Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/62a231b6-575f-3c0f-aff1-1e74a85597ff.roa
File: 62a231b6-575f-3c0f-aff1-1e74a85597ff.roa (raw, json)
Hash identifier: IjMmEIXE1P2M8zhN2ORprD47f3NQUGokKeXGCEByXXk=
Subject key identifier: 2F:04:F1:43:79:6B:DE:58:62:AB:B2:B9:CD:6C:3F:21:73:62:2D:94
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF4816C1D4D12624754D800
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/62a231b6-575f-3c0f-aff1-1e74a85597ff.roa
Signing time: Fri 08 Nov 2024 15:04:56 +0000
ROA not before: Fri 08 Nov 2024 15:04:56 +0000
ROA not after: Thu 06 Feb 2025 15:04:56 +0000
asID: 81
IP address blocks: 152.49.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:81:6c:1d:4d:12:62:47:54:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:56 2024 GMT
Not After : Feb 6 15:04:56 2025 GMT
Subject: CN=733b347f-0742-46c6-b445-022eeb2a23bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e4:98:ed:d9:05:f3:e7:df:27:33:25:59:24:
2a:88:05:09:ff:21:37:c4:75:06:9b:b7:7c:b0:3e:
e3:97:c5:28:01:00:e4:19:0a:1a:26:91:05:17:e5:
d5:ad:5d:bb:45:f7:c7:fd:d0:45:68:26:32:bc:27:
e1:5b:c7:96:32:1e:fb:58:de:37:b1:44:be:1b:6a:
73:de:1c:5d:49:c0:1c:6e:73:57:01:e8:95:6a:ab:
05:39:e5:c4:72:b5:6a:eb:8c:fe:3b:25:ac:ff:71:
01:14:a2:e7:73:d3:5b:44:fc:08:a7:55:97:c1:fd:
71:f4:b4:70:99:cc:8f:54:2a:6c:8d:26:32:6f:7d:
e8:66:37:b7:51:95:13:e0:44:31:4c:14:97:b6:1e:
ce:91:1a:3f:a7:82:ad:0a:ae:87:d9:b6:be:6c:37:
4a:aa:dc:81:2e:70:40:d4:bb:b6:bd:70:99:f9:9c:
20:33:2a:7f:0b:e7:3f:a0:25:f2:8a:40:ca:52:ab:
9b:9c:04:4d:89:d6:ae:d2:81:12:43:12:1b:e8:4d:
e7:74:ed:32:af:7f:e1:17:39:9e:23:90:61:58:69:
9c:78:a5:02:30:f1:b2:08:34:51:8e:fc:e1:45:13:
ad:c0:fe:fb:48:b5:8d:cd:06:e5:04:26:8c:85:67:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:04:F1:43:79:6B:DE:58:62:AB:B2:B9:CD:6C:3F:21:73:62:2D:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/62a231b6-575f-3c0f-aff1-1e74a85597ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:12:15:04:7e:e1:c4:31:41:b6:05:8f:f7:41:c7:2f:41:64:
38:93:09:56:80:6a:14:95:90:f2:42:72:e1:49:da:95:dc:75:
92:3e:78:07:ec:54:33:2b:9f:1f:f9:a4:e3:a2:15:15:00:81:
a3:ad:a5:1d:eb:c5:20:5c:79:d8:77:c4:0c:41:5a:bb:a7:70:
d6:33:72:40:ea:c0:18:57:27:af:06:69:3d:cd:41:e1:25:93:
dd:04:ea:00:ea:0c:3a:76:ed:c3:25:f4:c1:bc:6c:14:c4:40:
8e:96:75:8c:4d:65:90:ef:ae:49:19:c2:6e:e1:f9:09:bc:28:
71:3a:19:0c:d7:f5:8b:0f:94:52:95:00:ca:b9:3f:99:29:9e:
11:5d:8c:78:29:af:e3:5d:43:9a:55:f7:0a:2b:b3:04:16:0f:
eb:80:3a:71:da:ec:d3:ee:4f:52:30:ac:31:51:d0:f7:0f:f7:
ba:b1:7a:bf:c8:1a:c8:1d:9f:d7:13:4d:70:fe:51:09:e4:cc:
26:c1:a5:42:cd:1a:ac:43:97:95:ed:62:55:3e:a3:64:48:68:
b2:88:8b:a4:d9:56:49:72:1a:25:31:0f:5b:58:ee:17:92:9a:
63:6e:bd:ce:d6:38:b3:c0:b8:57:2d:8a:e3:a8:39:75:69:8a:
12:be:0a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:48 2025 by rpki-client