Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7559dc1b-637c-3510-8229-b860980612ae.roa
File: 7559dc1b-637c-3510-8229-b860980612ae.roa (raw, json)
Hash identifier: i82tsBPksnGfo7ev9MlS2UkYykWCRTydDupgW/cUtZo=
Subject key identifier: 03:10:2E:17:C4:BC:A3:23:0A:9C:65:76:70:9A:6D:E0:01:79:B6:69
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48AA9D321285385CA06C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7559dc1b-637c-3510-8229-b860980612ae.roa
Signing time: Fri 08 Nov 2024 15:05:00 +0000
ROA not before: Fri 08 Nov 2024 15:05:00 +0000
ROA not after: Thu 06 Feb 2025 15:05:00 +0000
asID: 81
IP address blocks: 152.46.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:8a:a9:d3:21:28:53:85:ca:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:00 2024 GMT
Not After : Feb 6 15:05:00 2025 GMT
Subject: CN=1c29a907-e2e1-42bf-8b7a-229763a26891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4d:6b:af:c4:3a:88:96:58:06:94:7d:8f:25:
c1:50:d9:21:8c:59:aa:6c:bd:f0:9a:83:ac:aa:af:
45:e3:d8:39:bd:b3:86:c8:c6:26:bd:63:b5:a2:50:
c3:fb:10:84:3b:26:50:62:59:f2:1c:af:a8:78:06:
30:2e:06:65:55:a0:57:13:c0:6b:13:2a:b3:27:5a:
68:fc:39:a3:8b:9d:da:37:f1:ee:48:69:ed:e4:8f:
30:ec:8c:69:ff:05:5d:67:e9:73:74:19:f6:08:02:
a9:4e:d8:1b:83:63:2c:d2:fd:cf:31:d4:0f:d3:a4:
ef:95:8c:0e:fc:24:d2:29:2c:a3:a6:5e:51:fb:39:
28:c7:91:79:01:6a:ec:d2:4d:35:23:26:e9:d0:b8:
26:ea:4e:b5:15:04:f5:37:93:4e:3a:73:08:0e:b4:
ae:a0:2f:eb:47:eb:be:b3:ab:9a:37:89:68:b1:80:
5d:e7:be:43:53:92:ae:c2:78:f7:c3:c6:96:cd:b4:
ce:ea:f5:d5:05:f3:0d:4a:27:e9:00:78:52:8b:c1:
16:d9:6c:35:b4:d0:f6:7d:57:42:0b:85:23:19:0c:
7b:72:ec:ca:25:a7:b2:13:2f:31:d6:37:45:a1:51:
39:4f:9d:e4:06:eb:03:b2:ed:02:59:92:37:1f:8c:
ea:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:10:2E:17:C4:BC:A3:23:0A:9C:65:76:70:9A:6D:E0:01:79:B6:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7559dc1b-637c-3510-8229-b860980612ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:4e:a4:67:a9:d5:b6:4c:26:36:68:da:d2:f5:03:fe:78:e2:
e2:a6:dc:2b:18:af:94:70:7b:9c:4a:1b:89:6e:59:09:34:61:
1f:b7:4b:1f:0f:4c:5d:c0:bf:44:9c:87:68:26:e2:e5:d8:0b:
45:a4:e1:10:6b:45:15:65:6f:32:d3:eb:e8:ed:d7:6e:26:91:
36:be:8d:c0:84:bb:78:bf:5b:e9:d8:a1:13:99:a8:11:19:fa:
d4:3e:82:1a:a0:ee:dd:21:51:03:01:39:ca:8c:08:79:e2:9c:
94:4c:22:cc:b5:f3:f6:96:f9:6f:73:4c:c0:0f:bc:ba:88:89:
6a:7c:04:a0:09:f7:ca:03:e6:d1:95:f3:75:2b:b5:f7:16:8b:
1c:0a:60:e3:e4:07:b8:45:a1:57:dd:f8:6a:3e:f0:f6:42:e3:
60:30:a9:1f:e5:36:ec:53:f8:c6:15:20:4b:3e:35:70:a4:c5:
58:da:15:c6:70:40:36:3b:7b:a1:be:bf:fe:7f:d3:d2:26:2b:
1a:51:b8:b7:80:6b:d1:d7:ac:5d:e0:2e:66:d2:fe:8f:4c:51:
c9:ac:89:e4:d7:ae:3c:71:19:31:1b:4d:1f:26:10:57:5c:d4:
14:f0:e6:bc:6e:53:fd:c8:a6:07:a6:83:da:0f:4e:42:69:de:
21:8f:c3:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP9Iqp0yEoU4XKBsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDUwMFoXDTI1MDIwNjE1MDUwMFowLzEtMCsGA1UEAxMk
MWMyOWE5MDctZTJlMS00MmJmLThiN2EtMjI5NzYzYTI2ODkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE1rr8Q6iJZYBpR9jyXBUNkhjFmqbL3wmoOs
qq9F49g5vbOGyMYmvWO1olDD+xCEOyZQYlnyHK+oeAYwLgZlVaBXE8BrEyqzJ1po
/Dmji53aN/HuSGnt5I8w7Ixp/wVdZ+lzdBn2CAKpTtgbg2Ms0v3PMdQP06TvlYwO
/CTSKSyjpl5R+zkox5F5AWrs0k01Iybp0Lgm6k61FQT1N5NOOnMIDrSuoC/rR+u+
s6uaN4losYBd575DU5Kuwnj3w8aWzbTO6vXVBfMNSifpAHhSi8EW2Ww1tND2fVdC
C4UjGQx7cuzKJaeyEy8x1jdFoVE5T53kBusDsu0CWZI3H4zqFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAMQLhfEvKMjCpxldnCabeABebZpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNzU1OWRjMWItNjM3Yy0z
NTEwLTgyMjktYjg2MDk4MDYxMmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmC4QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADVOpGep1bZMJjZo2tL1A/544uKm3CsYr5Rwe5xKG4luWQk0YR+3Sx8P
TF3Av0Sch2gm4uXYC0Wk4RBrRRVlbzLT6+jt124mkTa+jcCEu3i/W+nYoROZqBEZ
+tQ+ghqg7t0hUQMBOcqMCHninJRMIsy18/aW+W9zTMAPvLqIiWp8BKAJ98oD5tGV
83UrtfcWixwKYOPkB7hFoVfd+Go+8PZC42AwqR/lNuxT+MYVIEs+NXCkxVjaFcZw
QDY7e6G+v/5/09ImKxpRuLeAa9HXrF3gLmbS/o9MUcmsieTXrjxxGTEbTR8mEFdc
1BTw5rxuU/3Ipgemg9oPTkJp3iGPw1Y=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:45:05 2025 by rpki-client