Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fa1a694d-158c-3f5e-8b6f-fdd3fc2ef808.roa
File: fa1a694d-158c-3f5e-8b6f-fdd3fc2ef808.roa (raw, json)
Hash identifier: FmEnQcMjvs6HzUPBfZk9kjHACdsiTFdl8jc2Orvmgdk=
Subject key identifier: EC:2B:1F:CB:B5:F6:85:CB:EE:ED:97:51:4A:33:6F:A6:80:2B:F6:DE
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48106B50CB57B1244F500
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fa1a694d-158c-3f5e-8b6f-fdd3fc2ef808.roa
Signing time: Fri 08 Nov 2024 15:04:55 +0000
ROA not before: Fri 08 Nov 2024 15:04:55 +0000
ROA not after: Thu 06 Feb 2025 15:04:55 +0000
asID: 81
IP address blocks: 152.40.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:81:06:b5:0c:b5:7b:12:44:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:04:55 2024 GMT
Not After : Feb 6 15:04:55 2025 GMT
Subject: CN=d8fce9dc-fd45-457d-895f-3f7611b5d0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:af:df:87:4d:bc:66:b1:c3:7a:35:af:f2:03:
5d:58:83:32:01:b4:db:49:cb:23:c1:bf:eb:21:21:
ad:97:59:24:cb:c9:b4:22:4d:b7:3e:ba:8e:dd:b9:
85:18:88:c8:9b:df:ce:12:23:55:87:e2:4b:f3:18:
a1:04:e1:b6:5e:51:70:b7:e2:bd:4e:a0:72:6a:53:
f2:41:f0:ff:4f:e6:2a:2c:77:64:5c:9b:3a:ad:73:
eb:3a:34:01:57:a3:29:87:b3:30:ee:7d:46:a7:61:
50:2f:cd:3a:28:20:f5:37:48:0d:71:68:33:af:77:
cb:65:79:b8:b5:60:f0:ac:73:75:37:70:9b:10:45:
c3:57:6b:73:a1:74:9f:6f:b6:a5:b3:ca:dc:13:d2:
da:56:09:bb:2c:a0:f6:c2:53:cf:dc:20:7a:8c:38:
cc:2f:91:42:98:ad:47:c3:54:3d:a6:66:e3:88:cf:
f1:e9:b9:eb:ce:11:67:e0:f7:1d:34:a2:47:20:f9:
9c:8a:ee:4c:b7:eb:9a:6c:77:3d:a9:15:2f:e3:b9:
6d:1d:fd:45:36:fa:e7:5a:8e:80:ba:d1:0b:03:48:
0a:a3:b5:e0:67:1e:b4:0a:26:3c:f3:14:86:1e:40:
4b:88:9b:31:6c:c5:50:32:dd:9b:26:cf:aa:26:5b:
28:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2B:1F:CB:B5:F6:85:CB:EE:ED:97:51:4A:33:6F:A6:80:2B:F6:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fa1a694d-158c-3f5e-8b6f-fdd3fc2ef808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.40.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:2d:01:6b:07:e0:fa:a5:fd:61:3e:c1:99:4a:58:99:5b:9a:
3b:0d:b6:05:e2:bc:d7:ea:e7:03:f4:e1:26:9f:7f:a8:8a:a1:
03:af:b1:7a:32:dd:e3:7b:b0:c1:82:5a:20:fb:6b:8c:3c:6c:
78:0d:34:3d:10:b0:ae:36:85:22:99:48:e6:0d:9f:87:5d:e2:
2e:1c:23:79:f6:48:2c:8b:87:62:f0:96:db:9e:8a:12:a0:71:
f8:0f:e5:94:8a:af:93:b1:f0:93:29:e6:92:90:03:64:48:dd:
f6:0f:7f:ff:98:fb:3a:5b:19:f4:c5:5a:07:28:88:04:50:3a:
eb:e8:24:b9:8c:25:22:7e:56:df:0b:b0:2f:8c:95:6f:44:d1:
51:ac:62:61:8b:4d:b4:3d:9e:d5:59:99:95:42:a7:ea:7d:c8:
79:bf:b7:23:39:e7:af:73:60:a6:b7:1c:3e:e4:c2:48:47:43:
d1:c8:e9:42:72:ef:5a:14:ce:eb:6d:42:26:f3:65:99:8f:d1:
94:0a:4f:18:9d:d1:3b:d6:b6:a1:60:f9:eb:8f:07:29:b9:36:
89:61:c7:1c:87:64:03:e5:3a:e4:d0:12:fa:c8:2c:db:e3:27:
d9:80:ca:4f:14:7a:05:c7:a5:95:8d:3d:e5:26:8d:3a:53:bc:
57:1c:cd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:36:26 2025 by rpki-client