Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8f3dced5-306b-3f75-8d7a-ff23da7bcb16.roa
File: 8f3dced5-306b-3f75-8d7a-ff23da7bcb16.roa (raw, json)
Hash identifier: 9Ig0yiwqyd/I8Z/pfqSpfXHlxW9YCYwE9L8hjj73hj0=
Subject key identifier: 19:28:40:FF:EF:10:19:B4:02:75:F0:C3:51:DE:EE:D5:D6:BF:D3:47
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48C3C957B910907C136E0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8f3dced5-306b-3f75-8d7a-ff23da7bcb16.roa
Signing time: Fri 08 Nov 2024 15:05:01 +0000
ROA not before: Fri 08 Nov 2024 15:05:01 +0000
ROA not after: Thu 06 Feb 2025 15:05:01 +0000
asID: 81
IP address blocks: 152.46.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:8c:3c:95:7b:91:09:07:c1:36:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:01 2024 GMT
Not After : Feb 6 15:05:01 2025 GMT
Subject: CN=c5e27cdf-28c0-48ce-948c-9d87d9f701c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:1b:01:d5:d8:fd:41:8d:57:b5:25:0b:0f:
0d:70:6a:72:bd:ad:94:b2:0a:93:e7:31:aa:c6:aa:
44:03:60:92:af:dc:8a:ec:06:89:ba:1a:6d:79:9e:
a0:dc:9f:01:8e:a4:c9:e4:2c:f9:ae:3a:82:b9:ee:
4e:ef:4d:cd:10:e9:8d:72:ed:24:d4:c1:dc:4f:20:
2f:53:69:5b:e1:8e:84:8b:64:35:bb:67:57:32:95:
db:5a:da:c5:ea:a6:e7:7d:22:35:59:fd:7e:18:17:
cd:da:73:38:5a:f5:db:fa:c4:e2:d0:16:a8:0b:26:
d5:08:c1:cb:e8:e1:64:fd:79:03:0d:34:11:00:34:
22:07:2f:13:3a:09:d5:6c:2f:b9:c7:10:b0:ec:9d:
f6:3b:cb:1b:a0:37:51:e1:cc:18:8c:3f:e5:b4:c3:
7a:f4:fb:cc:93:82:4b:93:27:65:86:14:90:cc:11:
90:0e:63:f1:bb:9a:35:72:e7:ed:9e:5a:ee:32:fb:
ac:f5:a0:c6:4e:31:99:1d:d9:30:f0:65:e5:de:6d:
0f:39:6a:e9:19:d3:03:ab:b3:77:56:4b:95:a6:5a:
c6:0c:36:0d:44:cd:bb:76:ab:46:1a:b1:bd:48:b1:
ec:b2:3a:33:e7:52:ac:3e:7d:98:03:2d:3f:ab:92:
e6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:28:40:FF:EF:10:19:B4:02:75:F0:C3:51:DE:EE:D5:D6:BF:D3:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8f3dced5-306b-3f75-8d7a-ff23da7bcb16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:62:a5:40:a4:10:d8:19:9f:ac:91:2b:d4:e0:d1:42:a3:3c:
9b:b7:12:78:ba:95:4b:3f:85:2d:d5:9f:35:25:da:30:10:06:
db:57:a9:f4:b4:48:ad:d7:7f:09:f7:e2:e6:13:fa:5b:50:cb:
6d:ce:4d:27:44:6f:5d:86:46:59:25:d5:cd:0d:4a:85:1d:29:
90:bd:36:be:86:29:17:3f:74:d5:49:5e:58:ec:26:a8:53:19:
51:bd:40:70:af:5e:89:8b:68:34:2b:39:95:bf:63:ca:73:ab:
22:b4:ba:ad:e7:8e:4f:b2:2c:ba:ac:66:01:03:ef:05:59:f0:
d4:0e:fb:25:48:89:89:35:88:07:63:30:2a:dd:24:af:a3:61:
38:e9:55:92:cf:51:e2:c5:ed:19:4c:ad:b6:3e:61:f9:6c:1c:
89:78:b2:f4:ec:da:f1:14:ea:06:9c:f5:06:a6:68:00:3c:6f:
31:09:83:23:87:b9:01:bf:0b:e4:32:fc:db:95:55:4b:ab:b1:
50:4a:2c:0d:69:97:b7:ac:dc:a0:be:c2:33:0c:63:24:10:5f:
bb:c3:b5:0c:93:6c:d8:bd:25:c1:e5:bb:11:58:1c:49:10:ac:
64:51:6c:6f:75:8b:af:b5:73:34:2c:74:8b:65:05:ea:04:7b:
4f:50:1a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:42 2025 by rpki-client