Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/751f9cac-7d22-37df-b0e6-9f017ea3803d.roa
File: 751f9cac-7d22-37df-b0e6-9f017ea3803d.roa (raw, json)
Hash identifier: KakLl8RSu/yufX536vOruZOKpRb7vMf5J9jowMllx/k=
Subject key identifier: 15:33:B6:1B:84:DF:06:29:8A:A4:63:28:50:10:24:6F:63:43:6B:94
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF4804BAD516F0D78B2D9D0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/751f9cac-7d22-37df-b0e6-9f017ea3803d.roa
Signing time: Fri 08 Nov 2024 15:04:55 +0000
ROA not before: Fri 08 Nov 2024 15:04:55 +0000
ROA not after: Thu 06 Feb 2025 15:04:55 +0000
asID: 81
IP address blocks: 152.14.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:80:4b:ad:51:6f:0d:78:b2:d9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:55 2024 GMT
Not After : Feb 6 15:04:55 2025 GMT
Subject: CN=910d71d4-50af-4092-9acd-47dd413c2773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:c5:44:3d:9f:5e:15:3f:45:68:fb:c7:fe:
a8:d1:51:5b:eb:7b:49:e5:5e:27:25:77:1d:48:b8:
b0:21:29:7c:5e:aa:60:c5:32:8a:d0:3e:17:e3:98:
ff:cc:03:ab:0f:1b:8f:3f:df:f8:31:96:27:6e:86:
ec:df:f8:ac:69:da:7d:ec:5b:c4:27:b1:f7:f5:0a:
1f:ff:c7:38:9a:1d:19:f8:84:d4:c0:02:73:e2:d0:
6c:cc:5f:b0:5e:0d:6e:0a:ad:ac:18:8d:05:8f:16:
c9:33:81:8a:fb:c3:56:d7:fb:42:b2:c6:9e:ec:41:
8d:fa:6f:c8:6b:92:24:ce:c3:4d:bc:65:c9:60:c7:
fb:54:85:17:54:3a:02:35:df:64:dd:28:61:98:8d:
c8:1d:61:64:9e:f2:33:3b:a2:be:6f:5d:7d:a1:fa:
e4:08:ad:7f:d4:25:fd:78:f0:50:fa:ca:b1:37:e5:
ad:9a:63:aa:f3:bd:2c:38:e0:c8:99:2c:55:64:e2:
41:28:b8:df:36:15:36:d3:1f:8e:58:1a:d7:53:a8:
7b:88:00:78:6f:58:eb:83:88:1b:df:2b:5b:ab:e3:
18:5f:38:99:3c:d0:bc:d2:6d:98:4d:20:9b:16:29:
30:55:b1:db:d2:b3:e1:db:5b:c3:df:b9:b1:3a:73:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:33:B6:1B:84:DF:06:29:8A:A4:63:28:50:10:24:6F:63:43:6B:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/751f9cac-7d22-37df-b0e6-9f017ea3803d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.14.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:2f:3b:64:60:54:ea:b5:c9:48:4d:b0:4d:51:b1:61:00:82:
0e:20:a0:4e:13:1d:31:6f:3d:76:28:25:ed:2b:53:8f:50:d0:
20:1f:9e:3b:1f:ca:0f:9a:42:66:5a:e3:b0:a6:39:e4:cd:d9:
80:aa:4d:1f:42:2b:90:a3:46:3c:83:51:05:43:2c:82:03:18:
c3:18:9f:40:aa:34:76:cb:63:17:d7:63:67:ef:fc:43:a3:76:
02:1f:ab:6b:1a:33:fb:af:dd:70:21:ea:7a:da:23:d6:c4:7a:
2a:4d:0d:74:99:49:b8:49:1a:68:73:21:7f:3d:91:2f:e0:f7:
32:10:5c:ed:d8:a9:3d:c1:20:15:30:25:a0:8d:24:5c:27:ee:
30:05:ea:11:f5:13:e0:75:d0:4b:3f:59:6d:05:19:f4:60:3f:
2c:d9:5e:7a:77:30:6b:42:b0:69:59:db:af:32:33:44:d1:11:
91:e4:8a:72:77:ba:d5:ff:bd:8c:4b:18:3a:ed:6c:3d:69:c2:
8a:e4:cb:01:ba:1f:8e:5e:1f:b4:fe:0e:9a:53:33:77:05:f8:
a7:cb:aa:c7:a3:4a:98:09:01:11:35:81:fc:70:43:1d:97:dc:
e4:88:e7:40:6a:8f:15:07:01:d2:9a:7f:a7:42:6f:a8:1a:e9:
a2:ab:f6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:38 2025 by rpki-client