Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dad4fb59-a5d4-34d2-882b-4868e46fe4f7.roa
File: dad4fb59-a5d4-34d2-882b-4868e46fe4f7.roa (raw, json)
Hash identifier: T5QJcYrCe6VKywKtR2nkeg0PzvYdgsmns13SbmkTZJo=
Subject key identifier: 5A:6E:D7:DA:B2:2C:F9:10:8F:71:67:5A:0A:B9:FD:AF:72:20:15:C6
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF484065572A303C16ADD00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dad4fb59-a5d4-34d2-882b-4868e46fe4f7.roa
Signing time: Fri 08 Nov 2024 15:04:57 +0000
ROA not before: Fri 08 Nov 2024 15:04:57 +0000
ROA not after: Thu 06 Feb 2025 15:04:57 +0000
asID: 17031
IP address blocks: 152.22.0.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:84:06:55:72:a3:03:c1:6a:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:57 2024 GMT
Not After : Feb 6 15:04:57 2025 GMT
Subject: CN=c1a18f67-5170-4083-b07d-00300d3a580e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:1e:c1:bc:e3:84:12:74:7f:70:9e:4a:83:
59:0a:fe:4e:34:82:89:cc:79:5c:a1:99:3a:13:78:
b3:9e:53:c9:9d:42:c1:bf:3b:8f:2f:1d:ca:a4:3d:
0a:34:85:1c:b8:ce:ef:6c:8d:92:f6:73:8a:75:68:
2c:f3:2c:6d:54:00:57:69:75:ba:f1:6f:4d:93:f3:
d3:1a:4d:25:40:28:53:70:75:bd:12:df:e1:69:24:
77:aa:c4:06:d0:55:61:3e:d8:a6:04:33:5d:79:7e:
9f:18:00:65:3c:d3:7e:5f:0a:1c:d1:38:4e:97:93:
c3:d6:d8:5b:cf:27:d3:e4:26:f1:d9:af:4f:ca:c2:
3a:08:ce:7c:4c:e7:ab:c9:80:5b:b1:04:36:2f:24:
d5:f2:8d:7c:d6:98:59:a8:13:ed:76:cc:70:53:0b:
77:de:45:bb:48:d9:68:bc:cf:e0:df:51:b3:9e:b7:
10:8a:1f:64:f5:15:bf:10:b5:95:a7:6c:1b:90:57:
16:24:27:39:04:9e:09:71:53:36:8e:9b:d3:f6:25:
2c:56:da:43:bf:83:82:c7:05:54:85:dd:92:17:34:
0e:e8:c9:2f:63:bd:f7:35:00:9c:05:00:a2:24:93:
70:28:f8:36:9b:80:6c:7b:31:a8:47:03:d2:d0:4f:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6E:D7:DA:B2:2C:F9:10:8F:71:67:5A:0A:B9:FD:AF:72:20:15:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dad4fb59-a5d4-34d2-882b-4868e46fe4f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:01:a3:95:f5:6b:75:c9:1f:3e:a9:ba:0c:b1:86:88:4c:19:
3b:19:9e:b6:c7:23:5b:00:de:10:6e:78:de:e1:dd:0c:9d:a3:
be:cb:0f:23:29:be:49:74:b4:84:1d:6b:fc:1d:3e:77:60:2c:
a8:c3:c4:aa:d2:7b:8e:fd:1f:87:da:2b:05:96:be:26:b6:25:
9b:44:f1:61:78:8a:97:73:f4:db:25:7c:c6:a5:59:09:5e:ed:
97:c3:52:e1:ef:99:bb:da:18:55:77:7a:92:a5:db:8b:73:93:
1a:0e:9b:90:86:8d:de:94:47:25:76:3e:43:15:70:30:86:18:
b8:41:ec:d9:4f:69:32:ba:57:60:93:37:ff:39:dc:19:87:90:
10:23:0f:50:a0:ca:cd:e4:0a:e2:6b:bf:5e:00:f8:b0:b5:bb:
bf:9f:df:dd:31:a9:ea:a2:f9:3a:fd:64:54:ce:5d:b5:f1:e2:
a7:4f:0f:90:f4:39:5a:6e:7b:b6:0a:68:3c:19:43:ea:68:32:
63:3d:70:99:44:26:5d:1d:52:42:07:0d:4c:41:1f:8e:43:9c:
09:41:23:8e:52:66:22:a2:c3:74:87:53:d2:fc:21:dd:28:a9:
ad:e0:27:ac:5a:93:7e:b4:65:d1:71:78:f8:b9:51:d0:1f:47:
7c:2b:a0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:11 2025 by rpki-client