Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a9d9646e-1a60-3964-84e2-d3175e0152f9.roa
File: a9d9646e-1a60-3964-84e2-d3175e0152f9.roa (raw, json)
Hash identifier: AGvxBQtLpxstYB3eFc+L/adQV7X+/4ONnXQ23EqS63k=
Subject key identifier: 33:A6:61:8D:45:EE:D8:31:4F:57:F0:42:5B:39:A8:46:2C:63:42:62
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBA3E77BA0A375AC6A3E0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a9d9646e-1a60-3964-84e2-d3175e0152f9.roa
Signing time: Wed 16 Oct 2024 14:26:33 +0000
ROA not before: Wed 16 Oct 2024 14:26:33 +0000
ROA not after: Tue 14 Jan 2025 15:26:33 +0000
asID: 81
IP address blocks: 152.26.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:ba:3e:77:ba:0a:37:5a:c6:a3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:33 2024 GMT
Not After : Jan 14 15:26:33 2025 GMT
Subject: CN=8173c863-081b-45ee-9a49-c5a583530b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:a5:76:1b:ea:70:75:88:f0:1f:49:1a:a7:
47:a2:a1:bc:65:1b:33:6c:65:a8:d0:44:e3:29:5c:
04:8b:80:81:7d:ec:00:45:51:9b:8d:8a:a6:67:b3:
db:1e:07:d4:bb:25:bf:2d:3c:af:ee:c4:a6:e9:64:
e9:d0:90:21:84:0c:ba:13:09:c2:8d:6e:90:a0:d2:
28:e5:85:0d:83:14:77:57:55:f5:b1:0d:b1:92:95:
0b:30:e9:66:3f:4f:a8:6a:71:d4:a5:97:b0:9e:8c:
83:18:29:79:09:bd:dc:4b:0d:69:dd:0b:c7:6e:7e:
cb:46:51:a3:a1:14:69:4f:41:d2:d5:6b:04:c0:df:
fe:04:ec:e6:91:f4:fe:ab:f7:d7:5b:2e:aa:57:bf:
59:a6:26:fa:2d:1f:23:28:ba:43:b9:01:2b:1b:14:
67:19:c0:32:ea:43:e0:ba:ba:e8:ed:03:d1:8e:7f:
c1:21:fb:a3:ed:77:c9:43:58:57:35:85:82:71:fa:
52:7a:4b:52:d7:c9:a7:06:6c:eb:ad:35:9b:af:c1:
44:bf:55:5e:09:e9:70:18:7e:6f:43:4b:52:ed:f7:
b0:69:05:b5:57:f7:d2:4d:9c:56:c2:63:97:02:29:
d3:d4:38:06:4b:66:30:cb:e7:80:58:8a:f5:a8:3a:
3f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A6:61:8D:45:EE:D8:31:4F:57:F0:42:5B:39:A8:46:2C:63:42:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a9d9646e-1a60-3964-84e2-d3175e0152f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.26.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:30:5a:35:7a:b8:f4:48:1a:6f:49:04:d1:57:3c:b8:29:f4:
28:1e:c6:06:c7:d5:24:aa:46:98:07:4f:db:93:f2:b2:2f:84:
94:40:78:0e:ba:ad:ab:7e:65:04:af:4c:36:07:7a:20:26:3a:
db:1e:5b:c1:7e:23:8c:9e:99:e8:29:4f:74:8b:1f:80:0f:fa:
7e:d0:7a:0f:ec:77:d9:b3:45:7f:9a:76:54:8d:38:3f:ef:99:
4c:8d:1c:49:0d:6b:ed:22:ab:d9:c1:d5:ac:54:dc:b0:d1:8c:
99:29:2e:54:54:2d:c0:0b:7b:0a:d8:22:1f:90:66:ad:66:b5:
e7:bc:b7:ae:d2:77:a7:74:8b:d7:5e:7b:78:40:43:de:b4:80:
fb:a2:d8:59:29:f8:99:b4:46:fc:b1:b2:e8:ae:03:30:8f:c7:
b7:23:2b:a7:db:86:e0:38:04:e9:53:cb:86:bd:6a:79:d0:3d:
e7:9a:05:1a:2e:35:c8:ff:bb:b5:99:62:7f:e8:66:91:4b:7c:
68:20:ed:69:ff:b3:e3:19:3a:30:42:c8:a4:f8:43:05:e8:c9:
0a:e3:ec:de:81:f1:44:6c:8d:82:bb:da:22:7d:26:ce:9e:08:
d3:90:e7:79:02:9a:61:2f:c8:83:42:46:b7:8d:1e:80:04:f7:
11:32:64:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:49 2025 by rpki-client