Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a918bae-889e-3d25-9146-2d412ccf3ffe.roa
File: 1a918bae-889e-3d25-9146-2d412ccf3ffe.roa (raw, json)
Hash identifier: ErcaXp9BHn7tH+/E4bMbRhw1Kx1oQA8sUqeAj5aaLiI=
Subject key identifier: 87:94:71:6B:75:A8:0F:BB:90:E0:3C:37:40:65:88:5F:71:53:DC:E6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285842D55870AE3F4CEF60AEC7ADA0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a918bae-889e-3d25-9146-2d412ccf3ffe.roa
Signing time: Tue 08 Aug 2023 12:00:00 +0000
ROA not before: Tue 08 Aug 2023 12:00:00 +0000
ROA not after: Fri 09 Feb 2024 05:00:00 +0000
asID: 14277
IP address blocks: 2001:470:17d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d5:58:70:ae:3f:4c:ef:60:ae:c7:ad:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 8 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2024 GMT
Subject: CN=b1427dfb-aa6b-4fa0-a833-e9df3668c467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:22:60:0d:49:04:a5:ba:e3:a1:c8:60:8e:92:
82:b7:f9:a0:50:12:d8:5a:c4:bd:9a:1b:1d:59:1e:
aa:b1:77:8b:a5:e6:d5:fc:80:9f:e7:9c:25:09:17:
c7:73:9f:a2:7f:a9:ea:06:bd:34:8a:44:3b:db:75:
93:2f:aa:17:1c:e5:4e:19:48:85:8c:89:9c:a9:c6:
6d:88:ad:23:59:88:ce:41:57:c1:8b:f1:46:6f:d4:
0b:b2:d1:a3:75:4b:60:05:3e:c2:eb:69:14:0e:a0:
ad:66:14:88:e0:5f:a8:6c:ea:b6:eb:5b:79:eb:c1:
61:5e:03:ea:32:a9:07:f5:32:c4:f9:4b:12:94:d9:
fe:bb:49:99:12:79:c9:94:6e:70:18:c8:cc:59:1b:
a3:01:1f:16:3d:48:d0:30:6d:6e:ba:96:00:8c:e1:
2e:f3:c8:17:3b:a4:ba:93:96:a9:cf:8f:c9:18:98:
74:e5:c4:76:bb:07:32:43:d9:f6:06:ba:da:6f:f8:
a7:b1:78:d2:f2:bd:71:6b:96:c5:7c:b1:a2:05:fa:
fc:13:21:a8:fd:8c:56:9e:82:58:3a:01:4f:7a:c3:
cd:0a:ad:80:c4:59:88:d5:60:4d:de:35:36:59:d6:
6e:66:ac:b8:db:aa:2d:cc:68:e5:d7:9c:8a:6c:28:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:94:71:6B:75:A8:0F:BB:90:E0:3C:37:40:65:88:5F:71:53:DC:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a918bae-889e-3d25-9146-2d412ccf3ffe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:17d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:90:87:58:56:2c:b5:7c:df:b1:26:a7:4d:78:88:07:5c:0a:
f8:f4:3e:cc:f6:dc:b4:89:40:e5:21:0f:38:8c:41:e1:e6:e0:
9a:46:32:7d:57:90:f6:2e:5c:a0:27:62:53:9c:55:5e:84:52:
28:43:cf:4d:5c:9b:b4:ef:ca:ad:98:eb:4e:01:26:ec:22:40:
64:63:1b:8a:92:cd:d9:6c:ad:1f:13:77:f0:5b:4b:f4:8f:5c:
a9:fe:fd:d7:d3:b2:80:b4:7a:74:5d:9d:5a:f8:a7:26:00:61:
70:30:b3:0c:bf:ac:8b:a7:51:05:58:c0:f6:3b:0a:10:ed:d9:
21:0e:ed:0a:62:5b:d7:5f:66:2e:65:02:af:c2:0b:00:33:1a:
a9:56:21:4c:b2:0f:d3:f8:03:9f:99:ac:f0:63:eb:27:82:f1:
c9:3a:93:d0:3f:9a:8e:bf:27:e7:80:f8:8a:38:8f:a9:da:9a:
af:d2:9a:1d:75:26:84:08:66:88:be:ab:7a:15:1a:ac:e9:f3:
2a:c0:db:4c:9f:a6:84:57:46:f6:12:61:6c:71:c2:35:c3:68:
7e:83:39:db:49:77:c2:e6:9e:e3:d9:77:e8:64:3a:37:87:45:
c4:52:b8:f1:78:37:26:ee:24:dc:ad:77:0e:7c:2e:f1:0b:46:
1d:1d:eb:41
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWELVWHCuP0zvYK7HraAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDgwODEyMDAwMFoXDTI0MDIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
YjE0MjdkZmItYWE2Yi00ZmEwLWE4MzMtZTlkZjM2NjhjNDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCJgDUkEpbrjochgjpKCt/mgUBLYWsS9mhsd
WR6qsXeLpebV/ICf55wlCRfHc5+if6nqBr00ikQ723WTL6oXHOVOGUiFjImcqcZt
iK0jWYjOQVfBi/FGb9QLstGjdUtgBT7C62kUDqCtZhSI4F+obOq261t568FhXgPq
MqkH9TLE+UsSlNn+u0mZEnnJlG5wGMjMWRujAR8WPUjQMG1uupYAjOEu88gXO6S6
k5apz4/JGJh05cR2uwcyQ9n2Brrab/insXjS8r1xa5bFfLGiBfr8EyGo/YxWnoJY
OgFPesPNCq2AxFmI1WBN3jU2WdZuZqy426otzGjl15yKbCjCOQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIeUcWt1qA+7kOA8N0BliF9xU9zmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWE5MThiYWUtODg5ZS0z
ZDI1LTkxNDYtMmQ0MTJjY2YzZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAF9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIeQh1hWLLV837Emp014iAdcCvj0Psz23LSJQOUhDziMQeHm4JpG
Mn1XkPYuXKAnYlOcVV6EUihDz01cm7Tvyq2Y604BJuwiQGRjG4qSzdlsrR8Td/Bb
S/SPXKn+/dfTsoC0enRdnVr4pyYAYXAwswy/rIunUQVYwPY7ChDt2SEO7QpiW9df
Zi5lAq/CCwAzGqlWIUyyD9P4A5+ZrPBj6yeC8ck6k9A/mo6/J+eA+Io4j6namq/S
mh11JoQIZoi+q3oVGqzp8yrA20yfpoRXRvYSYWxxwjXDaH6DOdtJd8LmnuPZd+hk
OjeHRcRSuPF4NybuJNytdw58LvELRh0d60E=
-----END CERTIFICATE-----
Generated at Fri Feb 9 06:12:23 2024 by rpki-client on console-ams.rpki-client.org