Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f3de3c15-378f-3c33-888d-a867ef8aa555.roa
File: f3de3c15-378f-3c33-888d-a867ef8aa555.roa (raw, json)
Hash identifier: ICalePwHuMRwyp6tRMGX37o5ckhF/56P0pYdcdAtW7E=
Subject key identifier: DC:F0:51:70:71:7A:B2:A3:1E:7B:28:F5:F5:4F:FC:DF:33:EE:16:87
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48945239090273C340A00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f3de3c15-378f-3c33-888d-a867ef8aa555.roa
Signing time: Fri 08 Nov 2024 15:04:59 +0000
ROA not before: Fri 08 Nov 2024 15:04:59 +0000
ROA not after: Thu 06 Feb 2025 15:04:59 +0000
asID: 81
IP address blocks: 152.45.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:89:45:23:90:90:27:3c:34:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:59 2024 GMT
Not After : Feb 6 15:04:59 2025 GMT
Subject: CN=ef2cab9a-2656-4cff-ae38-88aa93534eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:29:7b:85:8d:7d:c1:47:be:4b:34:a3:b2:e5:
91:9f:0f:15:59:ce:e7:15:76:75:79:48:a8:dc:13:
f4:44:e0:36:4b:e7:4a:7f:93:99:f9:6a:61:4f:72:
6b:34:8e:56:9c:98:ed:90:90:54:d6:e8:5e:9c:61:
bf:bf:05:aa:89:d8:4a:13:2f:94:b9:1c:2b:ef:74:
32:49:aa:d4:19:9b:f1:b6:23:08:5a:2b:b9:46:09:
d6:00:2d:7f:11:21:67:6c:5c:81:9f:f5:e7:ad:65:
01:2d:3d:ec:7a:8f:96:92:33:bf:d4:48:74:4e:83:
e9:c2:bc:13:08:e6:6c:18:67:6b:c8:6e:a5:fa:ca:
b4:e5:1d:ab:e6:ce:55:37:48:05:8b:52:42:98:7e:
a4:54:d9:27:c4:e4:4f:cb:48:e1:e9:af:87:8f:43:
03:65:eb:91:5c:18:bb:44:f7:8c:5a:b1:4c:ab:83:
f8:74:7b:6b:a3:6c:fe:cd:7f:b8:ac:c9:0b:bf:00:
f0:da:9e:af:ba:38:4c:b4:41:0a:b0:2a:52:40:6c:
c6:d3:70:c0:da:ea:31:22:58:9b:10:2b:96:c1:bf:
fc:42:76:b4:79:b0:e0:4b:e6:9c:4e:90:a4:74:ca:
44:39:0f:9b:93:62:37:a3:bd:f3:27:97:5e:8e:7c:
5c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F0:51:70:71:7A:B2:A3:1E:7B:28:F5:F5:4F:FC:DF:33:EE:16:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f3de3c15-378f-3c33-888d-a867ef8aa555.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.45.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:73:d0:3b:4a:f9:fb:ce:51:f5:54:93:b6:f8:1a:fd:16:8a:
9c:71:76:94:b4:fd:43:d9:c0:76:9a:aa:60:0b:10:66:00:20:
c3:79:c0:a1:fe:cd:73:69:97:b5:56:22:8f:94:27:7b:85:e2:
db:e0:ec:55:25:85:5c:a1:61:50:6d:09:99:71:f2:a8:b3:a0:
f1:3e:aa:34:d9:dd:e0:ab:d5:db:17:ed:07:3c:b4:27:f1:4c:
9e:21:77:4c:55:6a:e4:49:1a:5f:d4:d7:8f:08:9a:c4:0c:fa:
ac:e4:d8:d1:3c:26:d1:94:47:04:83:5d:60:1c:44:3d:0f:c6:
2c:e0:5f:ee:7d:12:96:c3:c6:48:e9:f3:a6:8f:cd:70:67:52:
b6:a8:d5:2b:b8:b7:d5:11:cf:ea:4b:25:a7:9a:2d:ef:ca:de:
a9:3c:46:2a:d2:65:ad:15:1a:01:10:a5:d3:03:20:73:d7:04:
32:67:42:ee:af:b8:a4:18:c2:04:ed:27:40:04:9a:75:70:a3:
8c:db:5f:39:75:89:b4:b5:c8:cd:bd:a7:14:03:12:31:d2:71:
5b:07:ef:4f:91:e4:e3:fe:9a:a8:65:ce:1b:7c:5c:b4:23:64:
be:8e:0b:07:b1:82:62:0b:a2:c1:eb:5e:dd:57:2a:7c:1d:cb:
3b:47:c5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:39:38 2025 by rpki-client