Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8e4a7b19-70da-3631-a5be-f9918baed876.roa
File: 8e4a7b19-70da-3631-a5be-f9918baed876.roa (raw, json)
Hash identifier: zlblGGmIlmKN3j8BF0yzJ/YMIEERzOVAkgWHLiUQNWQ=
Subject key identifier: 33:C5:FF:AC:33:E0:6B:EA:18:B2:74:9A:A7:24:85:1C:52:68:9B:D1
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF4870C774689380FAB1980
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8e4a7b19-70da-3631-a5be-f9918baed876.roa
Signing time: Fri 08 Nov 2024 15:04:58 +0000
ROA not before: Fri 08 Nov 2024 15:04:58 +0000
ROA not after: Thu 06 Feb 2025 15:04:58 +0000
asID: 81
IP address blocks: 152.26.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:87:0c:77:46:89:38:0f:ab:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:58 2024 GMT
Not After : Feb 6 15:04:58 2025 GMT
Subject: CN=5b862b40-f81b-4298-acc5-8287d6875b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:0a:92:d2:d2:ba:f7:4d:dc:03:5b:7f:e1:
db:d2:f7:b0:a4:33:df:a6:87:47:eb:4f:37:1f:fb:
bc:0b:d3:1d:39:21:25:0b:2e:8a:34:f4:1a:66:de:
99:6d:61:c9:33:bd:2f:44:55:ba:ea:03:5c:05:97:
61:b9:9e:9d:aa:51:5d:38:45:bd:83:9b:44:86:02:
86:5f:3a:12:ef:1c:91:e5:66:fc:bf:14:90:2c:3f:
7a:10:0e:5e:15:05:9f:44:e1:0b:40:88:d3:41:78:
e8:ab:5b:c6:12:3a:dc:7f:3e:44:be:08:05:61:5a:
cf:26:42:91:65:7a:76:f9:a5:ff:b7:7e:ff:95:16:
e9:40:59:a4:93:f9:a9:13:a1:c1:f0:4d:6c:b4:83:
73:bf:fc:5a:1a:d9:2a:1e:df:09:23:3d:f9:e7:2b:
20:fd:fa:96:b7:b0:51:32:d3:56:47:bd:a6:c7:f1:
07:43:03:e4:89:1d:d7:91:31:34:97:05:bf:2b:52:
05:24:3c:c7:0b:7a:fe:1d:c7:b3:be:0a:d1:4c:64:
0e:96:f8:de:de:23:a4:ce:b6:2f:a6:d6:09:49:32:
35:48:f4:50:30:5d:7c:9b:a9:71:f2:e9:48:6a:c7:
b5:27:98:96:9c:34:ef:91:9d:6e:51:d2:ce:80:59:
64:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C5:FF:AC:33:E0:6B:EA:18:B2:74:9A:A7:24:85:1C:52:68:9B:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8e4a7b19-70da-3631-a5be-f9918baed876.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.26.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:23:f4:7b:46:84:a0:6a:5e:76:38:1d:25:8d:f4:8f:1e:17:
55:6f:bf:fa:da:a3:5e:5a:f1:1a:9b:11:05:7e:c7:a2:e9:f3:
54:f3:4e:2b:ab:73:0e:e2:05:df:86:4d:b9:26:9b:32:b7:8f:
dc:d6:72:1b:42:1c:f4:de:60:df:73:5e:5c:ba:2e:e0:7f:9b:
d5:ab:c6:4a:92:3a:1d:53:55:6a:c2:05:9b:4f:5e:2c:83:80:
fa:5f:8e:c9:b2:69:6e:61:54:37:9f:fd:6f:1d:df:09:9d:57:
76:24:17:8d:79:21:74:f5:5c:26:ad:bb:b4:e0:68:81:3d:a2:
84:5a:a2:ed:00:67:00:c5:e0:b0:17:57:24:5f:41:0b:98:6f:
dd:05:30:d3:b2:c8:ad:57:28:44:63:ec:5a:1a:56:34:61:78:
8d:3d:7f:88:6e:4f:6f:8a:2e:20:98:36:bb:d5:dc:4b:76:34:
3d:33:43:16:75:f5:57:58:8c:88:29:cf:6b:cc:46:7c:2e:25:
f9:fe:6e:ad:c4:b5:07:cf:33:02:27:49:39:d3:7b:07:72:fe:
60:4a:c2:f0:95:85:5a:c6:7e:20:30:cb:37:45:ae:fa:a3:fc:
dd:2f:3c:d8:61:aa:ee:b9:54:18:2b:de:6d:ec:e9:7a:a8:de:
c2:5d:41:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:14 2025 by rpki-client