Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570/52959418-1ad6-3ae6-b7c8-cb60b3a7700d.roa
File: 52959418-1ad6-3ae6-b7c8-cb60b3a7700d.roa (raw, json)
Hash identifier: 6ErdsbgUj4/VwfVpQqMmbahy4rLjPG61Z6LbVwetOYE=
Subject key identifier: 25:B3:FA:9C:F4:93:74:E7:05:7C:9F:16:61:AE:27:44:C7:BB:0B:FA
Certificate issuer: /CN=93652d41-9632-44fb-89a2-b986954b6570
Certificate serial: 010D0C9F43285846662F3246A0BBA0D5D7358840
Authority key identifier: 89:10:A5:9E:8E:2D:D6:8E:E7:2E:9D:F5:FB:F6:D1:34:2B:B8:DA:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570/52959418-1ad6-3ae6-b7c8-cb60b3a7700d.roa
Signing time: Tue 02 Jul 2024 01:00:24 +0000
ROA not before: Tue 02 Jul 2024 01:00:24 +0000
ROA not after: Mon 30 Sep 2024 01:00:24 +0000
asID: 21743
IP address blocks: 45.45.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:66:2f:32:46:a0:bb:a0:d5:d7:35:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93652d41-9632-44fb-89a2-b986954b6570
Validity
Not Before: Jul 2 01:00:24 2024 GMT
Not After : Sep 30 01:00:24 2024 GMT
Subject: CN=a810d17f-fb7a-4c68-bbad-0cfa20bddc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:23:b3:9e:56:1e:03:3f:c1:f9:c0:15:40:e0:
8e:94:c6:46:7a:00:b9:c8:30:ea:ff:3e:18:f3:6c:
9b:24:45:86:72:34:38:84:ab:07:91:f6:77:42:99:
24:84:e9:cf:47:98:26:fe:e3:83:89:c8:89:0e:52:
9a:36:86:e8:35:3d:51:92:b2:29:90:70:7c:92:fa:
a3:22:6b:2d:73:5e:fa:f5:f0:c3:45:0a:50:63:e7:
b5:3a:77:88:00:35:f5:86:cd:25:7f:ca:cd:46:f7:
1e:80:16:a0:1d:56:10:19:2e:3f:9d:ac:63:16:26:
7c:6d:5d:4d:13:5a:9f:98:b4:8a:2a:1e:c9:4e:f4:
65:71:28:b0:bd:d9:f4:38:86:e5:27:2c:79:01:a7:
86:5a:e4:fc:81:ee:04:4e:cf:bc:0c:bf:18:4a:84:
08:13:45:11:c4:72:5a:29:65:e4:74:9d:2c:53:59:
d6:e2:45:ed:1e:36:48:dd:73:ea:eb:42:63:7c:2c:
28:14:b0:1a:a0:e2:bd:72:22:28:55:2c:94:fd:5c:
69:1e:ed:dd:b3:bd:ce:52:a4:64:eb:fd:67:c2:e3:
1d:99:7d:c8:d1:d0:92:a1:e8:d2:ca:69:34:64:92:
50:25:fa:e4:68:e3:0b:59:be:ea:44:94:db:2f:10:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B3:FA:9C:F4:93:74:E7:05:7C:9F:16:61:AE:27:44:C7:BB:0B:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570/52959418-1ad6-3ae6-b7c8-cb60b3a7700d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570/93652d41-9632-44fb-89a2-b986954b6570.crl
X509v3 Authority Key Identifier:
keyid:89:10:A5:9E:8E:2D:D6:8E:E7:2E:9D:F5:FB:F6:D1:34:2B:B8:DA:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/93652d41-9632-44fb-89a2-b986954b6570.cer
sbgp-ipAddrBlock: critical
IPv4:
45.45.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:7f:1d:c3:22:cc:59:ca:97:57:26:be:39:b1:46:55:ba:96:
77:d1:91:34:58:8f:ec:64:a4:63:0e:de:af:aa:56:a2:ed:04:
f3:9f:eb:66:31:b9:88:85:f5:45:7f:07:6c:5b:c0:da:7a:c5:
89:d7:cb:42:00:96:ec:e2:21:b9:dd:ae:df:a7:a9:71:24:dc:
e8:b3:1a:2d:ab:c0:25:bf:a5:0b:f1:68:20:6a:57:99:cb:ba:
41:39:fe:db:60:f1:99:7a:aa:09:09:58:e8:01:56:6d:90:95:
0a:cf:26:7f:03:f3:fa:9f:1c:43:47:4a:e7:03:16:70:9a:de:
19:c5:56:7e:e0:00:09:58:54:46:50:85:1b:a1:f6:08:ca:c9:
0f:42:4a:12:74:10:97:83:e5:a7:68:e0:1f:e9:76:96:46:4d:
ca:e6:c7:b7:98:14:3a:b9:e2:e1:15:d6:c1:10:9b:22:11:64:
1e:ec:48:03:b4:67:d1:83:b2:28:c2:cc:06:20:66:67:21:55:
a0:b2:45:aa:04:79:b4:8d:e8:e1:8c:3e:56:60:74:ac:ce:25:
de:90:b4:e2:e8:f9:7d:9b:2d:5e:fd:79:ff:7d:38:7c:6d:22:
ef:27:6c:2a:1a:f5:6e:fc:67:73:4a:0d:92:d6:bd:b7:97:bf:
e8:8d:ea:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:26:25 2025 by rpki-client