Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/87c416fa-1a35-3820-84b8-4b3696c8b272.roa
File: 87c416fa-1a35-3820-84b8-4b3696c8b272.roa (raw, json)
Hash identifier: dyqkY/GaU4+AAfVA5eDORDtl01Wpk7/U/6XDVBaqgUs=
Subject key identifier: 1F:96:C8:EA:AA:59:27:27:EE:6C:98:43:EA:D4:04:32:69:D5:C2:ED
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABB8A5386F9AA31C0A5180
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/87c416fa-1a35-3820-84b8-4b3696c8b272.roa
Signing time: Wed 16 Oct 2024 14:26:32 +0000
ROA not before: Wed 16 Oct 2024 14:26:32 +0000
ROA not after: Tue 14 Jan 2025 15:26:32 +0000
asID: 81
IP address blocks: 152.49.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:b8:a5:38:6f:9a:a3:1c:0a:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:32 2024 GMT
Not After : Jan 14 15:26:32 2025 GMT
Subject: CN=f0b629ed-438a-4a35-b3a7-45140c089421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:18:b4:cf:35:ff:2a:01:ca:fd:68:e6:aa:d4:
d4:ee:d1:01:67:d2:9b:32:c6:3e:b1:c4:fb:bc:2f:
bb:d9:0a:af:16:5e:0a:f1:31:46:25:e8:73:13:9d:
eb:5a:24:60:e5:8d:22:99:5d:ac:ca:81:df:2f:51:
72:ea:b0:83:b6:11:2a:0c:16:20:64:79:7d:b0:b9:
fd:50:2d:57:19:6a:2c:e2:fa:71:4d:de:23:9b:ed:
82:6f:f4:32:fc:58:5e:98:62:16:27:63:ad:a2:38:
78:6d:4b:e8:38:fb:f2:7c:7d:51:79:82:4d:91:69:
a8:3b:dd:eb:d1:df:6e:f0:7e:3b:22:2f:a5:ea:35:
10:be:1a:a7:2c:c2:34:96:b7:40:f0:fd:ab:86:8e:
d8:da:7a:1f:28:ca:55:a6:2e:ed:6c:9b:e8:eb:7b:
d7:96:1b:1c:b9:6d:17:c8:46:16:0b:e6:e3:02:2b:
6c:9f:43:a5:f8:fc:75:ac:11:bd:6a:6f:72:ac:43:
18:6f:bc:b9:cd:01:7b:36:d0:c4:28:db:7c:43:9d:
34:57:e6:b9:d7:ff:61:42:06:f2:5b:8c:7f:13:ef:
30:8d:b5:a8:f6:52:22:e6:74:c1:fa:16:16:2a:ee:
25:73:66:97:61:1a:41:0a:ba:ea:be:5f:79:29:02:
19:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:96:C8:EA:AA:59:27:27:EE:6C:98:43:EA:D4:04:32:69:D5:C2:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/87c416fa-1a35-3820-84b8-4b3696c8b272.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:8b:82:79:38:85:46:cb:85:d9:c3:7a:6b:85:21:aa:07:53:
db:cc:e0:e3:2a:68:d3:4f:b9:ef:f8:1d:ff:1c:69:a5:07:d2:
d0:51:1e:56:09:75:31:32:c9:19:33:e8:55:79:d3:03:d0:ec:
83:e4:cc:69:4a:1c:2d:f6:0b:15:c7:d7:62:da:07:c9:0a:73:
77:83:f6:ee:cd:0b:9c:cf:fa:ea:34:ff:ba:60:95:a6:a1:b0:
83:7b:94:32:b6:fe:e8:b2:3d:70:f4:c1:18:68:f2:88:dd:7d:
ed:0e:ca:5e:7f:c5:a7:cd:4a:36:1a:86:d4:51:52:93:05:f5:
ec:6a:91:c5:c1:bf:9e:18:88:b3:99:26:31:3c:0d:ef:e7:3f:
fe:d8:79:20:ad:d8:5a:56:dc:0a:ea:bd:02:77:de:f9:f1:f7:
ea:9a:3a:cf:96:69:6a:58:ee:7e:4b:83:63:41:bc:c2:74:d5:
3c:49:12:91:d2:44:d9:98:4e:b3:3b:da:90:25:2d:e6:5a:65:
d6:3b:01:62:7e:3b:ea:95:d1:24:39:c4:c1:f1:13:65:70:e3:
da:01:3f:cd:da:ba:45:42:14:b3:08:be:c9:85:1a:7c:b3:44:
4a:aa:e3:a6:f3:c4:72:1f:53:6e:f9:44:cf:a2:20:aa:0b:69:
9a:8f:c0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:25 2025 by rpki-client