Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/aa207fb2-f5eb-318e-ae04-629764228c16.roa
File: aa207fb2-f5eb-318e-ae04-629764228c16.roa (raw, json)
Hash identifier: sz7/Ow+ZEL7gGP8DBil+/c/MOTM/NhQZ2J/IklSfsPc=
Subject key identifier: FD:D6:E9:30:73:29:C6:7B:6D:9A:42:3D:77:01:B8:78:3F:47:54:58
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBBAE95C2E58F8DC98E00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/aa207fb2-f5eb-318e-ae04-629764228c16.roa
Signing time: Wed 16 Oct 2024 14:26:34 +0000
ROA not before: Wed 16 Oct 2024 14:26:34 +0000
ROA not after: Tue 14 Jan 2025 15:26:34 +0000
asID: 19718
IP address blocks: 152.26.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:bb:ae:95:c2:e5:8f:8d:c9:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:34 2024 GMT
Not After : Jan 14 15:26:34 2025 GMT
Subject: CN=542726e2-a975-4064-bdf6-af81b1412431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:75:6d:c1:d9:6c:15:5c:eb:20:03:4f:6d:
d8:a3:10:19:8a:8d:b6:dc:3e:ba:2f:07:9f:b2:14:
59:2b:7e:47:fe:7a:3a:b7:22:71:0e:91:68:e6:ee:
ad:2b:fc:25:0b:d4:9b:13:dc:1e:ca:03:ee:6d:0e:
d8:e8:ad:56:08:04:c5:e4:21:68:31:72:4d:28:39:
d2:9a:00:9e:73:72:dd:27:39:d7:8e:8d:17:0a:1f:
7d:96:62:2a:2a:01:d3:c4:b5:b8:84:c9:a7:70:05:
3d:72:3f:53:3a:ad:c1:dc:88:fe:9c:75:e5:1b:79:
52:f0:78:d7:bd:9e:f9:2c:c2:09:0b:be:03:00:da:
43:ef:29:f5:94:bc:92:0c:29:60:99:cb:d6:bf:f3:
5b:4b:2b:91:48:94:ea:fb:97:44:95:57:d7:27:34:
f4:89:29:15:51:b3:38:a4:36:6e:2f:d5:33:15:04:
f3:90:55:02:28:4a:04:6a:2a:3d:a7:e2:af:09:22:
e5:60:f7:a3:bd:18:ef:20:ed:48:9f:0c:32:37:1c:
fd:71:13:6d:f1:cb:a3:f9:7d:94:cb:75:9e:90:77:
81:e8:56:eb:e7:2c:a1:71:71:91:da:09:fb:4d:af:
65:45:23:de:17:08:95:2c:37:10:47:00:27:df:72:
b4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D6:E9:30:73:29:C6:7B:6D:9A:42:3D:77:01:B8:78:3F:47:54:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/aa207fb2-f5eb-318e-ae04-629764228c16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.26.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:f3:49:60:6f:6d:21:3a:b9:89:27:6d:32:24:3f:de:6d:9a:
b5:66:a5:a7:e1:b3:1d:d2:18:88:66:d0:3a:e2:34:9a:01:a9:
81:58:27:9a:60:b2:18:69:cc:79:70:ab:23:2e:78:00:e2:9f:
af:f5:1c:c8:42:40:10:61:b6:e2:91:55:d5:0a:87:25:58:e8:
88:f1:b9:7b:3f:05:ec:e8:73:b8:f3:22:12:fd:dc:05:72:a2:
9e:95:fc:4a:7d:64:f3:e4:02:7f:8a:3d:40:92:75:4e:5c:be:
27:43:ef:22:85:dc:29:59:75:54:20:42:00:95:64:b9:90:4d:
14:b8:2f:8d:31:ad:a7:1a:e2:9e:da:03:c8:d7:74:ea:2b:43:
2a:da:41:c6:f9:49:b6:9f:9e:e4:56:1c:e1:69:bb:14:94:5e:
be:10:68:1a:b6:d9:44:62:d1:50:e0:e6:7d:b1:0f:95:40:43:
e7:1f:ab:87:a3:1b:ce:64:dd:6b:65:a8:29:89:2b:c2:6e:21:
7c:61:ba:90:ab:4f:d7:88:ac:45:ab:cc:93:b4:1d:e5:e2:49:
0d:c3:ce:df:a7:d5:41:f5:df:6f:80:25:ef:16:5b:61:6f:62:
e1:01:fd:31:40:ee:b9:5c:dd:f5:52:1d:f8:68:b3:a3:02:26:
bd:8c:f1:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePq7uulcLlj43JjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTAxNjE0MjYzNFoXDTI1MDExNDE1MjYzNFowLzEtMCsGA1UEAxMk
NTQyNzI2ZTItYTk3NS00MDY0LWJkZjYtYWY4MWIxNDEyNDMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRF1bcHZbBVc6yADT23YoxAZio223D66Lwef
shRZK35H/no6tyJxDpFo5u6tK/wlC9SbE9weygPubQ7Y6K1WCATF5CFoMXJNKDnS
mgCec3LdJznXjo0XCh99lmIqKgHTxLW4hMmncAU9cj9TOq3B3Ij+nHXlG3lS8HjX
vZ75LMIJC74DANpD7yn1lLySDClgmcvWv/NbSyuRSJTq+5dElVfXJzT0iSkVUbM4
pDZuL9UzFQTzkFUCKEoEaio9p+KvCSLlYPejvRjvIO1InwwyNxz9cRNt8cuj+X2U
y3WekHeB6Fbr5yyhcXGR2gn7Ta9lRSPeFwiVLDcQRwAn33K0WQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3W6TBzKcZ7bZpCPXcBuHg/R1RYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYWEyMDdmYjItZjVlYi0z
MThlLWFlMDQtNjI5NzY0MjI4YzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBoiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLzSWBvbSE6uYknbTIkP95tmrVmpafhsx3SGIhm0DriNJoBqYFYJ5pg
shhpzHlwqyMueADin6/1HMhCQBBhtuKRVdUKhyVY6IjxuXs/Bezoc7jzIhL93AVy
op6V/Ep9ZPPkAn+KPUCSdU5cvidD7yKF3ClZdVQgQgCVZLmQTRS4L40xraca4p7a
A8jXdOorQyraQcb5SbafnuRWHOFpuxSUXr4QaBq22URi0VDg5n2xD5VAQ+cfq4ej
G85k3WtlqCmJK8JuIXxhupCrT9eIrEWrzJO0HeXiSQ3Dzt+n1UH132+AJe8WW2Fv
YuEB/TFA7rlc3fVSHfhos6MCJr2M8ec=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:27:34 2025 by rpki-client