:d0:cc:86:f0:6f:3e:1d:53:20:1b:78:7f:ed:c2:1b:
b9:f0:8d:6b:67:6e:7d:e5:c2:49:28:3d:b9:f2:5a:8d:56:49:
9a:41:cd:a9:a1:13:c3:2c:78:75:0a:4f:43:89:75:87:0e:61:
ab:b9:3d:5b:c0:e6:bd:4c:38:cd:0d:dc:c0:86:b7:55:34:f5:
38:25:5e:80:26:32:3b:58:90:c1:d0:3d:57:1d:94:08:c9:93:
ad:72:30:c5:1e:fd:b3:ee:ed:9d:bd:7c:63:b8:95:8f:3f:d0:
b2:35:44:82:f2:dd:c0:3e:82:ee:ed:59:46:19:2b:e2:26:66:
da:e8:c3:da:58:76:42:94:e2:61:e7:e3:cf:07:02:0d:35:eb:
8a:6b:72:25:5b:21:2f:a9:a9:3c:2a:af:2e:70:8c:56:d1:16:
da:ba:0a:8b:c7:5c:43:23:49:71:31:5d:40:15:e3:96:2e:65:
22:e3:00:f3:a0:d6:34:57:b5:b4:e5:dc:a5:1e:0a:e3:ad:4c:
c9:20:94:3d:2e:c5:4c:46:1a:50:fd:dc:24:1f:73:21:f5:7d:
f3:62:7c:ca:46:85:7c:db:78:6b:cc:77:88:04:51:a1:16:c4:
cc:b9:a5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:16:47 2025 by rpki-client