Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a031a9fd-dc2a-3750-a5d5-5ab81694f96b.roa
File: a031a9fd-dc2a-3750-a5d5-5ab81694f96b.roa (raw, json)
Hash identifier: CBqzOmAQHphiVYjXzXa1gM3RL0+L59DjIq3G9ebFgbg=
Subject key identifier: 65:07:3C:6A:B1:A6:11:CF:8A:F2:87:9A:2C:25:F9:61:3F:46:2F:0C
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF487D9E55A1E3EE1FFA980
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a031a9fd-dc2a-3750-a5d5-5ab81694f96b.roa
Signing time: Fri 08 Nov 2024 15:04:59 +0000
ROA not before: Fri 08 Nov 2024 15:04:59 +0000
ROA not after: Thu 06 Feb 2025 15:04:59 +0000
asID: 81
IP address blocks: 152.26.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:87:d9:e5:5a:1e:3e:e1:ff:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:59 2024 GMT
Not After : Feb 6 15:04:59 2025 GMT
Subject: CN=9c5b5404-51c6-4878-a527-f9d76afaf236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:e3:83:18:11:8e:b1:f6:67:86:67:86:b8:
5b:6a:f2:51:27:74:5f:81:4d:0f:9d:2c:98:2e:4c:
a2:a7:f0:25:f4:57:37:7c:b2:2a:21:5e:16:fc:1c:
c0:18:d0:53:ae:2b:a3:ee:e2:c4:25:0f:60:c2:d0:
0b:c8:a1:90:16:1d:02:d6:76:86:37:f0:a5:15:8a:
6f:a6:87:1e:dc:bc:8a:cf:90:9b:f9:73:ca:f3:b2:
c7:2b:7d:c8:15:3c:ab:cf:65:37:29:bc:5c:73:7b:
91:dc:83:7e:2f:26:03:75:9d:6c:22:1d:9f:d2:17:
45:6e:8f:e5:7b:9f:ad:b8:0d:02:68:c2:e3:77:d1:
44:11:89:bc:8c:20:a8:a4:11:d9:ab:9f:86:96:ce:
38:0c:93:81:2c:bd:70:71:ef:b5:3d:1b:51:fb:c9:
04:0c:fc:f1:f9:13:19:bf:a2:3c:f5:74:ae:8e:14:
62:dc:70:ce:06:f5:a4:34:bd:53:b6:77:bc:42:f1:
2d:30:75:fb:23:50:c0:8e:22:46:3c:67:83:62:28:
67:41:27:6a:ff:b8:28:8b:08:8b:e3:ef:c5:0b:55:
3f:99:1d:71:0d:a6:ee:de:7f:13:bc:11:db:6a:50:
cf:bc:22:cc:b5:07:72:91:ba:32:73:8f:2f:6a:6b:
a6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:07:3C:6A:B1:A6:11:CF:8A:F2:87:9A:2C:25:F9:61:3F:46:2F:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a031a9fd-dc2a-3750-a5d5-5ab81694f96b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.26.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:e9:97:71:ea:5e:ee:e5:2e:8a:22:6b:c8:cd:32:62:8a:81:
d3:ee:f9:13:78:15:6c:34:e9:d4:8a:49:d7:4c:9e:fe:b4:75:
bf:a2:cf:a9:34:8c:78:21:92:27:d0:77:d7:5b:1f:8a:07:c4:
f4:9c:bd:50:64:3f:1b:a4:05:6d:b9:10:4d:8d:f2:e4:5e:25:
24:d5:8f:56:11:8c:23:56:0a:44:15:c5:b6:b9:56:8a:e9:11:
76:fc:35:5f:ab:07:14:d7:a3:7a:9a:6d:7d:e4:b7:df:93:af:
0f:af:f3:81:ab:20:d2:d7:0b:17:c9:ff:0d:74:89:ad:b3:5c:
a0:b7:48:7b:76:c9:d5:d7:06:84:3c:1b:7f:39:f7:b8:45:80:
6f:5c:ff:70:8c:42:02:43:11:d4:c5:92:c4:5f:29:7d:e3:77:
ba:22:89:fd:b8:9e:1a:17:13:95:bf:c9:19:22:f2:f5:a5:fc:
0b:5c:c9:d4:59:a5:4b:62:b0:79:6b:20:1c:01:88:c7:b6:87:
4e:cc:3f:13:09:67:ae:f8:7e:2b:66:3d:0d:1b:80:2e:f6:18:
bc:59:13:2d:0f:f6:17:de:2f:84:d3:24:b5:d6:41:d4:f3:7f:
b6:5c:a2:f5:40:ea:32:8d:f5:bb:07:65:fd:03:c0:71:73:b9:
dd:c5:99:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:33 2025 by rpki-client