Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f659e383-8dbf-33f2-97bc-2a4038bd778f.roa
File: f659e383-8dbf-33f2-97bc-2a4038bd778f.roa (raw, json)
Hash identifier: YWiorvYQUNtjEa29z/sWTGfKK4Ow5UEVos1x4b4LwBc=
Subject key identifier: 3D:3C:CB:7D:48:A2:36:18:C4:03:A4:9A:E6:75:88:3F:7A:98:1A:E1
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABB8195078066F3CAEAEC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f659e383-8dbf-33f2-97bc-2a4038bd778f.roa
Signing time: Wed 16 Oct 2024 14:26:32 +0000
ROA not before: Wed 16 Oct 2024 14:26:32 +0000
ROA not after: Tue 14 Jan 2025 15:26:32 +0000
asID: 81
IP address blocks: 152.28.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:b8:19:50:78:06:6f:3c:ae:ae:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:32 2024 GMT
Not After : Jan 14 15:26:32 2025 GMT
Subject: CN=c87e9d97-54ea-416f-89be-bd714774a80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:ff:a5:2b:db:d2:a6:3b:10:27:20:2b:6d:
96:c5:52:87:ae:19:9c:e7:17:65:36:95:38:dc:6c:
9f:3d:60:79:8a:80:4c:0e:0c:91:8e:42:42:a2:ac:
df:d0:20:c6:0b:fa:f5:b1:1a:44:6c:31:33:a9:16:
a8:a7:24:58:41:a8:90:66:37:0f:60:e3:cf:f1:a4:
d8:e1:de:77:ef:b2:a3:4f:48:47:a1:b4:02:ed:6e:
26:2c:5b:c2:90:33:bb:44:06:09:c3:a6:64:45:10:
8a:25:a2:a2:e2:8b:86:21:08:ee:03:95:94:6a:53:
4b:66:ac:96:c1:fa:2b:68:da:f9:56:f5:c0:59:22:
84:a6:c0:21:ec:89:6e:27:2a:66:a7:38:70:ab:92:
20:1b:24:a6:3d:94:f7:a0:26:96:0a:cc:ec:bd:06:
00:9d:63:40:09:c6:b0:38:ed:11:be:2e:fa:fb:b8:
da:c5:60:ef:11:59:26:1a:27:3e:a2:22:89:ed:15:
e6:85:81:0f:b0:33:98:6b:4a:c6:33:0c:5c:ef:52:
2b:89:d4:8d:d3:a3:dd:a9:9f:5f:99:1e:3d:13:11:
91:b1:84:3f:e3:c2:62:40:c0:74:c5:53:88:3f:ff:
bb:b6:2e:7f:8a:35:e9:0c:59:34:14:f7:05:7c:de:
08:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3C:CB:7D:48:A2:36:18:C4:03:A4:9A:E6:75:88:3F:7A:98:1A:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f659e383-8dbf-33f2-97bc-2a4038bd778f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.28.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:6f:b7:97:dc:60:9e:e5:3d:be:8e:bb:d2:0f:ae:97:e0:a4:
12:a9:fe:0e:93:fd:77:a8:da:88:c4:13:db:17:e1:a5:f6:d1:
e7:21:bf:fc:9d:99:de:a5:aa:0d:74:c2:ea:0e:b2:14:6f:f8:
b7:8e:d3:61:a0:c4:00:54:d5:f4:bc:0e:37:ae:f1:74:1c:2c:
10:61:d6:27:51:3c:4d:9b:2b:43:cd:8d:21:91:45:c6:d0:21:
b2:a2:f1:f2:96:4d:52:ae:a2:54:22:a8:37:e5:3b:e6:aa:ca:
07:ea:f5:ea:4e:c1:7e:8a:7e:b1:9b:a3:b4:2b:20:5d:dd:fa:
87:1b:fc:16:34:41:e9:43:60:d9:43:22:5a:c2:51:dd:51:df:
a9:d5:c1:17:f3:96:64:97:25:ca:3b:1a:9c:83:e5:6d:31:04:
71:be:3d:af:7d:fa:60:04:50:6a:ca:a1:a5:9c:04:c9:fa:87:
a3:d5:87:32:ee:c5:61:9c:ed:36:7d:43:e2:20:55:81:f1:27:
64:b8:80:b6:e3:f3:c7:42:4d:c1:6a:77:a5:59:9b:05:a4:d1:
00:96:0d:9b:6b:e5:cd:25:66:68:4c:39:99:67:c9:e3:89:7d:
40:09:77:ed:50:a7:09:81:48:c6:05:94:37:cc:bf:17:04:e7:
2c:1b:c3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:13:18 2025 by rpki-client