Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f8b5c462-6a99-3ebd-82bd-3b3579daf93f.roa
File: f8b5c462-6a99-3ebd-82bd-3b3579daf93f.roa (raw, json)
Hash identifier: 0fc/zdmo1WaNR5hb1Vu5pn+psENehLYyvbUJg4d/+o8=
Subject key identifier: 69:BF:A9:50:15:1D:40:30:57:6B:C8:1A:20:3A:DD:C3:D1:4A:DF:4E
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABB7EDFCCC6E84CA318B00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f8b5c462-6a99-3ebd-82bd-3b3579daf93f.roa
Signing time: Wed 16 Oct 2024 14:26:32 +0000
ROA not before: Wed 16 Oct 2024 14:26:32 +0000
ROA not after: Tue 14 Jan 2025 15:26:32 +0000
asID: 81
IP address blocks: 152.22.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:b7:ed:fc:cc:6e:84:ca:31:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:32 2024 GMT
Not After : Jan 14 15:26:32 2025 GMT
Subject: CN=5546d0ca-8964-4704-84b1-7bfa20a1d798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6d:90:bb:a3:22:84:79:98:b9:75:ad:eb:71:
8d:c9:55:23:58:9a:2b:77:a1:84:9b:ed:ff:fe:b3:
2c:4b:74:1e:3b:11:1d:42:48:50:4c:72:72:d2:a1:
17:c9:c2:a1:d8:c4:5d:f8:bf:84:56:ec:60:cd:2c:
76:3a:26:86:8a:35:84:c3:26:cc:4f:51:77:7b:40:
e9:cf:82:d3:77:8f:b2:d0:42:03:3b:31:dd:71:52:
48:cc:86:84:13:6f:d3:b8:1e:75:62:9d:78:21:72:
35:13:09:d4:44:a7:77:db:2d:14:25:1e:bd:68:50:
de:3c:e5:e2:8a:b3:27:d8:5b:1c:1b:f6:b2:8d:6c:
6e:92:8c:12:3a:8e:bb:b6:2c:1b:fc:1c:2c:0d:e7:
8a:4a:a7:89:c5:92:a8:e2:c2:2d:38:fa:af:42:c0:
1c:4c:41:cd:08:15:99:71:83:b6:f1:3a:21:aa:f6:
85:e7:34:23:99:1c:94:7d:ff:95:63:cc:aa:ef:ce:
05:d9:09:43:e2:cf:04:37:e4:ac:ff:12:78:8b:3b:
68:5d:d6:74:71:bb:03:86:50:fc:4c:82:9d:76:4b:
d7:fc:4d:4f:78:26:7e:7c:1f:9d:ee:0d:8e:3d:16:
37:ee:7c:f9:da:44:cc:e8:c0:94:b6:8c:09:e3:0c:
5e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BF:A9:50:15:1D:40:30:57:6B:C8:1A:20:3A:DD:C3:D1:4A:DF:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f8b5c462-6a99-3ebd-82bd-3b3579daf93f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:a5:cd:2f:fa:c8:c8:8c:32:31:b0:22:54:c1:10:c5:8a:b5:
3f:8f:fe:33:e7:7e:2f:99:2c:0a:3b:29:b5:85:39:44:05:95:
21:b8:9a:25:69:65:86:a5:e0:bc:72:7d:3e:b6:d2:6e:86:d2:
70:ce:ed:98:74:a7:b0:d4:ae:0d:04:fb:1c:45:7b:80:67:d0:
cd:1c:d2:32:44:39:8c:4d:25:0e:24:0f:0b:f1:80:02:dd:80:
85:87:cc:28:7e:f0:02:44:d6:7b:0a:b5:4a:24:eb:a3:3c:33:
c3:49:bc:20:01:21:0b:81:87:c9:bd:6f:98:69:86:25:56:a6:
39:e8:5d:25:6a:9f:44:55:a2:94:ef:2c:27:6c:bb:b5:90:3b:
9d:44:7c:7d:d2:38:55:d3:bb:66:a1:cd:7c:d6:c0:52:64:89:
62:09:13:92:d3:2a:1f:80:b1:e4:b5:da:b5:98:c7:07:2a:e0:
fd:aa:e0:a3:aa:b8:bd:d2:bb:a7:a4:f6:29:0d:ea:23:15:6a:
82:a9:69:79:87:d0:8e:11:6b:5c:2e:50:df:cb:5f:08:19:52:
8a:96:6f:53:46:87:a9:98:67:57:9e:4d:c0:b3:11:32:92:ce:
bf:4a:f6:7d:b4:9d:de:65:d2:b0:71:e6:45:4c:77:62:59:ec:
9b:9c:20:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:38 2025 by rpki-client