Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8fbba486-a57c-3c50-895c-621201ffb88e.roa
File: 8fbba486-a57c-3c50-895c-621201ffb88e.roa (raw, json)
Hash identifier: YoHkXwgAw9hmBhj/1pWp0w0LRfqqbjoIThGFQlXaiGc=
Subject key identifier: BC:A6:62:4C:97:8A:A3:05:AC:32:4B:32:34:B4:AC:EC:E8:AF:0C:56
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48642478840EA71AECC80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8fbba486-a57c-3c50-895c-621201ffb88e.roa
Signing time: Fri 08 Nov 2024 15:04:58 +0000
ROA not before: Fri 08 Nov 2024 15:04:58 +0000
ROA not after: Thu 06 Feb 2025 15:04:58 +0000
asID: 81
IP address blocks: 152.26.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:86:42:47:88:40:ea:71:ae:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:58 2024 GMT
Not After : Feb 6 15:04:58 2025 GMT
Subject: CN=3536a5f8-cbeb-4c6c-9515-e6f10aa9a116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:90:8d:76:ef:21:59:1c:0c:95:a0:d4:9c:7f:
8a:58:13:e6:bc:d2:8e:93:f9:49:dd:3b:cf:30:00:
d0:5a:72:e2:2c:75:85:99:a3:f9:e0:73:3e:6f:65:
52:a5:71:3e:5f:b2:fd:72:a0:b2:4c:cb:61:25:69:
23:37:9f:94:89:04:6d:cb:11:29:c5:ce:44:c2:ec:
f2:6d:a8:d4:00:59:f1:d2:ac:21:66:a5:62:6d:8e:
50:8f:c7:58:df:0d:16:e8:69:d8:b8:2f:4c:f1:9a:
95:44:37:7d:92:c1:b7:6b:b7:69:97:9a:4e:f8:f6:
09:57:c9:cc:39:e9:c2:7f:fe:c5:d6:20:70:cd:2f:
38:e2:7d:f2:d4:bf:19:cf:81:42:ab:72:68:ce:1c:
c7:3e:6b:c1:dd:70:61:bf:21:e9:02:f4:76:02:e6:
e8:37:58:2f:80:01:9c:6b:04:93:58:25:2c:f4:88:
39:2f:5d:4e:8c:62:f7:67:69:61:23:63:18:68:b5:
08:d6:1e:03:37:d8:8a:ad:61:eb:43:78:2b:64:31:
aa:68:e8:c0:85:96:4b:de:f8:64:48:66:02:63:a3:
e8:d6:bc:38:53:cc:87:c3:75:52:97:c3:94:81:50:
92:59:76:74:bc:fd:87:16:87:7f:5d:21:e2:e2:3e:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A6:62:4C:97:8A:A3:05:AC:32:4B:32:34:B4:AC:EC:E8:AF:0C:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8fbba486-a57c-3c50-895c-621201ffb88e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.26.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:95:23:7c:c6:b9:96:d6:61:2b:cb:3e:85:d2:e8:53:f8:39:
cb:47:44:e7:af:ea:27:65:c6:76:81:05:57:2a:22:ac:cd:48:
81:8c:b6:f5:37:2a:0b:05:3e:0d:e5:06:28:58:38:b3:10:09:
18:24:2d:ba:68:ca:ac:19:ae:71:d3:e9:6d:06:c5:ca:c5:62:
e4:78:8a:0d:a4:b4:ea:83:8b:86:ef:8c:e3:e5:64:78:ad:b0:
dd:26:47:86:63:cd:99:29:ad:49:de:dd:d9:af:fc:7d:01:00:
ab:95:e9:2e:fd:14:8c:ea:53:3c:78:96:5c:7c:6e:f5:e9:20:
25:1b:8d:2b:bd:f0:ff:c9:e9:86:c3:b4:3e:44:1f:42:3e:9d:
32:de:91:79:4d:84:b1:9c:5a:7a:72:3b:53:e8:c3:48:76:fc:
2d:ba:e8:c3:82:b0:f0:39:3a:4e:6c:ec:8b:28:a6:d7:ee:1b:
82:2c:96:49:b4:d5:5a:cb:8a:f7:71:79:36:2e:c7:c0:9a:09:
02:0a:9b:63:79:55:3c:50:6d:31:16:e9:6d:a6:db:9e:44:0e:
22:74:45:b8:6b:33:88:eb:8d:39:ef:62:f5:f6:b8:39:21:91:
3e:e7:0a:fe:ae:53:4a:05:9b:45:4a:35:60:fe:f1:8a:ee:68:
6c:04:c1:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP9IZCR4hA6nGuzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDQ1OFoXDTI1MDIwNjE1MDQ1OFowLzEtMCsGA1UEAxMk
MzUzNmE1ZjgtY2JlYi00YzZjLTk1MTUtZTZmMTBhYTlhMTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35CNdu8hWRwMlaDUnH+KWBPmvNKOk/lJ3TvP
MADQWnLiLHWFmaP54HM+b2VSpXE+X7L9cqCyTMthJWkjN5+UiQRtyxEpxc5Ewuzy
bajUAFnx0qwhZqVibY5Qj8dY3w0W6GnYuC9M8ZqVRDd9ksG3a7dpl5pO+PYJV8nM
OenCf/7F1iBwzS844n3y1L8Zz4FCq3JozhzHPmvB3XBhvyHpAvR2AuboN1gvgAGc
awSTWCUs9Ig5L11OjGL3Z2lhI2MYaLUI1h4DN9iKrWHrQ3grZDGqaOjAhZZL3vhk
SGYCY6Po1rw4U8yHw3VSl8OUgVCSWXZ0vP2HFod/XSHi4j4L4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLymYkyXiqMFrDJLMjS0rOzorwxWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOGZiYmE0ODYtYTU3Yy0z
YzUwLTg5NWMtNjIxMjAxZmZiODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBrJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGKVI3zGuZbWYSvLPoXS6FP4OctHROev6idlxnaBBVcqIqzNSIGMtvU3
KgsFPg3lBihYOLMQCRgkLbpoyqwZrnHT6W0GxcrFYuR4ig2ktOqDi4bvjOPlZHit
sN0mR4ZjzZkprUne3dmv/H0BAKuV6S79FIzqUzx4llx8bvXpICUbjSu98P/J6YbD
tD5EH0I+nTLekXlNhLGcWnpyO1Pow0h2/C266MOCsPA5Ok5s7IsoptfuG4Islkm0
1VrLivdxeTYux8CaCQIKm2N5VTxQbTEW6W2m255EDiJ0RbhrM4jrjTnvYvX2uDkh
kT7nCv6uU0oFm0VKNWD+8YruaGwEwQI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:31 2025 by rpki-client