Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9ae2b2c2-ca5f-31e8-b351-f71afada6c40.roa
File: 9ae2b2c2-ca5f-31e8-b351-f71afada6c40.roa (raw, json)
Hash identifier: mDJgSe6JgemENpkfwviD+cya+gUnWKWxUI0km4EY1so=
Subject key identifier: 53:E2:48:B6:44:6E:C6:94:48:7A:74:E0:2E:CE:8C:42:04:A1:8E:40
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48AC121096FBF5057A600
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9ae2b2c2-ca5f-31e8-b351-f71afada6c40.roa
Signing time: Fri 08 Nov 2024 15:05:00 +0000
ROA not before: Fri 08 Nov 2024 15:05:00 +0000
ROA not after: Thu 06 Feb 2025 15:05:00 +0000
asID: 81
IP address blocks: 152.46.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:8a:c1:21:09:6f:bf:50:57:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:00 2024 GMT
Not After : Feb 6 15:05:00 2025 GMT
Subject: CN=a424fd6f-b37c-49a8-9c36-0f5c6860b8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:64:82:4c:e1:48:b7:de:32:8c:42:2a:ad:
38:3a:24:ea:88:e4:4b:fa:be:28:68:45:37:db:7d:
2c:7f:0e:1d:f3:46:10:4a:7f:d5:b2:f8:b1:51:f0:
a8:3f:77:3d:d0:55:99:ee:41:e9:87:2c:8b:c4:ec:
b1:7e:1e:71:db:6f:63:d9:c2:c6:42:27:1f:09:10:
15:a8:fa:66:54:4a:33:54:04:af:b3:ae:ee:6b:3c:
4e:c0:b9:01:b3:2f:d8:f6:fe:dc:2f:1d:aa:bc:c7:
86:6f:31:08:32:af:38:d3:63:c5:9e:25:d7:2e:bb:
73:5b:5f:f5:57:eb:ac:21:67:df:61:88:86:ed:80:
e0:52:ef:e0:e2:17:89:ca:2b:c9:a8:b7:a3:bd:6c:
b4:52:57:89:a5:bc:91:1e:e0:80:c9:7f:0f:4c:08:
48:8a:ca:ad:b3:dd:26:a0:a8:0f:c4:26:d1:b3:2d:
f3:3f:f5:2b:0c:18:3a:af:28:1d:94:37:c9:7e:df:
95:04:94:2f:50:16:1b:e5:dc:e0:3c:ca:a9:c7:a7:
9d:60:91:f7:e6:d0:f4:a1:7f:bd:8e:42:73:cb:fd:
8e:d3:5d:56:e4:0e:e4:38:fe:95:7b:0b:5d:93:71:
a0:4c:33:bf:a5:e2:20:d7:75:1c:3f:5f:5c:c5:51:
e4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E2:48:B6:44:6E:C6:94:48:7A:74:E0:2E:CE:8C:42:04:A1:8E:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9ae2b2c2-ca5f-31e8-b351-f71afada6c40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:33:b1:63:67:85:d8:f3:4d:18:03:40:0d:be:16:31:dc:25:
e1:d5:ef:c6:7c:4e:3f:ab:f9:65:b6:00:6b:c4:06:0d:96:14:
c0:a1:7f:61:7d:12:a7:b2:0d:92:11:60:63:f6:f6:57:94:fc:
f9:03:87:49:7a:5f:b7:f8:f3:fd:e3:7c:78:fd:34:91:09:65:
96:60:b5:65:5e:ee:e6:ed:14:17:0e:b7:1b:d6:7c:ec:6b:40:
90:f5:a3:4d:f7:6b:43:b1:2b:0c:63:62:a3:0a:9e:a1:99:24:
87:b6:1b:88:12:15:de:9c:60:42:5d:a9:5d:fa:be:f1:7e:ce:
8a:50:47:a3:aa:30:2f:23:28:1d:d8:e4:b1:85:ef:c1:c3:14:
4d:67:ab:47:99:e7:ea:23:bd:f1:d8:82:0a:0e:d8:bc:62:aa:
b3:53:5d:19:29:95:af:3d:68:d3:14:81:f2:aa:49:4e:ad:48:
c5:8c:bc:3a:35:17:fc:b1:1b:bc:ec:74:f7:59:a8:0f:88:62:
2b:de:1f:1b:61:41:dd:d0:3b:d2:23:a7:f7:48:ef:78:a8:b1:
9c:9e:90:85:86:b2:6d:2b:ec:63:f3:01:b5:fc:e4:2c:1f:9d:
cc:fd:55:10:1d:be:ad:03:f0:ac:44:07:41:bd:7b:8d:be:26:
8a:78:53:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:46 2025 by rpki-client