Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/be995297-b2fc-32b4-95d2-12631bcc8639.roa
File: be995297-b2fc-32b4-95d2-12631bcc8639.roa (raw, json)
Hash identifier: cOd99DTiMQx2N4wfRjWv/7QUs9wPPyNm6B0pHHc1jxY=
Subject key identifier: B8:1A:0C:DE:C9:46:6C:C8:B8:A0:3A:6E:AF:0A:DB:AA:28:B1:48:B2
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF4892EE09AF7AE457D3E90
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/be995297-b2fc-32b4-95d2-12631bcc8639.roa
Signing time: Fri 08 Nov 2024 15:04:59 +0000
ROA not before: Fri 08 Nov 2024 15:04:59 +0000
ROA not after: Thu 06 Feb 2025 15:04:59 +0000
asID: 81
IP address blocks: 152.45.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:89:2e:e0:9a:f7:ae:45:7d:3e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:59 2024 GMT
Not After : Feb 6 15:04:59 2025 GMT
Subject: CN=51001ab2-6ffa-4d36-97a8-8863bfbf2333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:46:4c:2e:c4:d0:40:5e:7a:13:98:7f:3f:
96:25:cf:62:a0:5a:d2:68:9c:96:f2:6a:ae:53:5c:
ca:d1:fa:48:ca:9f:01:4f:fe:dc:1d:b4:57:e6:d6:
cb:ee:3f:02:9f:72:23:47:8c:5c:2a:8a:e7:8d:55:
32:06:51:15:be:f2:d8:75:6b:5a:d6:6d:bb:08:5c:
92:31:0b:2f:19:1d:2e:0a:78:16:fb:23:86:48:c1:
3e:dc:e4:ef:d9:1b:d6:64:dc:95:bb:19:12:3e:99:
b6:1a:18:27:48:cb:c9:ba:ed:70:51:1d:fa:a1:c1:
f5:66:df:f2:09:0b:8e:1b:45:32:4f:6e:a9:bf:ae:
52:be:47:c3:cd:33:67:14:b6:9b:ed:6e:3b:b1:43:
02:b4:e6:41:b2:25:29:0b:83:bc:a5:cf:5c:d5:75:
30:ed:2a:4a:f3:20:71:92:f1:c6:a9:d1:90:e3:c8:
2c:4e:aa:ff:74:76:5b:20:c7:2f:c3:bf:74:b5:2c:
c2:9d:41:05:6c:ae:5a:b6:ce:9c:20:df:32:52:05:
25:32:84:4d:7d:b8:f2:e4:94:38:ee:5f:b7:ae:79:
49:a3:71:88:c5:c3:5f:b9:5d:ce:0f:39:ba:3c:b8:
4e:4a:ef:fe:d9:0d:52:82:60:fe:ff:7e:be:d9:78:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1A:0C:DE:C9:46:6C:C8:B8:A0:3A:6E:AF:0A:DB:AA:28:B1:48:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/be995297-b2fc-32b4-95d2-12631bcc8639.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.45.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:75:b4:2b:82:30:29:24:8e:29:80:00:fe:8d:2a:47:f3:1c:
5e:d2:e1:f0:d0:8f:5c:8c:96:d5:94:46:7b:7b:a5:c3:52:bb:
3b:23:7b:04:f8:9d:1d:71:8b:ba:c9:e5:6a:d5:6b:f3:97:d7:
66:e9:33:2c:13:05:ab:cd:31:e9:8c:be:b3:c7:ae:fd:8d:af:
7a:0b:bf:70:10:10:dc:76:3d:dc:f4:25:49:28:70:b3:35:1c:
4b:02:09:87:aa:6d:12:96:72:dd:6e:d4:ca:92:9d:e6:56:3a:
fb:fe:22:b5:97:63:29:54:b9:c9:c6:0f:a3:01:fe:06:a7:56:
e6:46:34:38:61:4d:33:25:85:24:a7:5a:a6:76:60:e1:8e:74:
53:11:19:6c:19:56:04:8c:dd:de:4d:47:c8:97:52:5c:72:9b:
94:e9:69:78:a9:05:41:d0:d4:9e:1f:7d:22:b1:d0:30:93:13:
c8:26:06:94:c8:03:df:58:2b:45:0f:70:3b:4f:77:8b:c0:4b:
79:8b:9d:c8:b3:24:16:6d:0f:c1:f6:c4:d0:67:14:6c:ac:a5:
a8:3f:3e:d1:bf:82:0b:63:21:ab:32:45:18:31:e7:19:1c:a4:
d7:7e:15:df:b7:4f:25:a5:3a:c6:a7:bc:dc:e2:55:73:14:51:
17:a6:ca:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:45:33 2025 by rpki-client