Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5d729028-6177-3222-a4a8-2e0f9002488f.roa
File: 5d729028-6177-3222-a4a8-2e0f9002488f.roa (raw, json)
Hash identifier: yLMjSEnn1k6yT3ug7f7pBLtfaJ/01E2Kk8grKENF+Ug=
Subject key identifier: D9:43:C6:A5:6B:02:3B:CD:8A:64:92:99:8A:A0:EE:BE:D3:32:10:70
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858428197D2786BEA486C95F51880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5d729028-6177-3222-a4a8-2e0f9002488f.roa
Signing time: Sun 09 Jul 2023 12:00:00 +0000
ROA not before: Sun 09 Jul 2023 12:00:00 +0000
ROA not after: Wed 10 Jan 2024 05:00:00 +0000
asID: 35075
IP address blocks: 2001:470:112::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:81:97:d2:78:6b:ea:48:6c:95:f5:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 9 12:00:00 2023 GMT
Not After : Jan 10 05:00:00 2024 GMT
Subject: CN=c18a9430-88ce-4c19-9e06-5b2bce5e584e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:50:bd:9d:96:b8:7e:7b:0f:ca:e4:22:fe:c6:
36:1f:37:fc:f0:97:aa:99:7a:42:03:be:06:e9:a2:
5f:4a:84:4b:1b:c6:d9:5f:44:50:44:56:08:19:50:
9f:3a:81:4f:0e:96:21:68:c6:6b:37:f6:e2:60:2d:
38:97:e9:fa:2b:7c:e0:41:56:cc:7c:6a:6f:5e:55:
a1:e4:a2:c3:b1:f1:ae:f7:66:a6:40:92:dd:48:d7:
b6:ef:16:e7:76:ee:e9:82:db:67:23:19:6b:1b:f8:
fd:8f:cb:7c:aa:28:7c:9b:c5:d6:18:ce:ca:8a:d3:
23:ed:ac:6f:cb:ea:6f:e5:e7:b5:8b:39:40:9b:85:
c6:44:a5:9b:92:c8:8e:0f:a5:4b:1a:c0:53:0d:d2:
1a:ba:be:e6:88:9c:96:db:91:ca:42:69:90:08:5d:
8e:e0:25:1f:bb:05:7a:81:68:74:72:1c:5d:b5:74:
4f:b2:64:17:dc:40:01:63:08:6d:85:35:d4:d7:76:
1f:cb:ed:67:ea:e8:79:c9:15:ee:e9:40:e8:4e:e5:
dd:41:6e:e7:52:a7:32:84:1e:2f:59:0b:e8:3c:f7:
08:ad:4d:f2:19:68:f1:e5:86:8a:d9:a0:b7:c2:e2:
ea:5b:dd:c0:d5:e3:e5:27:f4:f4:76:82:e2:68:5c:
b0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:43:C6:A5:6B:02:3B:CD:8A:64:92:99:8A:A0:EE:BE:D3:32:10:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5d729028-6177-3222-a4a8-2e0f9002488f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:112::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:c0:db:5d:4f:2c:9d:f3:86:34:17:49:a9:09:88:e6:8b:2e:
98:11:bd:de:48:8c:4e:36:b7:3f:8a:8b:f0:ec:7b:f0:e2:07:
f1:2c:3f:46:2f:15:e7:1a:69:22:5a:ed:03:7b:4c:a9:46:e4:
bd:af:38:a4:18:5c:46:81:b1:57:1f:a8:aa:8e:12:cd:ce:ca:
3d:fa:67:34:45:d4:a5:7e:e0:dd:99:94:b4:8c:ca:a0:7f:34:
b6:33:27:44:ce:a8:86:e0:9a:28:3a:cd:25:2e:d7:44:d7:12:
88:02:94:b7:29:e7:f2:9f:29:e3:61:8b:3f:b2:45:05:85:63:
16:66:40:1b:5a:d2:14:00:3a:e9:a3:ee:b2:f3:b2:aa:e9:69:
a5:78:ff:7c:2e:29:e2:07:a0:76:86:7e:bc:02:6d:f7:4a:5e:
5a:16:a2:87:c7:0e:14:6c:7f:14:c4:6b:77:a0:78:21:ae:27:
87:40:c9:77:ae:9e:56:3a:59:d7:50:bd:4d:e1:0a:2e:cd:f6:
61:ee:9f:65:38:6e:15:84:87:52:5a:3a:67:ef:5d:92:8d:61:
aa:d4:e8:3d:9a:10:fa:52:ea:fc:5e:65:b7:74:c8:24:90:de:
75:a7:45:3b:51:5e:8c:ff:da:bb:9d:31:b4:bb:bd:4d:c6:68:
b4:49:d3:ee
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEKBl9J4a+pIbJX1GIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDcwOTEyMDAwMFoXDTI0MDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
YzE4YTk0MzAtODhjZS00YzE5LTllMDYtNWIyYmNlNWU1ODRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVC9nZa4fnsPyuQi/sY2Hzf88JeqmXpCA74G
6aJfSoRLG8bZX0RQRFYIGVCfOoFPDpYhaMZrN/biYC04l+n6K3zgQVbMfGpvXlWh
5KLDsfGu92amQJLdSNe27xbndu7pgttnIxlrG/j9j8t8qih8m8XWGM7KitMj7axv
y+pv5ee1izlAm4XGRKWbksiOD6VLGsBTDdIaur7miJyW25HKQmmQCF2O4CUfuwV6
gWh0chxdtXRPsmQX3EABYwhthTXU13Yfy+1n6uh5yRXu6UDoTuXdQW7nUqcyhB4v
WQvoPPcIrU3yGWjx5YaK2aC3wuLqW93A1ePlJ/T0doLiaFywewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNlDxqVrAjvNimSSmYqg7r7TMhBwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWQ3MjkwMjgtNjE3Ny0z
MjIyLWE0YTgtMmUwZjkwMDI0ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAES
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACzA211PLJ3zhjQXSakJiOaLLpgRvd5IjE42tz+Ki/Dse/DiB/Es
P0YvFecaaSJa7QN7TKlG5L2vOKQYXEaBsVcfqKqOEs3Oyj36ZzRF1KV+4N2ZlLSM
yqB/NLYzJ0TOqIbgmig6zSUu10TXEogClLcp5/KfKeNhiz+yRQWFYxZmQBta0hQA
Oumj7rLzsqrpaaV4/3wuKeIHoHaGfrwCbfdKXloWoofHDhRsfxTEa3egeCGuJ4dA
yXeunlY6WddQvU3hCi7N9mHun2U4bhWEh1JaOmfvXZKNYarU6D2aEPpS6vxeZbd0
yCSQ3nWnRTtRXoz/2rudMbS7vU3GaLRJ0+4=
-----END CERTIFICATE-----
Generated at Wed Jan 10 07:33:51 2024 by rpki-client on console-ams.rpki-client.org