Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d1ea4ab7-9ba8-3b13-883e-ee2d1feb36c7.roa
File: d1ea4ab7-9ba8-3b13-883e-ee2d1feb36c7.roa (raw, json)
Hash identifier: gz29tkJXr7VyJ6/QuJpflxE0FZj8Eapq3PiD6vLf0Ok=
Subject key identifier: 17:07:16:C5:2A:AE:99:C6:F3:8B:7E:09:E3:FC:B2:A9:8A:D5:A2:BF
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBC5A6E98334EA4D75B80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d1ea4ab7-9ba8-3b13-883e-ee2d1feb36c7.roa
Signing time: Wed 16 Oct 2024 14:26:34 +0000
ROA not before: Wed 16 Oct 2024 14:26:34 +0000
ROA not after: Tue 14 Jan 2025 15:26:34 +0000
asID: 81
IP address blocks: 152.26.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:bc:5a:6e:98:33:4e:a4:d7:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:34 2024 GMT
Not After : Jan 14 15:26:34 2025 GMT
Subject: CN=93a67bb4-7069-49a0-a5e9-18abc97abb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:10:26:18:30:0b:d8:fc:ec:35:ba:4e:54:2f:
a8:ae:f0:dd:e9:38:cb:ba:0d:0d:67:d0:ae:5a:55:
16:bc:18:87:86:aa:21:3a:26:84:fa:06:fb:c7:d6:
a5:48:ca:33:31:de:bc:32:aa:0a:c0:6d:a7:df:52:
9c:80:03:08:54:d2:a5:76:62:ec:4f:18:ff:50:c9:
ac:93:c1:42:1a:b5:e9:72:ed:ed:e1:6e:5e:cd:4e:
c1:7d:48:03:17:f0:8f:4a:83:84:d6:3e:df:2d:60:
75:55:b1:26:6a:c8:a5:ff:d7:13:0d:66:ad:68:54:
ca:61:7e:03:7e:c8:28:4a:38:35:1e:10:5c:1d:16:
64:e2:4c:61:43:71:16:cc:f4:1f:02:69:5e:84:04:
8f:3e:92:be:b9:54:d5:25:3c:b4:69:e8:a7:a6:24:
74:e7:c7:68:7f:35:20:78:31:4a:11:41:4a:83:fc:
ba:1b:67:6f:a0:68:4c:0c:9a:a8:33:e5:8e:9c:3b:
04:60:b7:3f:6f:2b:07:34:ab:14:40:c8:7e:23:7c:
62:e4:6a:12:be:52:97:97:63:fb:8b:ca:c6:02:58:
eb:49:ed:6f:00:a1:0a:29:6a:cb:52:02:4c:0f:55:
1c:4d:e4:42:f2:1a:dd:76:3b:da:a0:a2:30:70:77:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:07:16:C5:2A:AE:99:C6:F3:8B:7E:09:E3:FC:B2:A9:8A:D5:A2:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d1ea4ab7-9ba8-3b13-883e-ee2d1feb36c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.26.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:ce:b8:1d:f4:83:31:86:d3:2a:8a:ff:0f:b2:f8:2c:3f:ad:
b3:e5:66:72:67:a4:fa:14:9e:8d:6c:13:5f:90:3f:2c:34:cd:
be:5e:21:42:32:91:4b:54:c3:fe:65:1d:ae:da:f0:1e:d8:64:
3e:e5:a0:6f:ee:03:d2:f2:9f:25:a0:d0:9b:91:9d:b3:99:42:
d8:a8:4b:c0:a3:92:d2:47:a8:bc:a7:26:74:95:3a:e0:74:1f:
d4:bc:71:bc:9c:7d:65:1e:85:24:5e:86:54:a9:6b:6b:c0:03:
98:6e:b2:df:73:0b:04:dc:10:e4:90:df:59:83:04:97:c7:de:
46:c3:50:76:46:31:d1:4f:2e:98:8d:6c:bc:6b:74:41:47:01:
d0:80:b1:18:22:62:0b:76:81:65:45:28:33:f3:8b:61:59:cd:
dd:97:8c:e6:ae:12:3e:ba:ef:91:3b:9d:45:eb:67:76:ae:5c:
13:b4:6c:e0:fa:05:4e:ee:e4:9e:65:23:03:51:1e:1d:91:b8:
17:b1:48:26:2c:1a:3a:27:97:03:d4:4c:40:55:7b:c2:aa:08:
42:68:ec:7f:d5:b1:38:ff:ab:54:a5:e9:43:37:5b:1f:d8:ed:
49:6d:67:c9:8a:da:da:37:b8:98:41:ac:e2:2a:72:2b:3c:ce:
6c:17:09:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:33:49 2025 by rpki-client