Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dfcfc79d-84e1-3bf9-b466-0d407ed89211.roa
File: dfcfc79d-84e1-3bf9-b466-0d407ed89211.roa (raw, json)
Hash identifier: xt1V76l3sdfKO9V9w0Le9eX/FLoyuM4Poh1OMV1G7WM=
Subject key identifier: 20:36:DD:8A:18:02:A1:D8:C2:4B:C8:AE:1E:CE:DB:39:CD:63:DE:30
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABB80AB2982F32BA37F380
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dfcfc79d-84e1-3bf9-b466-0d407ed89211.roa
Signing time: Wed 16 Oct 2024 14:26:32 +0000
ROA not before: Wed 16 Oct 2024 14:26:32 +0000
ROA not after: Tue 14 Jan 2025 15:26:32 +0000
asID: 81
IP address blocks: 152.27.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:b8:0a:b2:98:2f:32:ba:37:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:32 2024 GMT
Not After : Jan 14 15:26:32 2025 GMT
Subject: CN=3890ce76-007b-47fb-92c1-37e8cf7a700a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:05:65:0e:dc:11:ae:bf:e1:88:1e:3c:be:
e9:79:61:13:80:78:d0:74:b9:5f:54:7a:03:5a:c1:
db:93:da:c5:7c:19:de:28:be:60:12:67:5d:4c:5e:
d9:89:d5:d1:19:d5:53:2b:7c:c0:37:14:00:f9:ba:
9c:9f:29:0c:c7:7f:cf:bf:2e:43:2a:fc:23:df:c3:
38:94:19:da:76:d7:e4:e0:e3:79:54:cd:de:af:87:
57:6e:4d:29:54:df:b2:cd:da:a7:33:a6:af:8c:16:
9d:52:a3:e9:fa:17:03:fd:19:18:96:1d:0b:61:ce:
fd:8e:b0:af:93:f7:d0:ed:58:cb:7f:c1:1d:d8:48:
91:30:c2:f3:80:8f:84:fc:c9:23:96:aa:f6:94:40:
a2:a9:d8:47:61:1a:e2:bc:08:3a:b1:41:58:7c:2f:
26:80:4e:4b:ad:b0:94:77:3f:ac:cb:0f:9f:4f:ed:
c8:66:43:cf:6c:6e:8d:45:d9:6e:17:7a:15:7b:0c:
92:84:42:55:fd:ee:63:33:6f:ae:4d:5a:55:86:14:
73:98:de:86:ff:1e:23:70:49:89:a7:67:cd:97:70:
3d:1b:e0:1e:55:fb:e0:48:31:bb:18:c9:a1:a6:d9:
01:fd:6a:ff:99:a9:f7:15:b3:61:68:9c:63:06:3d:
5a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:36:DD:8A:18:02:A1:D8:C2:4B:C8:AE:1E:CE:DB:39:CD:63:DE:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dfcfc79d-84e1-3bf9-b466-0d407ed89211.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.27.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:ee:2f:5c:a4:2c:55:8d:bf:87:01:72:26:46:ca:fc:34:46:
49:10:67:b7:9a:75:cd:90:f2:60:09:e3:c5:31:9f:dc:a8:9d:
14:21:e9:c3:44:a1:39:b2:f8:1f:6b:39:5e:8e:86:93:ad:f3:
a2:37:e6:a8:e7:63:cc:52:1e:5c:79:41:72:4d:52:91:c6:25:
ad:8e:09:b8:0c:b4:5c:64:a5:27:6e:1f:9c:bc:ca:9a:84:81:
6f:1b:d3:b7:0b:f1:8d:fe:24:7e:47:1a:8f:26:64:52:2d:f9:
95:c8:36:8f:3a:2b:a8:29:c0:d5:f6:04:df:e0:f5:e4:3a:e6:
2d:c9:e2:f9:f0:03:3e:d4:d3:94:62:a6:06:12:a6:5b:5a:d8:
98:f0:08:6e:0a:58:59:5a:57:ec:fc:cb:9a:83:2d:7a:45:7a:
6f:f4:d1:ed:a0:d6:a8:e3:e6:da:2e:71:60:c0:d9:07:5b:44:
4c:63:13:0c:10:cc:da:a7:10:6b:ce:5a:29:c0:10:8d:a4:09:
04:67:80:98:63:23:11:ab:0a:1d:d3:f4:45:42:2d:fd:6c:17:
62:27:e2:11:19:ee:5f:1e:f5:9d:a4:67:de:0b:d9:ce:bd:7f:
32:94:65:91:b4:25:8d:60:a5:ce:9a:c3:77:da:5d:d6:64:6d:
80:f8:70:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:33:23 2025 by rpki-client