Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8cb376c1-250c-38b6-b7cf-c7c7a7da0f14.roa
File: 8cb376c1-250c-38b6-b7cf-c7c7a7da0f14.roa (raw, json)
Hash identifier: SEJOIL/6GwUD4oJYBgllfWrvK6LaTZXJ8yG/NEcX/SM=
Subject key identifier: 47:F1:55:77:6B:C8:31:9C:50:85:9A:EF:50:2C:92:7C:48:CB:1F:30
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBCB128C845C830952500
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8cb376c1-250c-38b6-b7cf-c7c7a7da0f14.roa
Signing time: Wed 16 Oct 2024 14:26:34 +0000
ROA not before: Wed 16 Oct 2024 14:26:34 +0000
ROA not after: Tue 14 Jan 2025 15:26:34 +0000
asID: 6559
IP address blocks: 152.31.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:bc:b1:28:c8:45:c8:30:95:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:34 2024 GMT
Not After : Jan 14 15:26:34 2025 GMT
Subject: CN=9f33977e-f2f7-4696-84a2-a50d7e2dc8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ac:3d:4e:51:18:37:33:ec:c2:8a:3d:29:3d:
6b:0d:f8:d7:5f:16:d7:0a:b1:d1:60:c6:98:7a:26:
54:31:a1:4e:11:0f:ff:99:f7:e3:70:90:9b:41:6d:
21:2b:ca:92:0c:1e:f1:ff:05:56:d3:68:61:1a:18:
5e:32:12:f0:35:42:58:57:13:c2:09:2d:7e:76:45:
60:22:db:e4:fb:89:9f:34:2f:04:43:fb:12:64:8a:
e6:fb:16:e3:4c:2b:d2:b7:4a:ec:37:4a:9d:3b:fa:
ad:81:b0:0a:3e:5f:6a:4d:f9:c7:4c:dd:b4:29:02:
13:59:f9:00:33:61:a1:87:2c:9e:71:35:49:a3:ad:
b7:03:4c:a1:36:c4:32:b1:38:80:18:e5:9f:e6:1a:
0b:4c:c5:54:37:66:fc:14:f4:52:87:f6:77:9d:ec:
38:ea:56:f7:3e:57:17:96:4e:79:a8:78:45:38:28:
f8:1a:5b:94:2f:d9:89:0b:a9:aa:55:00:9c:a8:4a:
fd:20:8c:db:eb:42:f0:21:94:fc:2a:87:22:dd:f8:
f8:d5:17:41:60:38:c0:15:d0:bc:b8:0a:5f:b2:78:
25:3c:33:bf:17:16:bd:3e:b0:b8:5e:9f:bc:51:d1:
51:4e:25:69:a6:f9:c6:fe:f1:34:bd:36:e5:e3:ce:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F1:55:77:6B:C8:31:9C:50:85:9A:EF:50:2C:92:7C:48:CB:1F:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8cb376c1-250c-38b6-b7cf-c7c7a7da0f14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.31.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:df:6a:b2:ee:c3:6e:cf:f3:a9:52:05:79:67:7d:b6:f6:db:
b4:8d:38:80:b9:6b:ba:9e:5f:f9:fe:fb:6b:7a:2d:6d:6e:a1:
2c:a6:78:ae:1e:d0:b4:a5:13:35:c0:c2:68:9e:d0:47:73:c7:
58:6e:b2:5b:31:44:d4:1d:ff:94:96:51:57:65:8e:33:70:b9:
fd:d8:29:8b:e1:e9:aa:93:00:1a:f7:9c:15:09:5c:c0:27:b0:
78:9b:82:c3:be:a1:6c:8b:64:2c:52:4b:61:28:b9:01:ed:46:
f3:67:f6:d0:b5:12:a6:ed:b7:d7:66:d5:e9:6d:b9:0c:94:58:
d9:26:c4:f3:97:3d:1b:59:fc:3d:b8:32:8b:fd:21:bd:5a:e4:
8b:e9:34:0e:01:64:8b:7f:dc:47:a5:39:ed:a0:35:ce:20:9b:
c2:fe:be:20:f8:44:37:1e:70:3f:22:44:0a:21:b9:d2:de:72:
6d:c9:9c:aa:a0:8b:cf:e5:87:b0:fb:9b:c4:75:40:31:73:5e:
85:64:a4:49:1e:df:07:76:9d:c1:0e:bf:c5:6a:67:86:c2:fd:
c7:06:85:0e:d5:be:25:69:88:67:d5:64:21:78:26:26:47:c0:
e4:ea:94:90:49:6e:db:e8:9b:11:d2:7f:31:01:a6:e9:a3:b8:
e5:2b:74:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:35 2025 by rpki-client