Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8125c955-fbab-357e-9371-7a3d97953052.roa
File: 8125c955-fbab-357e-9371-7a3d97953052.roa (raw, json)
Hash identifier: D1l8jQFlGkZYA0hCBPqtPmiT/QPVi55Dz7qkF0LHcNg=
Subject key identifier: A9:65:22:75:B2:5F:E5:5F:52:56:CB:A7:A0:F0:F5:BD:29:A8:DC:82
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBFD0C2B0937EC5D71380
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8125c955-fbab-357e-9371-7a3d97953052.roa
Signing time: Wed 16 Oct 2024 14:26:36 +0000
ROA not before: Wed 16 Oct 2024 14:26:36 +0000
ROA not after: Tue 14 Jan 2025 15:26:36 +0000
asID: 81
IP address blocks: 152.54.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:bf:d0:c2:b0:93:7e:c5:d7:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:36 2024 GMT
Not After : Jan 14 15:26:36 2025 GMT
Subject: CN=268e4d77-88f0-4c4b-8535-2b7f962aa5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bf:aa:24:88:11:7e:6f:da:61:89:8f:33:c9:
da:fd:f6:ad:ee:6a:2d:36:63:0a:be:5e:93:83:92:
d5:ca:76:a8:58:c0:f7:08:6f:bb:41:09:f2:77:05:
97:05:77:cb:86:54:18:d7:02:6a:02:d0:7e:3b:58:
e2:6a:63:a8:0f:24:b5:ae:ba:fe:a8:13:7b:c2:bb:
29:4f:59:da:2c:fa:64:03:d2:b1:57:30:37:b6:a4:
07:ec:57:76:28:f7:7d:42:3d:f6:2a:1d:e9:16:fe:
9a:90:93:06:3a:2e:a2:75:df:ec:42:70:c3:7f:eb:
99:32:49:e2:ff:14:e2:aa:07:65:08:7d:0a:00:e5:
f2:af:d7:c2:bd:66:5c:62:2f:40:b2:d3:cb:85:64:
85:2d:30:43:e1:dd:c5:d5:b2:fc:59:59:86:56:4a:
f2:45:3f:61:77:c9:fc:f4:d0:04:73:fc:ff:98:ff:
0f:2f:cc:5d:70:e0:57:d8:5a:e5:52:3c:da:0f:2e:
74:51:7a:20:74:b9:f4:fd:d3:3a:47:55:7a:c8:03:
66:60:f3:80:bf:53:75:88:7c:a3:02:96:7e:12:84:
4f:b3:7d:18:65:c2:48:0c:11:e1:14:e3:03:7c:9e:
1f:ac:3e:0e:71:e5:fc:2c:c0:fd:b2:78:12:98:ea:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:65:22:75:B2:5F:E5:5F:52:56:CB:A7:A0:F0:F5:BD:29:A8:DC:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8125c955-fbab-357e-9371-7a3d97953052.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.54.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:fd:ef:ff:34:5c:c5:f1:28:3c:a9:e5:36:44:a9:de:ad:e6:
aa:83:7c:b8:a1:0c:08:33:c3:c7:9f:6e:5f:ba:28:47:6d:09:
bb:31:15:62:7f:17:8b:84:b1:4f:30:70:1d:78:95:2b:e1:f3:
ef:96:6a:35:c1:61:61:30:7e:a0:ab:21:80:96:7c:6b:44:db:
f6:da:01:ce:34:51:ff:96:32:35:a6:07:5c:91:c5:69:c9:59:
4f:90:49:ba:97:6e:df:9b:92:13:6a:b4:a7:83:e9:3b:2a:38:
aa:a7:dc:97:3e:12:6c:bf:0f:5f:0a:1e:e3:26:e5:c0:79:96:
20:cb:65:4a:a5:20:f7:d2:df:1e:0a:25:e6:ed:3f:90:7b:ef:
d3:38:e0:50:89:da:24:3f:a8:30:9f:7b:80:83:65:47:64:c0:
aa:4c:7f:2b:b4:1d:85:4a:64:1a:19:94:9c:92:7b:de:ff:42:
88:21:ca:41:77:70:cb:28:84:35:09:11:f2:20:4a:dc:73:85:
c7:c0:d7:cf:63:a3:51:e9:4c:b4:93:a0:96:28:94:6a:5b:60:
7e:eb:6c:ab:01:ad:28:74:83:aa:46:eb:d6:bb:c8:e2:97:d8:
a8:b3:1e:db:ca:3d:27:f1:e9:de:c0:65:ae:e8:7b:b0:9f:c5:
6e:9d:1f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:51 2025 by rpki-client