Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6225d5f0-51ea-35fa-9f1c-fd599c57c422.roa
File: 6225d5f0-51ea-35fa-9f1c-fd599c57c422.roa (raw, json)
Hash identifier: 47F0DWD1NlhwKBKlf8s5TKZwYrqZHxaExydU7Hb9G6I=
Subject key identifier: 10:22:35:FC:EA:F8:A0:05:7E:11:A6:A1:49:26:73:5D:BC:06:05:8D
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48D581C698B89EF725160
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6225d5f0-51ea-35fa-9f1c-fd599c57c422.roa
Signing time: Fri 08 Nov 2024 15:05:01 +0000
ROA not before: Fri 08 Nov 2024 15:05:01 +0000
ROA not after: Thu 06 Feb 2025 15:05:01 +0000
asID: 81
IP address blocks: 152.46.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:8d:58:1c:69:8b:89:ef:72:51:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:01 2024 GMT
Not After : Feb 6 15:05:01 2025 GMT
Subject: CN=eafd86f2-0788-47dd-8f9a-85237011708a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:d1:80:fe:2a:f9:72:15:50:ba:fa:77:77:
c0:82:75:61:2f:98:77:c2:14:14:3c:e2:8e:99:08:
c6:89:eb:2f:80:b5:a5:50:d1:1f:dc:a4:41:8a:da:
2a:66:04:60:d8:55:44:99:0e:b3:6f:1f:d1:a6:43:
83:01:f0:35:47:91:52:93:c1:d8:5a:1f:61:73:c5:
af:69:89:5a:27:cf:01:9a:9e:d6:6e:fc:64:fb:94:
4f:29:ab:79:bd:a4:0f:4b:84:7b:ea:27:f1:fe:34:
28:89:b8:bc:fe:d6:28:64:d5:36:52:cc:17:ff:82:
ba:5f:2e:5d:8f:5b:f3:0d:fb:a8:17:a3:2c:dd:c5:
ee:d2:ee:79:17:6d:6d:08:46:fc:19:ab:34:a9:f1:
df:67:dc:90:33:1c:07:8e:c9:4c:4b:f8:c5:b0:15:
2d:75:ea:c8:9f:4a:5b:9c:f3:17:d5:6b:4c:41:ea:
83:6c:64:64:22:a5:11:34:65:42:c9:bb:f2:0a:c2:
8b:51:1b:be:e8:2f:d3:a8:2d:da:cd:57:3e:6c:88:
20:c7:43:ac:11:d0:01:a8:27:eb:ae:ce:bd:15:d1:
27:a3:fe:06:1c:9b:d8:f0:d4:9e:af:22:00:d5:93:
28:92:b7:56:88:87:8c:e7:bf:21:9e:fb:3e:97:93:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:22:35:FC:EA:F8:A0:05:7E:11:A6:A1:49:26:73:5D:BC:06:05:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6225d5f0-51ea-35fa-9f1c-fd599c57c422.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:cf:b9:54:bf:e5:fc:80:4d:fa:cd:09:93:6c:c6:2f:9a:e2:
cf:c8:2f:a1:de:cc:df:38:17:27:14:7e:6f:fb:46:63:9c:e6:
69:8c:56:96:e6:79:c0:08:bb:1f:ba:7e:b8:04:58:5b:74:0b:
91:68:08:10:3b:c8:72:72:c5:a1:74:fd:a4:8d:e4:e4:f6:c5:
f0:ec:24:a1:ff:7d:0f:52:4b:63:65:b0:6f:9f:42:ed:04:f8:
2a:c4:56:56:ac:0a:3e:fa:45:88:ef:18:3c:aa:d6:d4:a8:54:
a6:ad:62:f5:2c:e1:29:45:06:9a:61:ca:b1:22:cf:20:9c:c6:
ba:af:3c:25:11:7c:18:ee:7e:ec:93:c5:b1:6a:8d:ed:ea:9e:
ef:9d:65:e1:fb:4c:34:3a:0b:ed:03:8b:61:84:b5:ee:30:de:
a3:3b:f2:60:9c:84:59:96:3e:a5:fc:06:d6:51:67:13:a9:0e:
9f:2b:cc:b7:3f:44:6a:b6:fc:61:99:2f:94:de:18:d7:06:75:
3c:26:24:9f:3e:d4:fd:fd:7b:a0:b6:fc:52:1f:85:bf:f0:3b:
a7:f1:07:16:bb:97:e1:68:09:fb:24:3e:4f:75:aa:68:06:2b:
f6:3d:f2:da:63:f0:0f:8d:94:a8:f1:b8:43:ba:34:12:d2:a9:
64:9b:0b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:27:40 2025 by rpki-client