Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/af629cc8-db2e-3147-8c54-c1b83038a709.roa
File: af629cc8-db2e-3147-8c54-c1b83038a709.roa (raw, json)
Hash identifier: PgsA/DwRj4+9F7fEsegIH7LBAJBjFL07pgXn3tj5S5M=
Subject key identifier: 0F:7C:5E:1F:A6:72:EA:1F:E1:25:38:E5:F5:2A:AC:38:BF:B9:AC:DF
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48491ADC077E73A44FD80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/af629cc8-db2e-3147-8c54-c1b83038a709.roa
Signing time: Fri 08 Nov 2024 15:04:57 +0000
ROA not before: Fri 08 Nov 2024 15:04:57 +0000
ROA not after: Thu 06 Feb 2025 15:04:57 +0000
asID: 81
IP address blocks: 152.22.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:84:91:ad:c0:77:e7:3a:44:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:57 2024 GMT
Not After : Feb 6 15:04:57 2025 GMT
Subject: CN=af8e93de-ceec-45f7-905c-36ec4b113d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:15:0d:e5:23:2a:3a:89:21:f8:bf:22:19:8f:
78:3e:6f:22:19:3f:dc:c9:f9:aa:b6:c8:94:d9:71:
a2:43:a0:97:ea:61:56:9c:a7:12:9a:4f:c4:ea:89:
71:9b:11:72:37:d5:74:ec:23:e2:6f:ed:3b:d1:51:
d2:97:d3:6e:9f:5b:a7:b8:eb:de:86:d8:84:00:93:
52:0a:7f:c2:f9:a4:4e:dc:a1:e4:0b:8e:9b:bd:e3:
b1:55:10:73:88:eb:bd:c9:21:f3:35:11:6a:96:97:
68:02:3f:ba:85:1e:4e:3e:78:41:aa:d6:9b:51:d0:
91:91:e4:8e:55:1d:95:2c:94:b5:9c:65:97:72:ee:
c8:38:21:4c:d1:be:3b:a0:e8:df:a1:fe:85:e5:40:
ab:f6:b9:63:5b:f5:7e:85:75:61:3f:cd:bd:7c:09:
6a:ec:a1:ff:77:a0:de:55:57:ac:cf:76:0a:5f:81:
fe:66:3f:32:c9:aa:99:83:4a:89:b3:10:d1:fe:6c:
7b:bb:49:92:c3:7d:73:b5:47:eb:da:03:a5:c0:b1:
03:5d:ad:84:80:71:c2:38:50:c7:bf:d3:1d:6f:8f:
a9:96:16:64:87:70:53:e9:0d:15:61:be:91:5a:c9:
57:ce:92:9c:a1:28:88:e6:83:55:7e:05:79:ad:6c:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7C:5E:1F:A6:72:EA:1F:E1:25:38:E5:F5:2A:AC:38:BF:B9:AC:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/af629cc8-db2e-3147-8c54-c1b83038a709.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:df:0a:c8:bd:03:d2:a6:ac:ad:8b:fa:19:2f:ce:2f:05:b2:
06:a5:c7:b1:e1:54:43:3f:40:b7:22:b3:e7:f9:65:f6:96:30:
a2:78:5a:e8:02:bf:4d:0b:f4:03:75:27:87:11:5f:4c:8b:61:
d0:26:10:1a:35:70:a5:b7:5f:1d:99:e0:31:a4:1d:32:23:d1:
57:87:1b:38:4d:e2:b4:d4:13:17:1f:e4:5d:37:d2:1c:d6:ae:
48:3d:73:26:b3:7f:5c:a0:73:9b:23:2f:aa:6b:66:d7:8e:6c:
e1:9f:0f:55:ff:93:75:ef:59:56:5f:55:dd:8e:e2:88:a6:e6:
2d:5f:fa:12:96:68:46:52:af:39:17:b2:c5:00:79:1c:ef:80:
49:6a:96:6f:de:fe:63:4e:09:17:30:c8:26:55:d1:8b:77:5a:
ad:02:7c:90:e9:69:29:9c:ec:f5:a8:ad:6c:f9:ae:89:df:2a:
ec:e0:44:4c:a9:82:98:17:2b:8b:76:ab:97:96:aa:72:b1:ce:
95:bd:44:f1:37:23:1b:ff:be:2d:9e:c1:df:97:5f:fd:25:86:
5b:76:ad:f6:3b:be:39:34:c5:22:72:5f:cc:60:2f:c1:6f:a9:
70:ff:af:50:8c:12:83:1d:46:bd:e4:38:29:59:2f:45:94:e0:
b3:b4:21:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:06 2025 by rpki-client