Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/926c7003-1e9d-3833-860a-3a6723d35dec.roa
File: 926c7003-1e9d-3833-860a-3a6723d35dec.roa (raw, json)
Hash identifier: eGtCs38fOJhVPenE54LrrmU8ahNiqlz7ECfMcOO6ccA=
Subject key identifier: D1:D1:9E:5F:B6:AE:93:C2:B4:7F:E5:B1:B2:CF:F6:07:6E:F2:73:06
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBA06A0FC8D5C073D80A0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/926c7003-1e9d-3833-860a-3a6723d35dec.roa
Signing time: Wed 16 Oct 2024 14:26:33 +0000
ROA not before: Wed 16 Oct 2024 14:26:33 +0000
ROA not after: Tue 14 Jan 2025 15:26:33 +0000
asID: 81
IP address blocks: 152.22.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:ba:06:a0:fc:8d:5c:07:3d:80:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:33 2024 GMT
Not After : Jan 14 15:26:33 2025 GMT
Subject: CN=05290c30-7d6b-4e16-bf85-e2436036d73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:3d:2e:99:cd:72:74:6c:ba:08:d8:93:73:
6d:60:2a:2e:0b:44:56:7d:99:77:eb:93:72:6b:b9:
b2:27:70:4c:5b:c4:d9:8a:42:dd:86:d6:8f:b6:b6:
d7:70:2b:93:fd:05:a7:c8:eb:91:a4:e1:1a:8b:c5:
ae:13:a8:47:e3:f5:22:62:55:ea:e0:c2:be:1c:53:
be:af:d3:2c:cb:84:db:e5:0d:57:8c:85:cc:29:69:
ee:55:ce:a8:d8:dd:55:55:2b:de:7d:2f:05:7e:f2:
68:a6:57:7d:66:f8:e0:5c:60:66:62:1e:93:35:4f:
82:18:13:c0:b8:37:05:f8:3a:c8:1c:ab:ea:12:4b:
dc:f9:e0:2c:c4:d9:fb:d1:7c:18:48:aa:5f:d7:6d:
11:f0:88:ec:f5:9d:fc:57:f5:d7:6c:65:14:28:3f:
7b:b9:d7:18:39:d4:b7:9c:3f:79:22:40:d2:49:e1:
b5:54:15:7c:9d:4b:04:35:7f:1f:79:7a:90:ed:04:
24:d3:90:20:8d:22:4d:9d:08:19:9b:2d:ac:91:ef:
71:ab:12:9f:81:8f:dc:db:63:4a:65:ae:64:82:84:
03:01:5b:f9:5a:53:ea:4f:ca:d1:e7:ac:b0:7c:2d:
24:45:21:d0:ea:9f:a2:3e:ae:5e:a7:32:3b:3d:3d:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D1:9E:5F:B6:AE:93:C2:B4:7F:E5:B1:B2:CF:F6:07:6E:F2:73:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/926c7003-1e9d-3833-860a-3a6723d35dec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:f8:2f:e3:6b:e4:bc:16:8c:86:48:ad:8f:c4:7f:4c:04:46:
27:35:3c:f4:f5:be:ef:ac:a6:9a:97:e4:e7:a8:84:81:dc:ea:
8d:59:53:55:c9:40:c5:04:06:28:41:de:ef:81:5a:2d:86:28:
f6:d8:8c:4c:a4:f8:57:e9:d9:c4:19:c0:d5:b9:a7:2a:6b:3d:
ba:6e:e3:c9:4c:49:e4:9d:e1:aa:24:3d:2d:38:a8:de:fb:fc:
24:7b:2a:bb:fa:90:24:3f:8d:59:1b:3f:2b:3d:c9:0b:3e:73:
f8:8d:53:f3:ea:a3:83:4c:0b:8e:01:65:01:d0:0c:f7:80:e7:
45:72:5f:bb:1e:b2:aa:9d:2e:30:aa:29:ce:97:ec:15:27:a0:
ea:2b:8e:ee:21:56:fc:06:61:6b:9c:44:b9:0e:ad:35:74:a7:
5c:0c:98:0d:32:c2:86:65:ef:fd:1b:99:65:68:b1:2d:60:55:
3c:f0:90:76:f2:e9:e1:de:5a:01:35:51:1f:40:e6:c2:14:99:
64:03:08:35:30:8e:19:e1:bf:64:95:5e:8c:19:6f:17:87:89:
7b:f9:be:86:a0:a7:99:a4:21:89:9b:33:77:02:5e:2c:48:3e:
52:07:f3:3d:58:8f:0f:29:24:1a:4c:df:dc:e6:15:d5:1c:bc:
9a:01:bb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:39:40 2025 by rpki-client