Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9ab6632f-6428-3146-8796-aa7c747248c8.roa
File: 9ab6632f-6428-3146-8796-aa7c747248c8.roa (raw, json)
Hash identifier: wcQyXWzmZHGix920A/Zk9PwJJZyPnxu3vVDvexMGyUs=
Subject key identifier: A3:B3:7B:12:9A:FE:F6:27:79:50:D7:F8:47:86:DF:1F:8C:CF:CD:C9
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48DB21B1EFEE4E4D9C980
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9ab6632f-6428-3146-8796-aa7c747248c8.roa
Signing time: Fri 08 Nov 2024 15:05:01 +0000
ROA not before: Fri 08 Nov 2024 15:05:01 +0000
ROA not after: Thu 06 Feb 2025 15:05:01 +0000
asID: 81
IP address blocks: 152.60.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:8d:b2:1b:1e:fe:e4:e4:d9:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:01 2024 GMT
Not After : Feb 6 15:05:01 2025 GMT
Subject: CN=3b65b0d2-ef66-4521-a042-7f995d2e5554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:98:57:ad:87:2b:2a:b5:8b:33:2a:95:07:dc:
94:29:8b:54:7c:43:c8:73:7c:37:4d:c7:bd:b2:d8:
f5:1a:fe:9c:eb:7e:61:57:05:19:a8:c2:19:65:7e:
f2:15:e9:95:d6:27:e8:06:8c:56:c6:25:2c:8b:b9:
ae:0b:28:9f:db:37:d1:8f:05:77:86:9d:d1:d9:6e:
61:b3:41:fd:81:d1:22:cc:53:33:b3:03:44:fd:e6:
77:57:dd:16:bf:09:45:fa:6d:c2:4f:f0:5c:6a:9f:
22:b3:12:b8:48:41:c1:85:65:29:86:d6:85:be:f0:
f5:48:cb:40:8a:3a:a8:87:08:ad:04:9d:c1:14:6a:
65:53:17:4f:05:ad:7c:12:54:f8:8c:35:e4:81:bd:
75:a4:8e:33:d3:5e:b6:3e:b0:5a:34:1b:61:94:26:
cd:99:a0:2f:54:6b:59:3d:89:f0:49:89:d8:89:51:
7e:b3:d6:e0:b9:a0:6d:f1:a6:8f:92:ac:d7:a3:47:
5a:dc:3e:df:41:ef:c6:c6:7d:70:0f:3b:11:bf:98:
c3:6c:f7:18:73:79:39:56:bc:4d:3e:04:0e:81:5e:
35:39:10:b5:03:56:28:30:33:c6:a1:27:97:2e:11:
88:91:5d:cd:25:ba:c1:81:00:c9:30:25:50:67:91:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B3:7B:12:9A:FE:F6:27:79:50:D7:F8:47:86:DF:1F:8C:CF:CD:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9ab6632f-6428-3146-8796-aa7c747248c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.60.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:61:ab:9e:c6:ca:c2:28:f1:e3:de:0e:64:91:8a:db:e7:13:
df:6a:c6:7b:27:f1:82:1a:44:c8:fe:26:b2:12:00:e6:10:15:
be:01:e0:d3:9c:98:77:9e:07:db:25:fd:c3:84:29:15:c6:08:
6a:b5:2c:7b:da:6e:1c:35:96:9d:ce:7f:13:ad:05:20:e3:42:
a4:af:e8:11:5a:45:21:e1:d4:83:bd:0a:fd:6e:5b:7b:6e:96:
b8:eb:35:97:42:8d:46:ad:21:e4:35:b6:bf:69:c8:98:7c:88:
b7:3b:5f:d7:ce:2f:e6:31:a1:74:18:ae:b9:bd:18:7a:e0:31:
47:d4:5d:db:1f:6e:a0:f5:cb:fd:8b:20:0c:a8:5e:ae:d5:5c:
cd:82:a5:dd:bd:84:1d:f6:3e:2a:e4:2c:77:8c:26:77:68:18:
c5:53:dd:c7:d8:68:24:c8:56:32:0c:a7:8e:1e:5a:e3:41:97:
cf:67:ba:b6:50:71:2e:26:57:27:3c:01:80:2c:1e:8b:cf:1e:
83:17:38:8d:d6:a6:10:1d:0e:6f:75:12:63:0f:0f:72:c8:b8:
b0:c3:e3:13:6c:58:d6:44:a1:8f:cd:82:a9:f5:bb:84:9d:2b:
71:3f:17:f2:95:68:b3:0b:3b:a2:ad:a7:3b:3b:4c:83:37:55:
16:f7:4e:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP9I2yGx7+5OTZyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDUwMVoXDTI1MDIwNjE1MDUwMVowLzEtMCsGA1UEAxMk
M2I2NWIwZDItZWY2Ni00NTIxLWEwNDItN2Y5OTVkMmU1NTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZhXrYcrKrWLMyqVB9yUKYtUfEPIc3w3Tce9
stj1Gv6c635hVwUZqMIZZX7yFemV1ifoBoxWxiUsi7muCyif2zfRjwV3hp3R2W5h
s0H9gdEizFMzswNE/eZ3V90WvwlF+m3CT/Bcap8isxK4SEHBhWUphtaFvvD1SMtA
ijqohwitBJ3BFGplUxdPBa18ElT4jDXkgb11pI4z0162PrBaNBthlCbNmaAvVGtZ
PYnwSYnYiVF+s9bguaBt8aaPkqzXo0da3D7fQe/Gxn1wDzsRv5jDbPcYc3k5VrxN
PgQOgV41ORC1A1YoMDPGoSeXLhGIkV3NJbrBgQDJMCVQZ5E/pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKOzexKa/vYneVDX+EeG3x+Mz83JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOWFiNjYzMmYtNjQyOC0z
MTQ2LTg3OTYtYWE3Yzc0NzI0OGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmDwEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxhq57GysIo8ePeDmSRitvnE99qxnsn8YIaRMj+JrISAOYQFb4B4NOc
mHeeB9sl/cOEKRXGCGq1LHvabhw1lp3OfxOtBSDjQqSv6BFaRSHh1IO9Cv1uW3tu
lrjrNZdCjUatIeQ1tr9pyJh8iLc7X9fOL+YxoXQYrrm9GHrgMUfUXdsfbqD1y/2L
IAyoXq7VXM2Cpd29hB32PirkLHeMJndoGMVT3cfYaCTIVjIMp44eWuNBl89nurZQ
cS4mVyc8AYAsHovPHoMXOI3WphAdDm91EmMPD3LIuLDD4xNsWNZEoY/Ngqn1u4Sd
K3E/F/KVaLMLO6Ktpzs7TIM3VRb3ToU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:37:45 2025 by rpki-client