Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/87a4fb56-d8f7-362c-bc31-43773496b8d5.roa
File: 87a4fb56-d8f7-362c-bc31-43773496b8d5.roa (raw, json)
Hash identifier: xQip6ufW6vWMboryUfL8tk+cSlZnQVeOR460WBjwyd8=
Subject key identifier: 4B:41:20:6B:8E:E5:30:02:A9:88:F8:6D:E5:0A:9F:1E:C2:27:22:F6
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF4869904028D2130952F00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/87a4fb56-d8f7-362c-bc31-43773496b8d5.roa
Signing time: Fri 08 Nov 2024 15:04:58 +0000
ROA not before: Fri 08 Nov 2024 15:04:58 +0000
ROA not after: Thu 06 Feb 2025 15:04:58 +0000
asID: 81
IP address blocks: 152.26.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:86:99:04:02:8d:21:30:95:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:58 2024 GMT
Not After : Feb 6 15:04:58 2025 GMT
Subject: CN=4b7d8834-8182-4d31-b67b-2117e1ad2fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7d:49:90:fb:75:96:89:eb:82:cd:2c:f5:87:
81:64:8d:29:88:33:c2:a1:fa:85:ad:d5:30:f0:92:
51:e1:22:b2:9d:01:69:5f:1d:77:53:85:23:00:56:
31:93:d2:8d:c3:2b:ba:e6:2d:2d:d8:75:41:a1:d9:
95:41:19:de:4a:ee:e7:63:7c:0b:bc:be:29:d0:eb:
fa:bb:ed:c5:7d:7d:a4:c9:93:90:48:c8:c5:20:04:
61:0a:81:87:a9:ed:81:0a:66:22:9d:76:03:74:18:
3b:ba:fd:56:19:9c:11:de:43:6b:9d:a8:c3:fc:0d:
49:2d:32:b0:90:5d:d9:da:c8:0d:4d:31:d4:68:02:
ba:4e:78:70:f0:20:b4:4d:f1:4c:fc:1a:79:84:d0:
b7:a3:0a:db:eb:7c:5b:5b:3e:56:a8:fd:9e:9d:a3:
99:d2:61:8e:91:e9:79:90:d0:dc:9b:e4:67:9d:aa:
67:09:bc:51:4f:d5:b7:b8:09:fd:9a:61:69:43:be:
7a:2d:0d:4a:07:39:41:5c:15:03:16:80:78:1d:8d:
bf:be:12:f3:e9:5f:00:3f:59:a2:b5:0c:ab:00:f0:
83:b6:4e:f1:3f:7b:7a:41:15:b1:d3:98:eb:ce:c5:
01:6f:a3:6d:0d:1a:e2:26:70:e2:b8:77:26:5f:fa:
ec:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:41:20:6B:8E:E5:30:02:A9:88:F8:6D:E5:0A:9F:1E:C2:27:22:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/87a4fb56-d8f7-362c-bc31-43773496b8d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.26.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:d2:fa:b8:ee:01:e5:df:df:cd:82:32:69:ee:41:54:2f:60:
98:ca:37:b3:dc:21:c3:fc:39:17:85:80:0a:db:21:5e:2a:6e:
ab:00:ec:fc:f7:e7:68:c4:3e:1a:dd:f8:f9:df:d3:b1:4a:7d:
e6:d2:1c:f6:0d:67:e9:7c:df:1a:d3:06:35:da:59:2e:1c:f0:
8a:95:4e:7b:06:c3:9a:86:50:a3:4d:ae:96:1d:c7:d2:41:0b:
ac:e0:5a:32:a4:45:b8:a0:d9:37:8a:3a:58:a8:a0:8b:2d:c5:
28:8d:fb:c1:b0:93:8a:00:23:dd:3b:3f:a0:ca:a2:46:65:f7:
21:ad:b8:f8:59:44:31:90:ec:33:ac:b4:70:39:82:c1:62:f4:
98:54:da:c9:37:f0:e1:ce:70:90:1a:1e:09:e5:c7:c5:0c:42:
2a:9a:fa:f8:82:79:80:41:f7:9c:8c:69:bc:2a:f7:5a:df:66:
86:ec:f8:f8:72:7b:5f:bf:60:27:13:e8:0c:74:92:12:be:0b:
1d:f5:83:7d:61:69:df:2b:91:c6:72:dc:df:37:d9:3f:0e:83:
dd:c6:41:29:b8:ca:70:2d:f9:37:1e:fe:ab:fe:d1:36:1f:49:
af:4a:d8:5c:76:84:c1:e1:a8:6b:38:64:ed:7f:99:2b:3c:d3:
b7:d0:5c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:21:07 2025 by rpki-client