Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f5e77222-6eee-3a39-b699-c9d324f04bb6.roa
File: f5e77222-6eee-3a39-b699-c9d324f04bb6.roa (raw, json)
Hash identifier: 6I9Z8HH0/cIkZPrGleShaFhwj0AADoHHkQSRoKMtdwI=
Subject key identifier: 43:28:DD:BB:63:F5:38:05:D1:5E:32:6C:2F:63:E9:01:73:29:61:D4
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48AD8783124484E4BB200
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f5e77222-6eee-3a39-b699-c9d324f04bb6.roa
Signing time: Fri 08 Nov 2024 15:05:00 +0000
ROA not before: Fri 08 Nov 2024 15:05:00 +0000
ROA not after: Thu 06 Feb 2025 15:05:00 +0000
asID: 81
IP address blocks: 152.46.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:8a:d8:78:31:24:48:4e:4b:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:00 2024 GMT
Not After : Feb 6 15:05:00 2025 GMT
Subject: CN=5f62652f-e6e7-443d-9462-e4ccb505a3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:81:5c:7f:bf:55:bb:e7:c9:3f:23:f4:c0:
03:80:60:60:2e:29:98:ad:4c:f6:66:71:00:0e:ec:
74:33:8a:8a:5c:2a:cc:63:2f:15:15:12:05:69:04:
52:70:86:5a:da:12:97:5c:34:9b:ae:bd:0d:64:53:
64:86:10:3f:58:9f:de:f3:5d:69:f0:1f:cb:ae:f3:
17:6c:aa:db:f8:c8:e4:4a:ed:a5:c1:75:0e:a5:e5:
81:12:1d:db:26:c0:4d:7d:08:32:24:f8:d6:5a:cc:
04:50:04:d2:d1:a7:30:b0:a3:e4:c0:03:7f:1b:fe:
22:a8:83:53:d1:82:63:88:5e:b4:0c:07:e0:95:e1:
97:4b:3f:31:6d:c7:be:23:b4:81:07:5d:12:8d:9f:
ff:b2:52:49:69:f7:92:59:33:e3:24:e7:28:92:bf:
fd:7b:c1:48:2b:45:b8:b8:15:b2:0e:05:c7:eb:58:
cd:70:1a:6c:a2:94:d7:9d:97:6c:f7:98:04:5f:47:
5d:19:b2:10:26:d7:55:d4:2f:68:c0:74:a4:eb:aa:
ea:fb:fa:3a:db:4d:8c:f6:57:ed:a7:2b:59:9c:0e:
f0:38:cf:ae:fc:ad:5b:ea:c0:ff:61:56:51:82:51:
0a:1f:75:e1:42:ab:40:49:73:9a:6b:1d:4c:99:5e:
4e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:28:DD:BB:63:F5:38:05:D1:5E:32:6C:2F:63:E9:01:73:29:61:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f5e77222-6eee-3a39-b699-c9d324f04bb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:3e:38:d9:73:26:46:06:74:15:4f:82:a1:01:f9:c2:75:d7:
39:a9:9f:9d:77:4d:54:00:00:f4:e9:3d:58:99:36:a2:36:9c:
74:d4:cd:ff:08:1b:22:25:6e:ae:0d:3c:a7:42:94:1e:4d:8d:
2d:75:cc:b0:8b:55:00:24:e4:db:a6:c5:75:28:1c:6a:8a:4d:
52:67:a3:87:88:61:d4:31:26:04:b4:0a:4c:b8:78:bc:21:b2:
61:d9:01:ed:48:ac:07:1b:f3:ea:6c:08:7f:fc:c4:b5:73:b5:
6a:d5:bf:2e:c9:7c:18:06:9d:dd:e6:8f:11:e6:ac:f6:01:f9:
69:65:70:cb:12:2a:87:1d:08:11:02:07:33:aa:5a:ad:bc:ba:
9b:b9:4b:87:4b:78:91:cd:a4:36:0d:51:6d:99:30:e2:1e:07:
90:5e:ab:56:0c:2d:c1:14:1d:eb:f0:74:50:2b:d0:15:cc:49:
64:c6:ae:23:1f:82:db:f4:1e:87:a6:f6:d5:5a:84:68:5a:f6:
24:2a:78:f8:6a:fc:70:fd:9c:15:31:4b:5e:d3:d9:2c:34:c8:
91:79:c2:3b:7d:da:67:d3:7c:25:89:6b:d4:3e:b4:61:76:22:
16:93:38:d0:dd:62:8b:b0:00:4f:3e:13:de:3b:28:14:6c:72:
5d:28:f2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:09:33 2025 by rpki-client