Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e54e8cc2-8e49-381d-8294-7e89fd709e1f.roa
File: e54e8cc2-8e49-381d-8294-7e89fd709e1f.roa (raw, json)
Hash identifier: f0tW2XYYJ3mwIIRNaMFoP27Yh1HoUgYJCFRjcx559RM=
Subject key identifier: DD:79:FF:AF:2F:2C:92:1C:50:37:D3:48:98:DB:06:0C:BF:95:3C:74
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABB826E53823FB08D95980
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e54e8cc2-8e49-381d-8294-7e89fd709e1f.roa
Signing time: Wed 16 Oct 2024 14:26:32 +0000
ROA not before: Wed 16 Oct 2024 14:26:32 +0000
ROA not after: Tue 14 Jan 2025 15:26:32 +0000
asID: 81
IP address blocks: 152.29.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:b8:26:e5:38:23:fb:08:d9:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:32 2024 GMT
Not After : Jan 14 15:26:32 2025 GMT
Subject: CN=8bd50c9e-ae7c-4502-b425-ebd77fec1ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:47:89:4e:31:6e:08:a4:7a:5c:ae:9d:20:98:
f7:6c:1e:43:c9:ba:ea:c7:3a:cf:32:90:6f:40:59:
83:1a:60:1f:42:99:cb:8d:c3:d1:f2:d4:5c:f0:27:
9a:8e:02:e6:2c:53:54:78:f1:71:fa:2e:0d:89:a8:
8a:a9:3b:62:b6:5b:6f:91:74:6b:24:32:66:08:17:
7f:3a:23:a8:e4:1c:7a:7c:56:75:34:ee:7d:ab:23:
2b:09:9a:df:48:15:c9:ad:89:53:75:7b:36:8d:a0:
e8:78:d0:b3:c5:d3:ac:76:67:97:e2:da:7c:8c:b3:
63:9c:39:2b:d0:c3:8e:ff:8d:b8:88:a4:72:bf:93:
b7:f4:7d:c4:cf:34:1c:af:3d:62:b4:3a:15:e9:36:
02:5a:26:d9:1b:54:af:94:bf:42:b7:17:13:0d:b0:
ff:ba:ef:40:81:81:d4:0f:6e:52:27:0d:d4:01:d6:
02:19:24:26:1e:38:f6:bf:b9:2f:e4:c9:e5:4c:2e:
e2:28:b9:4d:fe:0a:38:41:b6:33:65:84:9b:c3:f6:
cb:52:53:d6:26:16:61:2f:c5:e9:7a:a5:34:6d:16:
47:53:05:76:e7:df:1f:67:d2:42:6c:77:69:bc:5b:
2b:af:4e:18:ab:0c:dc:b1:f7:69:66:85:96:ed:87:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:79:FF:AF:2F:2C:92:1C:50:37:D3:48:98:DB:06:0C:BF:95:3C:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e54e8cc2-8e49-381d-8294-7e89fd709e1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.29.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:4c:00:c0:9f:da:90:46:3d:fa:cc:e1:19:b7:da:55:03:a4:
af:2b:c7:b0:15:b3:a5:59:2d:70:46:8a:ab:ec:36:71:79:56:
84:62:42:1e:4f:fb:3c:6e:b2:8b:3d:a0:b7:5a:63:33:f1:e9:
c2:74:e3:f9:e1:79:d3:51:32:0b:60:99:96:1e:79:e2:10:cb:
13:dd:a9:68:51:d1:71:47:e2:89:d0:8e:9d:9a:6f:4d:ad:6d:
bb:67:08:e7:11:c3:3f:27:d5:29:1b:5c:e4:52:24:14:e0:db:
b4:bb:e3:d8:40:78:81:23:6d:a2:56:58:a8:2a:28:78:f9:34:
3e:15:3d:ce:c9:d9:52:0e:9f:32:8b:aa:19:c3:5d:f8:06:82:
69:68:7e:92:d0:34:36:10:46:23:70:95:f1:8e:67:ca:bb:59:
51:af:33:d5:0d:de:d4:ff:36:2e:2f:c5:d4:01:07:3d:62:64:
88:5c:4a:5e:b4:23:c6:5a:59:56:b9:6c:50:7e:46:6d:84:4f:
ee:39:50:4d:21:ba:ff:d0:8f:06:67:b1:34:8f:2c:9e:fc:11:
9d:59:21:de:c6:00:33:f5:a2:43:05:b2:1e:72:6a:b2:42:62:
16:12:5c:a0:6d:7d:13:9b:36:b4:a2:05:6e:19:84:b4:78:37:
f1:47:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:37 2025 by rpki-client