Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dff9982e-7731-3250-b9c6-4395e063e9f8.roa
File: dff9982e-7731-3250-b9c6-4395e063e9f8.roa (raw, json)
Hash identifier: +4X3ttfSdutWzMOjX3wLBZuNX7Y7SmzuLKe4SAgsPj8=
Subject key identifier: 5D:23:09:64:E7:F2:30:AC:F8:A1:73:18:82:CB:F0:2C:9A:CF:08:4D
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBF5520B1AB65AE38D640
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dff9982e-7731-3250-b9c6-4395e063e9f8.roa
Signing time: Wed 16 Oct 2024 14:26:36 +0000
ROA not before: Wed 16 Oct 2024 14:26:36 +0000
ROA not after: Tue 14 Jan 2025 15:26:36 +0000
asID: 81
IP address blocks: 152.46.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:bf:55:20:b1:ab:65:ae:38:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:36 2024 GMT
Not After : Jan 14 15:26:36 2025 GMT
Subject: CN=2944f2cb-ea76-45ae-be59-abe7e75bb61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:e9:4e:1d:ac:f0:b9:c1:16:8b:8d:60:b0:
56:15:73:6b:c5:e5:40:82:89:1a:b7:e2:7b:d6:99:
f5:0a:cf:9b:f1:3e:a5:88:5c:2b:9f:7b:45:07:ef:
9a:8c:55:5c:79:f0:77:62:24:a1:53:9e:d8:60:fa:
98:fb:2b:75:28:43:fc:20:58:3a:27:cd:33:71:20:
76:e3:1f:24:dd:83:10:23:e7:5f:bb:5f:76:64:fa:
8f:86:c6:0d:46:0e:97:71:81:1b:f1:e5:76:ad:da:
8b:8b:6d:4e:6b:50:06:b0:13:f8:cf:3b:59:f1:9f:
18:e3:2a:0c:cf:f2:11:90:84:30:92:55:80:4a:80:
a8:b6:f0:f5:94:4c:9c:58:c6:48:14:93:19:d2:dd:
c8:63:1e:17:50:9f:32:3f:6f:a0:c0:07:6c:8b:d0:
3d:fe:6b:9b:53:1e:ab:a4:ad:95:c3:f2:43:a1:fb:
8a:1f:ef:7b:2a:37:42:f9:47:fb:f3:8e:a8:25:de:
ef:b3:a1:09:f5:c4:20:0e:e9:e8:95:e1:25:2e:64:
45:9c:9b:7c:06:19:fe:1f:23:9c:7c:1f:53:8b:96:
94:1b:86:2b:67:df:2c:a6:06:33:a7:6d:c9:9f:df:
38:7d:6e:61:d7:3e:32:19:ff:50:bd:b6:d9:ad:be:
51:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:23:09:64:E7:F2:30:AC:F8:A1:73:18:82:CB:F0:2C:9A:CF:08:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dff9982e-7731-3250-b9c6-4395e063e9f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:a2:73:0e:b9:25:ae:7b:a7:ce:c1:76:2c:68:20:6a:67:68:
e8:c8:51:38:bf:a3:ad:5c:43:69:42:14:88:51:0e:d0:e3:86:
20:ac:66:37:46:97:65:8b:91:3d:45:27:be:e2:3f:0d:e6:4d:
3a:ba:c8:e0:af:63:8d:ff:15:57:5f:2e:ae:75:f1:25:73:e8:
d9:18:dc:8a:38:e8:73:df:e1:b2:f5:e7:2d:f5:ad:7d:66:6a:
c1:19:23:2d:b0:f9:6f:7c:7e:22:90:1c:e2:2e:59:62:dd:b0:
0f:fc:cb:01:98:7e:31:98:b6:40:d2:37:cb:c0:f5:f1:00:e6:
9d:87:5d:60:1a:58:43:53:12:68:0e:bb:fd:04:05:70:ea:b2:
0a:73:74:cf:6a:91:10:98:13:c3:8b:28:dd:5c:1b:31:3c:bb:
45:95:3e:0c:f1:95:58:f3:bb:3c:71:dd:3a:6a:fb:e0:e3:64:
e3:bb:c4:5b:f8:a1:50:81:60:0d:9d:e3:ff:0f:1f:4f:2a:0c:
45:6e:d4:42:de:77:d5:52:35:aa:62:0a:df:f1:7f:df:86:d5:
22:9f:5e:66:10:c0:bc:0c:d7:b2:28:4a:75:af:57:00:38:3e:
1e:0f:f5:7e:32:e8:5b:0e:50:ee:54:bb:c2:cf:b5:04:2e:c9:
f7:93:e6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:32 2025 by rpki-client