Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6914d9e3-31ba-31e3-a478-632f70920bef.roa
File: 6914d9e3-31ba-31e3-a478-632f70920bef.roa (raw, json)
Hash identifier: 3uXC6eDbdevc6PSNaUiHUH5FhUmtaOHHdC5DUQtYbxU=
Subject key identifier: 79:D6:2D:5B:86:BD:3F:0E:AA:3F:26:17:6B:6A:C0:3B:60:D3:4E:A1
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48BE072F794F422B40C80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6914d9e3-31ba-31e3-a478-632f70920bef.roa
Signing time: Fri 08 Nov 2024 15:05:01 +0000
ROA not before: Fri 08 Nov 2024 15:05:01 +0000
ROA not after: Thu 06 Feb 2025 15:05:01 +0000
asID: 81
IP address blocks: 152.46.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:8b:e0:72:f7:94:f4:22:b4:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:01 2024 GMT
Not After : Feb 6 15:05:01 2025 GMT
Subject: CN=2ab2fb8f-8801-4e28-87bd-7f3c9c0ce62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:06:fe:40:22:80:38:24:63:6f:ec:4e:04:c4:
9e:65:d8:aa:95:1c:19:4e:2c:1c:5f:3b:0d:d2:df:
17:31:ed:8a:e0:67:97:a3:26:2b:d5:f9:8e:80:84:
69:55:c9:09:68:9e:9d:8d:49:9b:e2:0d:c4:ca:a2:
ac:e2:31:5c:28:83:f5:7d:32:f3:d8:5d:eb:78:a6:
c2:17:74:a5:32:be:68:8d:96:b2:b8:9d:b7:49:83:
27:b4:93:7b:a7:a9:82:49:14:9b:0d:c1:77:95:ee:
a2:03:12:1b:f7:ec:34:7a:06:da:0c:8e:26:e8:01:
db:8b:2e:bc:cb:2a:f8:e1:a2:a1:72:35:ea:a1:26:
82:e9:60:57:50:da:33:9a:e9:1b:31:7e:ae:23:22:
17:b1:f9:1c:55:aa:e9:ed:ed:7b:c0:ff:47:e9:de:
b6:7e:f2:70:1b:00:70:7f:9d:98:db:0b:14:c1:f9:
a6:dc:4b:3a:8b:eb:a2:db:01:e2:27:e1:df:44:e6:
73:20:4f:5e:09:c5:cd:da:5d:84:0e:19:0a:57:df:
93:eb:bc:fb:8c:a5:87:81:1c:c8:08:2e:19:64:48:
bb:18:88:56:fa:d7:78:c8:f6:ce:60:d2:29:fe:9b:
4b:6f:35:d5:11:23:7e:ab:06:c3:47:73:7e:3a:63:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D6:2D:5B:86:BD:3F:0E:AA:3F:26:17:6B:6A:C0:3B:60:D3:4E:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6914d9e3-31ba-31e3-a478-632f70920bef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:0c:a7:2d:81:b0:48:cd:52:61:f4:30:9c:ef:5a:79:f7:01:
48:53:ca:e4:47:11:bc:d0:f3:23:06:e2:88:06:b0:74:e0:ec:
b7:f5:5f:3b:74:3e:36:c8:74:98:5a:9e:45:89:46:27:b9:f1:
cc:bd:de:05:55:85:08:59:66:42:66:87:67:a6:87:92:9e:cb:
7c:1e:1c:38:4e:ef:d7:42:eb:71:95:9c:28:95:0e:6b:15:96:
cc:fa:86:bd:e9:10:e7:7c:18:f4:d5:85:bc:1c:ca:c6:b0:76:
a2:37:c0:1a:6d:2a:e2:62:7b:31:74:d8:99:13:42:24:19:6e:
35:d1:ed:37:a9:26:7d:10:4e:fc:d5:95:ad:ee:0c:13:8c:3b:
4a:95:cf:c4:70:31:da:31:3f:9a:86:22:88:1a:63:c1:b7:44:
c2:42:94:f0:6b:af:93:6a:63:99:fb:3b:df:4e:51:3b:0c:15:
b1:cc:a7:0b:c5:d7:12:fe:9d:9a:4d:7c:01:4b:35:fe:c5:df:
c5:aa:8f:de:eb:a9:89:03:a5:cd:2f:26:53:47:b4:1c:3f:c6:
41:e3:df:24:f3:ea:44:ea:75:59:b1:b1:9b:4b:9c:60:e6:d2:
08:6d:aa:3f:00:e6:35:9e:63:1a:2d:a9:a8:b0:a3:55:f8:4a:
22:71:8f:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP9IvgcveU9CK0DIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDUwMVoXDTI1MDIwNjE1MDUwMVowLzEtMCsGA1UEAxMk
MmFiMmZiOGYtODgwMS00ZTI4LTg3YmQtN2YzYzljMGNlNjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigb+QCKAOCRjb+xOBMSeZdiqlRwZTiwcXzsN
0t8XMe2K4GeXoyYr1fmOgIRpVckJaJ6djUmb4g3EyqKs4jFcKIP1fTLz2F3reKbC
F3SlMr5ojZayuJ23SYMntJN7p6mCSRSbDcF3le6iAxIb9+w0egbaDI4m6AHbiy68
yyr44aKhcjXqoSaC6WBXUNozmukbMX6uIyIXsfkcVarp7e17wP9H6d62fvJwGwBw
f52Y2wsUwfmm3Es6i+ui2wHiJ+HfROZzIE9eCcXN2l2EDhkKV9+T67z7jKWHgRzI
CC4ZZEi7GIhW+td4yPbOYNIp/ptLbzXVESN+qwbDR3N+OmO8MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHnWLVuGvT8Oqj8mF2tqwDtg006hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNjkxNGQ5ZTMtMzFiYS0z
MWUzLWE0NzgtNjMyZjcwOTIwYmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF4Mpy2BsEjNUmH0MJzvWnn3AUhTyuRHEbzQ8yMG4ogGsHTg7Lf1Xzt0
PjbIdJhankWJRie58cy93gVVhQhZZkJmh2emh5Key3weHDhO79dC63GVnCiVDmsV
lsz6hr3pEOd8GPTVhbwcysawdqI3wBptKuJiezF02JkTQiQZbjXR7TepJn0QTvzV
la3uDBOMO0qVz8RwMdoxP5qGIogaY8G3RMJClPBrr5NqY5n7O99OUTsMFbHMpwvF
1xL+nZpNfAFLNf7F38Wqj97rqYkDpc0vJlNHtBw/xkHj3yTz6kTqdVmxsZtLnGDm
0ghtqj8A5jWeYxotqaiwo1X4SiJxj3A=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:23 2025 by rpki-client