Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7f572c68-d313-33ee-a16a-27ccb0fbf080.roa
File: 7f572c68-d313-33ee-a16a-27ccb0fbf080.roa (raw, json)
Hash identifier: e+JDG2KCKETu4BDdvz0dpop16J9xHK6V/R1D4kEF/Xs=
Subject key identifier: 30:ED:CF:E5:0C:AC:02:DC:72:FB:C7:F5:79:24:34:36:C0:FC:86:49
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBE8361E084152F094980
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7f572c68-d313-33ee-a16a-27ccb0fbf080.roa
Signing time: Wed 16 Oct 2024 14:26:35 +0000
ROA not before: Wed 16 Oct 2024 14:26:35 +0000
ROA not after: Tue 14 Jan 2025 15:26:35 +0000
asID: 81
IP address blocks: 152.46.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:be:83:61:e0:84:15:2f:09:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:35 2024 GMT
Not After : Jan 14 15:26:35 2025 GMT
Subject: CN=69f11f67-b3dc-444b-979b-056dd37044d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:80:5c:8a:15:e2:13:fe:4f:4f:d2:a8:9b:
3f:95:fa:48:f3:7b:9b:06:2d:9a:1f:3d:33:7b:3e:
22:2e:ed:d1:e7:af:4e:04:d5:fc:db:d5:bd:15:15:
2d:19:f9:cd:da:45:2d:66:a1:14:ff:37:34:47:32:
94:f7:96:98:4a:d6:47:d5:ef:58:dc:42:c4:a5:0e:
22:3e:5b:e3:c7:c6:37:23:81:c9:37:65:1b:e2:6e:
9c:18:5d:07:16:1d:82:9a:fd:5e:9d:87:0c:29:9a:
62:bb:69:cc:0b:38:e6:2b:53:fe:f4:60:03:f3:18:
9a:b6:bd:93:dd:31:6f:27:69:ff:15:ec:c1:d8:7e:
e6:7e:1f:e4:e1:01:2e:3c:a8:0c:5b:34:65:76:ab:
ff:ba:dc:5c:f7:70:6b:34:dc:24:bf:0f:55:18:7a:
82:de:50:c4:e8:f2:95:93:f1:67:4b:22:7e:ea:f8:
64:76:16:a5:14:f2:32:5f:42:66:f7:fd:79:56:d1:
36:31:d3:c8:2d:ba:a7:cf:5f:9c:6a:e6:74:a1:d2:
04:23:0b:f0:23:53:dd:28:90:72:88:83:0b:6b:8f:
87:19:25:fa:dd:c0:d6:dd:11:fe:44:3c:bf:be:ff:
b4:33:31:07:b4:16:6b:a5:ae:ae:e4:bb:37:f9:3c:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:ED:CF:E5:0C:AC:02:DC:72:FB:C7:F5:79:24:34:36:C0:FC:86:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7f572c68-d313-33ee-a16a-27ccb0fbf080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:7c:9f:2d:8e:ea:5e:e0:fd:8e:98:d2:3f:94:b7:d7:94:fe:
6e:77:1c:ab:83:61:21:42:00:9b:6e:b4:92:f9:9b:13:c7:81:
49:d3:d6:88:d5:33:6b:db:1d:ba:a3:32:e7:bc:b0:f5:25:0d:
9b:3f:f0:96:ed:05:62:c0:d9:d4:7e:5c:d5:92:ca:c8:ab:67:
68:58:06:61:a6:8f:ae:77:3e:02:84:3e:9f:9b:1a:a7:7e:b4:
c0:b5:00:b1:57:75:f7:51:ac:d2:60:85:4a:2f:f6:b2:4c:0e:
ad:ad:fc:80:2f:75:f1:61:82:a7:25:35:4f:58:da:82:f7:9c:
02:e5:14:ad:c8:53:32:48:3c:46:4d:65:84:ea:10:12:fa:9f:
1b:fb:91:6b:bc:19:ec:fe:74:4e:5d:6d:c7:50:4a:18:0e:8e:
b1:bb:58:0e:7c:d6:64:d5:50:01:6b:cf:92:47:98:50:5c:14:
65:a7:d2:17:23:62:16:b7:68:15:92:bf:4b:81:5c:8a:f4:86:
2b:12:3c:ac:2f:c8:97:c7:c4:89:bc:ee:a9:85:42:0e:c3:ee:
72:8d:4a:df:92:e3:fe:4c:f0:5b:e1:4d:d4:45:d3:fa:ed:15:
de:fb:fa:03:f4:27:74:83:ca:bd:e0:04:3b:16:b3:8b:be:9c:
36:db:68:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:25 2025 by rpki-client