Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6b596d37-1f09-3e26-b4aa-6119a3b68beb.roa
File: 6b596d37-1f09-3e26-b4aa-6119a3b68beb.roa (raw, json)
Hash identifier: h7ZYp6R4YeUeN/Ba5ZS8YlmeZNV4ISpX5QxHFO7vUqw=
Subject key identifier: 8E:AC:5E:B3:F6:04:31:BE:69:4C:DF:46:C5:56:4E:6C:0F:5A:CB:29
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABB9C8D5BC55F3B7926980
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6b596d37-1f09-3e26-b4aa-6119a3b68beb.roa
Signing time: Wed 16 Oct 2024 14:26:33 +0000
ROA not before: Wed 16 Oct 2024 14:26:33 +0000
ROA not after: Tue 14 Jan 2025 15:26:33 +0000
asID: 81
IP address blocks: 152.22.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:b9:c8:d5:bc:55:f3:b7:92:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:33 2024 GMT
Not After : Jan 14 15:26:33 2025 GMT
Subject: CN=cac050f5-7426-4698-b0bd-4b832ef43d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ab:24:7c:98:9e:fe:49:00:39:15:34:54:9a:
00:b5:4e:fe:6e:1c:4b:9a:ad:97:c9:42:84:4f:6f:
84:72:23:39:8f:1d:77:06:ad:2d:2e:34:4e:d7:7b:
25:c0:1c:ef:21:86:b7:46:9a:68:87:f1:05:eb:98:
dc:6b:35:4e:4c:d5:b9:1d:99:2e:a9:c8:75:52:de:
d5:7b:6c:9b:a3:c1:00:08:2c:a1:f7:7a:9e:49:44:
32:ba:cf:93:e3:9d:d8:97:5b:d1:b3:48:56:fc:5b:
0f:c5:5a:da:dc:6e:a6:14:a0:45:8e:8a:8a:f6:44:
62:d2:d8:21:74:9a:82:8b:1c:f3:7a:f7:e0:63:30:
03:ac:cc:45:ed:8e:87:55:53:13:b6:7e:41:24:82:
a2:6a:6b:5f:9b:43:49:a6:ce:a4:8d:5d:b0:26:df:
62:48:ab:3d:bf:6d:43:ec:50:e1:16:58:7e:2b:61:
f2:cc:ca:7d:0b:a9:21:5b:e5:9f:62:53:7b:70:44:
d3:60:fe:79:25:d3:c0:ca:89:6b:b2:3d:2c:27:4c:
59:c7:05:00:c3:35:2d:39:55:48:90:10:d7:24:69:
94:1d:f7:90:b3:a5:71:5b:e2:05:aa:1f:43:a0:19:
4d:af:89:6b:bc:16:f8:ea:b1:5f:2d:21:7f:86:7d:
57:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AC:5E:B3:F6:04:31:BE:69:4C:DF:46:C5:56:4E:6C:0F:5A:CB:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6b596d37-1f09-3e26-b4aa-6119a3b68beb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:9f:31:b2:9b:f4:dc:4a:64:c8:ac:9b:04:ba:c3:48:41:72:
96:ee:e3:52:cd:a7:ca:ed:79:23:37:74:7c:fb:18:cc:8d:0a:
40:c8:1f:6a:ff:5c:39:21:2a:1c:89:6e:95:a4:de:91:3a:81:
3d:c5:db:76:8b:69:5c:dd:af:dc:12:8f:5a:3f:21:5e:be:1d:
c6:89:d0:92:f8:5c:00:fd:51:fc:81:25:84:96:8c:b1:04:b4:
01:6a:2c:9d:fe:74:58:21:79:b3:94:69:9e:50:83:f5:0c:41:
aa:05:7f:e9:97:00:51:23:d1:ff:12:d5:e4:a4:40:d4:97:07:
77:7e:80:4b:2e:0c:02:63:36:1d:8c:68:af:0f:5d:04:dd:2e:
df:68:3b:a7:03:ac:3f:55:d2:ac:57:6b:d3:66:ea:fe:d4:e0:
8c:c1:9a:60:0b:76:58:b9:88:7e:73:73:b4:1b:9a:ec:51:e2:
2a:92:26:7b:3a:12:15:93:1a:70:e9:47:da:70:37:9e:11:30:
c3:57:da:ec:36:d4:c5:d5:8e:28:a6:84:6d:df:c8:8c:6d:e4:
30:06:35:b7:7b:97:68:08:21:ae:bb:2b:69:cc:58:80:ff:62:
ae:e9:45:65:61:1b:15:a9:a9:63:4a:e2:75:1e:9e:29:52:dc:
77:f6:86:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:12 2025 by rpki-client