Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a5fc8e91-a640-367e-ae51-089924883522.roa
File: a5fc8e91-a640-367e-ae51-089924883522.roa (raw, json)
Hash identifier: Dhm2czubKVnvJ5d6IzdUFhXy1HXUORUy1gCMPKYuTyE=
Subject key identifier: 46:55:C0:32:B9:E9:15:17:F2:7F:31:E2:C3:E6:D5:93:7B:52:DB:12
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF481D7F850C0B8CCA98DC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a5fc8e91-a640-367e-ae51-089924883522.roa
Signing time: Fri 08 Nov 2024 15:04:56 +0000
ROA not before: Fri 08 Nov 2024 15:04:56 +0000
ROA not after: Thu 06 Feb 2025 15:04:56 +0000
asID: 81
IP address blocks: 192.101.22.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:81:d7:f8:50:c0:b8:cc:a9:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:56 2024 GMT
Not After : Feb 6 15:04:56 2025 GMT
Subject: CN=f66cd987-c328-4381-b641-7cf48c6702c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:93:40:f8:8e:60:15:68:d0:b2:cb:a5:ca:3d:
38:ce:b2:c3:a7:a6:41:6b:c3:08:fa:33:3b:48:0c:
59:84:cc:db:a5:57:27:5d:b4:cb:10:08:4b:2d:7d:
b6:51:c3:e3:0c:69:d6:3b:cb:50:9d:55:90:4e:fd:
da:fc:dd:25:2d:ad:8e:a0:95:56:3e:1b:76:b4:4a:
68:2b:1e:f3:4c:0c:77:1c:76:1c:51:2a:b7:db:e1:
b5:7d:ce:e2:fd:3f:3a:d5:40:47:cc:57:f8:d4:37:
98:f0:2b:20:eb:bc:65:53:e3:d7:74:1d:e9:e5:4c:
cd:be:23:14:34:43:7f:a3:61:3a:73:3f:03:af:ae:
7a:0f:fc:de:b2:30:49:9d:25:80:a4:be:50:c5:c1:
64:41:f9:52:e2:88:a0:11:ca:31:c6:0a:57:c0:f4:
ef:f0:66:a1:0d:ec:2d:cd:e6:49:9e:b6:a4:9d:fc:
81:a8:68:be:b6:da:27:d9:35:6e:62:4f:2f:eb:17:
36:e9:8c:17:91:77:52:2c:f0:b0:4e:55:8e:29:63:
75:e0:1e:ef:be:65:e2:4d:d5:7e:cd:fb:b1:e6:b2:
53:82:e2:ed:ae:eb:5f:63:fc:30:3a:7a:97:be:f8:
01:63:6a:bc:95:d0:8b:49:b6:62:53:f2:a8:2b:74:
90:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:55:C0:32:B9:E9:15:17:F2:7F:31:E2:C3:E6:D5:93:7B:52:DB:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a5fc8e91-a640-367e-ae51-089924883522.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.101.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:72:5d:c7:bc:af:34:ae:d0:6c:29:1f:fe:73:85:27:c4:d1:
ea:c8:14:29:31:48:83:22:08:cf:6b:5a:15:42:b4:4e:56:d7:
e2:42:2c:54:10:64:e3:c4:8d:a6:5d:09:b0:61:a9:ab:f2:c2:
5f:e1:88:2b:c6:d5:41:23:46:10:33:fc:e1:a6:81:90:31:ca:
3f:88:ff:01:58:3e:61:ce:1e:06:04:c8:c2:46:08:bc:ae:93:
d9:b5:c9:55:3b:a6:a7:3a:70:b6:26:44:9d:99:ce:e1:12:9f:
24:3b:5c:ce:2c:39:23:7a:d1:df:a7:d3:cf:c5:13:d6:38:6a:
b6:f1:c7:e9:93:54:b5:3e:5a:ef:79:7f:62:f7:a9:02:02:3b:
f5:cc:94:66:39:d7:82:1e:e4:bd:3c:6d:b3:12:8f:3f:a9:bb:
92:ee:b7:29:70:c9:a9:02:23:da:0e:5d:03:aa:1a:db:d6:86:
8e:91:bc:b0:dd:ca:ad:57:b7:6a:58:97:a5:50:92:47:04:e5:
1d:1f:81:75:b1:60:22:0a:40:84:aa:ea:2a:1a:1b:ab:b2:4f:
c5:9f:77:73:41:15:31:fb:c4:0a:a1:90:8f:47:d3:ff:5d:25:
00:62:b1:35:90:60:33:d1:24:81:9b:a4:08:10:7d:31:2a:79:
cb:e7:20:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:50:15 2025 by rpki-client