Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e1bc6163-45c2-3dcd-b124-b2d2d44f1867.roa
File: e1bc6163-45c2-3dcd-b124-b2d2d44f1867.roa (raw, json)
Hash identifier: M7iB6pmR7kN3TtTrghAjq3G+5JSDtejdqDnOiht2GQE=
Subject key identifier: 0A:6F:53:70:2D:2E:6B:E2:3C:4F:B9:7F:AB:13:81:4A:4C:BD:AE:D7
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF489897203DC077A799300
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e1bc6163-45c2-3dcd-b124-b2d2d44f1867.roa
Signing time: Fri 08 Nov 2024 15:04:59 +0000
ROA not before: Fri 08 Nov 2024 15:04:59 +0000
ROA not after: Thu 06 Feb 2025 15:04:59 +0000
asID: 81
IP address blocks: 152.45.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:89:89:72:03:dc:07:7a:79:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:59 2024 GMT
Not After : Feb 6 15:04:59 2025 GMT
Subject: CN=95441644-1de0-4d91-a840-e6a054333fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:70:78:1f:47:51:59:cc:62:83:8b:34:ad:
8c:d4:3f:66:bb:9b:51:0e:95:20:22:4f:53:89:ad:
34:08:73:1d:5c:80:93:c8:f1:35:88:3b:38:18:2e:
dc:5d:d2:30:c4:9a:13:ca:8b:e5:70:57:4a:e5:9a:
87:14:0a:46:4b:62:29:98:de:73:48:ec:4b:9a:1a:
cb:00:87:80:e5:13:7a:c7:67:b0:ff:18:c4:48:f6:
93:97:46:d0:c4:46:c4:c4:91:47:89:ad:3e:86:7e:
71:ab:58:46:23:b4:10:05:44:70:95:c5:2e:c3:9b:
10:09:82:a2:0b:c3:8c:0e:b8:be:9a:e3:84:eb:26:
e5:c4:4c:d0:b7:e2:cf:56:3d:95:e7:39:86:31:f9:
62:e9:77:a6:82:2e:61:e1:c5:20:aa:b5:3b:18:a7:
84:2d:d4:6a:cb:0f:8a:a2:84:19:8a:70:b1:a8:28:
5e:cc:42:f9:08:f4:20:a7:65:0a:fc:cf:e4:72:1c:
8d:ca:16:83:a3:ab:83:db:e7:8c:cf:7f:7e:a6:22:
49:e1:e6:36:1a:f0:9e:13:bf:fe:1c:87:d5:16:4f:
e8:6b:04:3d:aa:0b:d3:47:97:ff:29:8e:55:48:4b:
4a:c7:3c:b2:9c:80:38:07:bc:35:50:98:66:ba:80:
d7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6F:53:70:2D:2E:6B:E2:3C:4F:B9:7F:AB:13:81:4A:4C:BD:AE:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e1bc6163-45c2-3dcd-b124-b2d2d44f1867.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.45.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:b4:cf:c9:be:f0:47:b4:29:d4:c8:ad:61:f8:57:5c:2e:e0:
af:6e:d2:83:3e:be:ed:f4:c6:6f:38:5c:f1:30:86:52:2f:f8:
b9:d0:98:df:b8:9f:53:9e:a6:4f:30:8b:5c:ec:75:2c:e4:06:
49:50:a8:ae:4c:75:08:a0:bd:c9:99:48:11:4a:36:1e:e5:92:
1f:d2:af:33:35:fe:71:39:d5:71:fd:56:a8:91:2e:cd:49:32:
be:6b:c3:81:78:a4:c5:29:b9:e2:7c:44:07:5d:0a:89:a3:c3:
82:0f:f1:f7:83:45:7f:83:a8:19:3c:44:d8:c2:17:58:8a:9d:
26:2d:fd:5a:af:26:9b:d8:ae:a1:1c:17:ae:b2:c5:70:2a:6b:
ff:a6:42:c6:48:36:c7:d5:98:4f:38:a4:8b:e0:11:af:11:ec:
58:5c:03:0e:cc:35:40:6d:b0:ca:64:18:f4:99:45:d0:fb:8b:
4d:e0:07:8a:73:f7:06:65:b7:8e:88:cf:db:51:61:db:23:90:
46:76:e3:1a:4f:2d:4c:41:c0:e1:e7:55:7a:37:b2:b1:5d:02:
02:09:d4:db:3e:b1:a3:56:ba:87:2f:fc:90:74:1c:e8:d1:04:
be:d7:a8:2a:d6:e8:de:a1:3f:84:fb:98:ea:9d:70:26:b6:56:
21:5c:0b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:30 2025 by rpki-client