Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9be9d4c2-0a80-3ba1-a07c-3cd8d5dbb634.roa
File: 9be9d4c2-0a80-3ba1-a07c-3cd8d5dbb634.roa (raw, json)
Hash identifier: erom9P2JpzXZK3FA7t05v8o25FqCjC1toMU2Y1Tyncc=
Subject key identifier: 38:DA:79:55:42:F2:92:91:85:A6:CC:6A:4B:30:10:C6:CA:AC:91:F8
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48C74730C39928361E700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9be9d4c2-0a80-3ba1-a07c-3cd8d5dbb634.roa
Signing time: Fri 08 Nov 2024 15:05:01 +0000
ROA not before: Fri 08 Nov 2024 15:05:01 +0000
ROA not after: Thu 06 Feb 2025 15:05:01 +0000
asID: 81
IP address blocks: 152.46.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:8c:74:73:0c:39:92:83:61:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:01 2024 GMT
Not After : Feb 6 15:05:01 2025 GMT
Subject: CN=6fb8720e-ca1a-4777-a20e-c9ec766b8e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:61:71:bb:01:16:59:c7:21:b3:3e:f5:22:
38:d4:1c:b3:db:8f:8b:8a:18:0c:62:06:9c:bc:10:
19:c1:0e:8e:59:bd:77:fc:6d:d2:8a:e8:5c:a1:5c:
74:4e:93:bc:50:10:ad:09:16:0a:37:5d:eb:73:35:
7b:42:bc:92:75:89:ea:4a:94:a3:9d:ba:2b:a6:a0:
0c:72:c9:1a:43:31:e3:e0:c1:96:70:a4:fd:e9:14:
29:18:57:e0:b0:80:12:26:ee:dd:8b:3b:78:63:fc:
e5:d9:7a:87:a3:53:a1:f6:7e:bf:c9:ad:23:ba:77:
65:dd:6f:10:55:4c:66:05:6e:d9:b5:d3:a0:36:44:
cc:46:f9:70:4e:3c:fa:ca:ce:b1:d4:b4:6f:a2:37:
56:f1:a0:2b:c2:43:38:41:74:e2:45:25:c9:9c:f0:
85:3f:62:ad:a9:7e:46:18:99:a9:dc:74:3f:4a:ad:
d9:a3:2f:c8:b7:ac:10:1f:9d:89:4c:5c:0e:c6:88:
22:91:c7:2e:05:31:dc:91:aa:4c:47:fa:95:a3:8f:
dd:da:b8:e6:16:52:18:cf:77:b0:1c:dc:c6:ce:33:
80:ee:66:1f:e3:90:b7:ca:65:3b:7e:9a:a3:fe:a7:
8e:3d:d3:52:f2:e3:95:47:9e:a5:20:84:64:f3:1a:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DA:79:55:42:F2:92:91:85:A6:CC:6A:4B:30:10:C6:CA:AC:91:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9be9d4c2-0a80-3ba1-a07c-3cd8d5dbb634.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:c6:1f:1e:36:fa:98:9b:1c:d4:27:68:94:63:b1:bc:17:c8:
0e:64:75:b7:53:21:ec:23:0c:d0:d3:02:39:0a:42:3d:0b:7d:
70:39:74:ef:9e:1b:73:be:2b:92:c0:af:b0:d7:07:b6:bc:d9:
52:11:83:8d:54:8d:4b:da:3c:c0:35:ad:c8:50:e1:d3:fe:52:
e7:ef:76:27:61:36:1d:46:67:24:8e:76:c4:76:ab:d4:d4:d7:
99:55:55:0d:8e:8d:5e:bf:f8:86:60:64:72:24:38:f8:b6:c5:
aa:92:7d:42:ea:16:6b:dc:a2:fd:7d:8b:f4:b7:34:de:f1:1e:
a8:72:be:27:59:06:e3:4e:bc:41:6f:9a:45:7d:98:dc:5d:4b:
49:8b:cf:62:0d:51:3e:73:d2:4d:64:d1:94:03:7f:0b:63:6a:
a0:a8:24:c5:48:86:19:4c:44:4c:a2:f0:b4:7a:ba:64:7f:af:
18:91:25:a6:99:d4:c7:f9:c9:26:47:30:2f:24:6e:a5:43:f4:
fd:b9:bc:e8:b1:e4:4b:68:09:68:cf:6c:ee:21:48:5c:8e:42:
c2:71:25:8c:20:7d:6a:ca:66:85:2d:63:f4:ed:17:d8:3e:45:
74:4d:12:08:39:cf:5c:30:15:f4:60:a1:06:1b:1e:ae:a6:67:
5c:ad:d4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:12 2025 by rpki-client