Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ab39b160-f0c0-37f3-8f52-6607da162139.roa
File: ab39b160-f0c0-37f3-8f52-6607da162139.roa (raw, json)
Hash identifier: Tw9SH3GbjNeBYRy4LJbMOrmK8iBvdW0qFLlQuliqIoU=
Subject key identifier: F8:DB:2F:66:23:74:E7:65:D8:6C:2B:F4:10:EE:94:19:3F:AA:3E:8A
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBD92A4C63B1C72304770
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ab39b160-f0c0-37f3-8f52-6607da162139.roa
Signing time: Wed 16 Oct 2024 14:26:35 +0000
ROA not before: Wed 16 Oct 2024 14:26:35 +0000
ROA not after: Tue 14 Jan 2025 15:26:35 +0000
asID: 81
IP address blocks: 152.46.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:bd:92:a4:c6:3b:1c:72:30:47:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:35 2024 GMT
Not After : Jan 14 15:26:35 2025 GMT
Subject: CN=f2b81ee1-1d41-4bc7-96d8-fc00e958d078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:9e:34:2e:1c:cc:06:4b:92:35:bb:a6:69:
56:90:e8:ae:6e:09:c4:53:90:af:a0:c2:e9:a8:a8:
c6:1e:f7:c0:ff:b9:10:14:0f:a3:9b:ff:51:fd:f9:
02:18:51:5c:9f:2f:a7:06:25:5c:c6:6b:a9:0b:aa:
10:04:b7:67:1e:5b:29:bc:7e:20:b6:82:95:00:36:
2d:ee:9a:3a:45:dc:b6:8e:f3:fc:9b:0f:98:24:1c:
2f:0c:78:2a:45:7f:6f:78:11:15:02:fd:b9:4e:6e:
43:a5:3c:ad:e9:4f:40:b1:44:6d:31:e7:8b:64:42:
b5:ec:e8:ee:15:f6:2e:45:16:0d:37:d9:9f:43:7f:
91:aa:5f:c1:31:d2:4e:22:ba:be:45:7a:36:95:f5:
6b:48:1b:e8:6f:41:c2:be:52:44:64:8b:3f:e1:fb:
01:cf:66:63:6e:fc:89:49:01:9d:49:d7:e5:88:b6:
e3:3c:40:f3:4f:a1:37:f2:57:74:f6:72:ff:3d:a2:
fd:25:03:01:6e:68:ef:09:d9:f5:2f:58:ee:b8:9c:
66:80:39:85:28:81:f2:82:24:a5:79:eb:95:58:fe:
98:68:dd:d9:82:63:96:2e:58:12:08:29:82:ac:9c:
dd:23:94:95:1c:35:d2:e4:3d:47:eb:06:cd:d9:12:
41:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DB:2F:66:23:74:E7:65:D8:6C:2B:F4:10:EE:94:19:3F:AA:3E:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ab39b160-f0c0-37f3-8f52-6607da162139.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:7f:33:35:5c:6d:7c:d8:8e:ad:1c:93:72:51:2b:e6:e0:9b:
0f:07:84:01:b3:76:93:6e:b4:95:c5:02:da:9f:bf:39:74:7d:
13:ad:1a:f6:db:75:37:a6:0f:65:c4:24:1a:2f:b4:27:47:3a:
5e:af:42:f2:62:34:5b:15:92:a1:b0:5b:fc:ce:2f:3e:dd:f1:
81:c9:74:82:d6:88:5e:73:5e:b2:b0:b7:9c:b1:74:78:3f:ec:
ce:7c:e1:73:d1:32:b4:d3:4a:43:46:2a:ba:88:0e:36:fa:80:
fc:1a:8b:bc:79:f7:61:35:df:9a:ea:fa:e2:5a:6e:e0:37:73:
c9:b6:a7:dc:9a:92:b8:10:ec:2f:3a:48:29:b6:c2:ee:cf:82:
fc:d3:a0:30:3b:7b:e5:9e:c0:33:0d:dd:9d:d1:27:f9:e8:7c:
3a:58:2a:02:90:c3:b3:82:36:71:6a:4b:05:b2:6a:de:fc:40:
3b:b4:3a:24:09:47:34:34:a1:13:ff:f6:cd:eb:59:70:22:f7:
b5:76:55:f0:19:25:21:f5:49:34:46:7b:bd:03:4d:9e:01:47:
6c:72:cf:f8:78:8b:6b:8e:20:09:bb:bc:e9:91:2a:4c:6a:dc:
0c:68:ed:e0:9b:88:f0:0c:63:54:56:18:9f:e5:a6:fa:4e:33:
4c:92:1d:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePq72SpMY7HHIwR3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTAxNjE0MjYzNVoXDTI1MDExNDE1MjYzNVowLzEtMCsGA1UEAxMk
ZjJiODFlZTEtMWQ0MS00YmM3LTk2ZDgtZmMwMGU5NThkMDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhWeNC4czAZLkjW7pmlWkOiubgnEU5CvoMLp
qKjGHvfA/7kQFA+jm/9R/fkCGFFcny+nBiVcxmupC6oQBLdnHlspvH4gtoKVADYt
7po6Rdy2jvP8mw+YJBwvDHgqRX9veBEVAv25Tm5DpTyt6U9AsURtMeeLZEK17Oju
FfYuRRYNN9mfQ3+Rql/BMdJOIrq+RXo2lfVrSBvob0HCvlJEZIs/4fsBz2ZjbvyJ
SQGdSdfliLbjPEDzT6E38ld09nL/PaL9JQMBbmjvCdn1L1juuJxmgDmFKIHygiSl
eeuVWP6YaN3ZgmOWLlgSCCmCrJzdI5SVHDXS5D1H6wbN2RJBfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPjbL2YjdOdl2Gwr9BDulBk/qj6KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYWIzOWIxNjAtZjBjMC0z
N2YzLThmNTItNjYwN2RhMTYyMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABd/MzVcbXzYjq0ck3JRK+bgmw8HhAGzdpNutJXFAtqfvzl0fROtGvbb
dTemD2XEJBovtCdHOl6vQvJiNFsVkqGwW/zOLz7d8YHJdILWiF5zXrKwt5yxdHg/
7M584XPRMrTTSkNGKrqIDjb6gPwai7x592E135rq+uJabuA3c8m2p9yakrgQ7C86
SCm2wu7PgvzToDA7e+WewDMN3Z3RJ/nofDpYKgKQw7OCNnFqSwWyat78QDu0OiQJ
RzQ0oRP/9s3rWXAi97V2VfAZJSH1STRGe70DTZ4BR2xyz/h4i2uOIAm7vOmRKkxq
3Axo7eCbiPAMY1RWGJ/lpvpOM0ySHZc=
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:31:53 2025 by rpki-client