Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e8f55726-58ea-3ca2-a9af-b360018da4b8.roa
File: e8f55726-58ea-3ca2-a9af-b360018da4b8.roa (raw, json)
Hash identifier: LmETHZL/62txFYjPkfRwad7N7IwudkrzJynkbKItdTc=
Subject key identifier: 91:0E:34:EA:8D:4D:F4:5F:BA:57:82:DD:5D:98:5E:13:2C:88:AD:56
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBC77204FBAA6FEF78D00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e8f55726-58ea-3ca2-a9af-b360018da4b8.roa
Signing time: Wed 16 Oct 2024 14:26:34 +0000
ROA not before: Wed 16 Oct 2024 14:26:34 +0000
ROA not after: Tue 14 Jan 2025 15:26:34 +0000
asID: 18538
IP address blocks: 152.26.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:bc:77:20:4f:ba:a6:fe:f7:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:34 2024 GMT
Not After : Jan 14 15:26:34 2025 GMT
Subject: CN=4d470824-77fa-4d64-8667-f126c69308c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:cc:91:ec:35:20:89:e3:d4:e7:e3:ca:cf:
89:cc:2d:7f:4e:00:48:bc:16:18:a2:86:ad:26:e5:
d9:f8:53:0d:b2:95:26:23:e6:53:ff:d2:5a:57:fc:
81:1e:3b:99:3c:24:b8:3b:e5:15:12:71:82:4f:8d:
51:ad:87:09:3d:61:8e:37:64:9d:a7:39:ca:9f:02:
27:90:09:16:73:45:de:87:ca:ad:81:50:ab:e8:1e:
f1:7f:fc:21:17:b6:79:28:6e:ad:63:36:1d:2a:70:
8c:4b:0e:91:33:69:64:fa:f8:a6:5f:9a:60:00:23:
63:6f:22:2e:c5:35:99:23:d2:5c:d0:f2:1f:dc:39:
52:9c:b5:48:0e:47:90:cc:d7:9c:1e:f6:37:7d:cf:
60:22:80:b3:90:52:1f:2e:a4:19:52:68:53:53:54:
fb:47:4b:24:21:2c:1c:bf:f0:5a:04:33:75:94:7e:
76:e2:86:da:9a:97:e7:6f:06:96:c5:45:97:70:07:
15:97:8b:7e:a7:69:5b:3a:a5:c1:da:36:2e:bf:81:
52:d4:1a:da:a1:23:b7:f1:45:f6:6f:bd:3b:4c:c1:
b4:1e:f3:ac:6a:b9:fc:dc:a9:1c:c3:22:a6:e2:aa:
96:bd:1c:78:ed:0b:eb:77:c8:d2:37:a8:51:17:1c:
07:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0E:34:EA:8D:4D:F4:5F:BA:57:82:DD:5D:98:5E:13:2C:88:AD:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e8f55726-58ea-3ca2-a9af-b360018da4b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.26.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:ad:8e:ce:9b:ab:90:78:c3:76:09:28:ca:53:6f:6e:78:68:
f2:cd:68:28:62:1d:d7:8a:0e:0d:d1:f7:c4:4f:39:1c:53:b4:
f0:f5:9c:d2:cd:71:d1:88:e6:66:04:46:46:f0:f2:e9:67:a8:
7f:3f:10:6b:c0:6c:4d:fe:e6:fa:04:78:8e:7f:a2:aa:66:ed:
c6:3d:e3:a1:82:c3:29:bd:d9:b6:23:21:af:ad:f6:0e:45:23:
c8:c1:b4:b7:0a:32:cf:94:53:bf:d0:53:ba:c3:84:72:d8:67:
28:26:de:e6:03:3f:ac:c3:ec:24:c3:03:10:85:e1:94:53:cd:
22:1f:32:66:96:cd:36:20:37:f9:4d:eb:24:95:48:e7:ff:37:
9e:6c:88:06:4e:4a:8d:b0:ad:c0:46:ca:32:e2:a2:9a:15:5f:
e5:0d:76:04:00:79:fb:21:96:c6:9a:d9:61:8f:9d:2a:1f:20:
45:77:d9:7e:d6:4a:d4:d3:f1:66:92:cd:af:cd:8a:5d:1b:2b:
e6:71:ec:e5:83:ec:d9:4a:18:33:5a:ce:71:46:61:1b:de:15:
94:5d:3c:2a:63:c9:3c:9e:37:b1:11:41:b0:74:73:59:36:ca:
88:64:b5:bf:36:32:2b:4c:fa:7f:99:08:98:60:04:3f:59:82:
32:0a:7c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:28 2025 by rpki-client