Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6c29812e-3de9-3013-bbd2-96b46cc1ffa6.roa
File: 6c29812e-3de9-3013-bbd2-96b46cc1ffa6.roa (raw, json)
Hash identifier: 8M4fTG7LozG1dtUmCzWQSl2A/Z6F8E/VjR1+R2XNn9I=
Subject key identifier: 83:B0:00:3F:11:F0:61:F4:EF:88:F9:38:8D:03:FA:74:28:18:A6:57
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48CBDA5617CE59AA6A080
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6c29812e-3de9-3013-bbd2-96b46cc1ffa6.roa
Signing time: Fri 08 Nov 2024 15:05:01 +0000
ROA not before: Fri 08 Nov 2024 15:05:01 +0000
ROA not after: Thu 06 Feb 2025 15:05:01 +0000
asID: 81
IP address blocks: 152.46.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:8c:bd:a5:61:7c:e5:9a:a6:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:01 2024 GMT
Not After : Feb 6 15:05:01 2025 GMT
Subject: CN=1703ce18-2ab2-4a11-b837-d23aabbe2498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:da:f2:76:b0:64:01:e3:59:d0:bf:9b:ad:
9a:31:47:b2:ec:b8:2d:54:a1:39:71:8b:7b:06:69:
aa:09:2f:4b:1f:5b:83:28:cb:5e:56:7f:a3:3e:37:
50:11:d6:4d:74:d2:4d:b2:a2:e5:e7:ab:51:10:4d:
7f:78:56:1c:1a:9c:e4:f4:ec:c1:cb:b1:8d:af:c7:
36:c2:5f:96:c4:96:fb:6c:a4:7f:3f:54:a0:78:0b:
4c:e8:8e:e2:ec:e0:6f:66:9a:50:e2:7d:22:5a:88:
ad:b3:61:e4:02:33:1c:e7:6c:ef:e5:39:53:2f:de:
46:aa:1f:03:a9:bf:46:21:75:a2:1b:b5:20:e5:6a:
ea:23:a9:66:54:b2:40:37:f9:57:34:38:a5:df:43:
ef:ec:bc:a8:fc:f4:e9:8b:0f:82:d4:1f:13:00:ff:
53:4d:8a:e9:b9:f6:83:8c:eb:48:ec:86:a9:e8:cd:
a3:0c:00:68:98:58:91:63:a4:ea:66:db:06:ee:01:
66:99:3d:cc:6f:67:31:82:b6:ae:91:04:b8:1c:c7:
a1:72:f0:35:03:f8:ac:38:d3:e4:ff:27:6a:95:35:
f9:ac:cb:ce:11:d3:a6:73:29:b8:4b:33:8e:94:28:
3c:4c:73:25:bc:1d:55:e0:ad:9a:b6:7a:6a:37:d7:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B0:00:3F:11:F0:61:F4:EF:88:F9:38:8D:03:FA:74:28:18:A6:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6c29812e-3de9-3013-bbd2-96b46cc1ffa6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:61:da:87:a3:46:b7:ad:63:17:3a:ee:26:fa:7e:cc:24:ce:
78:7e:a1:9e:41:f7:1b:f3:26:37:88:b9:e5:d8:ee:6d:25:1b:
03:2d:9d:e5:b8:ed:a5:a1:91:f0:d1:3f:53:a1:44:4b:88:fd:
e6:82:be:3a:20:4c:82:44:25:60:9c:49:4b:2f:76:d1:4d:30:
c7:7e:c6:2a:eb:82:16:84:4e:a7:49:1a:25:48:ee:19:bc:47:
dc:4b:ea:50:44:4f:65:51:99:36:86:6f:cb:57:c9:61:cc:aa:
b9:bd:c2:e3:bf:04:c4:c1:ed:c0:9e:29:11:70:a1:e2:25:3b:
48:ff:9d:0e:4f:4e:a6:e7:50:97:eb:13:1b:bd:ec:7a:9a:fc:
66:65:a7:2c:3a:e2:c1:87:da:fb:72:2d:c1:ad:fd:8b:b2:ab:
9f:ac:80:f4:e6:20:a6:15:12:de:79:5a:53:ba:ce:f2:48:35:
c5:33:1c:c1:81:fd:0f:c8:03:e4:bc:7e:7b:d2:d5:2d:03:8a:
81:c3:b7:37:fa:16:8c:cc:97:7a:9a:dc:f1:5c:84:4e:ef:75:
b0:f5:74:aa:29:99:42:9a:a9:77:db:78:9b:63:97:e7:85:e6:
8b:93:25:b9:d8:1a:5b:6f:e8:b3:08:5e:1c:06:f4:2c:08:5c:
a1:1d:23:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP9Iy9pWF85ZqmoIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDUwMVoXDTI1MDIwNjE1MDUwMVowLzEtMCsGA1UEAxMk
MTcwM2NlMTgtMmFiMi00YTExLWI4MzctZDIzYWFiYmUyNDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0Pa8nawZAHjWdC/m62aMUey7LgtVKE5cYt7
BmmqCS9LH1uDKMteVn+jPjdQEdZNdNJNsqLl56tREE1/eFYcGpzk9OzBy7GNr8c2
wl+WxJb7bKR/P1SgeAtM6I7i7OBvZppQ4n0iWoits2HkAjMc52zv5TlTL95Gqh8D
qb9GIXWiG7Ug5WrqI6lmVLJAN/lXNDil30Pv7Lyo/PTpiw+C1B8TAP9TTYrpufaD
jOtI7Iap6M2jDABomFiRY6TqZtsG7gFmmT3Mb2cxgraukQS4HMehcvA1A/isONPk
/ydqlTX5rMvOEdOmcym4SzOOlCg8THMlvB1V4K2atnpqN9cpzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIOwAD8R8GH074j5OI0D+nQoGKZXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNmMyOTgxMmUtM2RlOS0z
MDEzLWJiZDItOTZiNDZjYzFmZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABth2oejRretYxc67ib6fswkznh+oZ5B9xvzJjeIueXY7m0lGwMtneW4
7aWhkfDRP1OhREuI/eaCvjogTIJEJWCcSUsvdtFNMMd+xirrghaETqdJGiVI7hm8
R9xL6lBET2VRmTaGb8tXyWHMqrm9wuO/BMTB7cCeKRFwoeIlO0j/nQ5PTqbnUJfr
Exu97Hqa/GZlpyw64sGH2vtyLcGt/Yuyq5+sgPTmIKYVEt55WlO6zvJINcUzHMGB
/Q/IA+S8fnvS1S0DioHDtzf6FozMl3qa3PFchE7vdbD1dKopmUKaqXfbeJtjl+eF
5ouTJbnYGltv6LMIXhwG9CwIXKEdI8A=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:02:18 2025 by rpki-client