Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85d67e68-6c5c-36d7-b0f9-47352279b865.roa
File: 85d67e68-6c5c-36d7-b0f9-47352279b865.roa (raw, json)
Hash identifier: NqCEUSAeGvWubuC8YVOJvVHsoAt1Mkh0wDhpC483Hro=
Subject key identifier: CC:05:93:57:72:F3:00:DB:31:3D:F8:5E:97:D6:94:BD:25:D7:66:1D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BBD523C0CE11E2956A2BCCCD5
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85d67e68-6c5c-36d7-b0f9-47352279b865.roa
Signing time: Thu 28 Oct 2021 04:00:00 +0000
ROA not before: Thu 28 Oct 2021 04:00:00 +0000
ROA not after: Thu 28 Apr 2022 04:00:00 +0000
asID: 17117
IP address blocks: 2001:470:15a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:bd:52:3c:0c:e1:1e:29:56:a2:bc:cc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 28 04:00:00 2021 GMT
Not After : Apr 28 04:00:00 2022 GMT
Subject: CN=2902b5f2-f01b-4627-a31a-747590cdd7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7b:a0:95:72:a9:63:bf:59:88:71:90:0d:77:
85:f1:89:3a:c6:7a:fe:a6:a0:08:ff:1d:48:36:54:
d8:e1:6a:02:a0:b2:4b:07:61:d3:05:74:76:3e:3f:
27:11:7f:45:9c:6d:70:c9:91:6f:ce:79:de:04:6a:
aa:62:c3:dc:9f:c3:27:0a:07:7b:8b:8c:5f:65:88:
df:65:9b:f7:32:df:b0:73:16:91:71:8e:e1:09:5a:
72:e2:ae:5e:10:57:eb:90:99:14:17:d5:48:e7:b3:
29:66:14:b7:e2:fe:e8:59:41:97:e2:56:7d:b8:6b:
42:b6:30:e4:11:ed:d8:c7:d9:91:2d:84:44:6d:dd:
d2:f4:5d:d3:88:20:b9:ed:f2:e0:e3:90:d5:83:9e:
86:f8:fc:05:57:d8:53:31:4f:32:9d:dd:cd:22:1e:
87:cf:c5:cc:d6:1f:73:ae:53:64:ba:86:4a:e1:bd:
31:5a:df:3d:eb:c9:98:b8:72:64:54:f0:d8:15:52:
bd:11:1a:ad:68:45:e9:b2:e0:d1:53:b1:6b:4c:01:
e3:20:b6:62:80:5a:5b:44:82:ab:46:d1:5e:d2:26:
68:24:b7:ff:d9:9e:22:0f:61:b3:d0:74:2f:b5:ec:
f6:3c:85:ec:7d:c7:db:a9:85:b4:8f:78:ad:28:8a:
60:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:05:93:57:72:F3:00:DB:31:3D:F8:5E:97:D6:94:BD:25:D7:66:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85d67e68-6c5c-36d7-b0f9-47352279b865.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:15a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:bb:63:58:f3:26:4e:ee:da:10:d9:dd:95:11:a8:a9:d5:bb:
20:39:8b:39:aa:0f:15:16:7d:eb:5d:e7:cc:d5:54:bf:35:59:
db:fd:f2:a3:b0:be:ff:f3:cd:99:01:e2:ff:8a:ec:1b:bb:85:
9b:aa:9d:ab:a8:20:35:ed:04:5c:79:17:f3:36:5f:95:d8:64:
3c:20:96:cd:62:68:22:94:9d:f1:d6:30:64:f7:e3:5d:14:1f:
4f:13:28:0a:6e:9f:57:cd:ca:56:3c:ba:20:41:d8:32:ff:59:
85:c9:bd:98:4b:08:38:83:5a:1a:a0:d3:36:bf:80:30:fa:bc:
fe:43:49:d5:0e:44:a5:7b:43:fe:c4:62:85:c0:29:15:ec:b3:
fd:ff:64:b8:14:64:bb:1c:96:67:9c:2e:69:1e:00:85:cf:29:
35:66:91:3f:ce:8e:35:36:7e:13:e3:7b:59:59:8e:6e:a1:8e:
66:b3:09:18:ea:ba:61:88:3e:fb:4b:fb:83:92:89:2d:51:89:
b3:99:6c:bf:8b:2c:9f:50:92:83:fd:d8:46:34:e5:4a:21:20:
12:13:8b:8f:34:16:e4:b3:9c:1f:e1:87:28:dd:bb:55:63:f0:
22:bb:20:cd:ba:9e:9c:ec:05:f5:66:0e:86:9d:01:4c:1a:f8:
9e:2c:4d:fd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDu9UjwM4R4pVqK8zNUwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIxMTAyODA0MDAwMFoXDTIyMDQyODA0MDAwMFowLzEtMCsGA1UEAxMk
MjkwMmI1ZjItZjAxYi00NjI3LWEzMWEtNzQ3NTkwY2RkN2ExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHuglXKpY79ZiHGQDXeF8Yk6xnr+pqAI/x1I
NlTY4WoCoLJLB2HTBXR2Pj8nEX9FnG1wyZFvznneBGqqYsPcn8MnCgd7i4xfZYjf
ZZv3Mt+wcxaRcY7hCVpy4q5eEFfrkJkUF9VI57MpZhS34v7oWUGX4lZ9uGtCtjDk
Ee3Yx9mRLYREbd3S9F3TiCC57fLg45DVg56G+PwFV9hTMU8ynd3NIh6Hz8XM1h9z
rlNkuoZK4b0xWt8968mYuHJkVPDYFVK9ERqtaEXpsuDRU7FrTAHjILZigFpbRIKr
RtFe0iZoJLf/2Z4iD2Gz0HQvtez2PIXsfcfbqYW0j3itKIpgcwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMwFk1dy8wDbMT34XpfWlL0l12YdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODVkNjdlNjgtNmM1Yy0z
NmQ3LWIwZjktNDczNTIyNzliODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHu7Y1jzJk7u2hDZ3ZURqKnVuyA5izmqDxUWfetd58zVVL81Wdv9
8qOwvv/zzZkB4v+K7Bu7hZuqnauoIDXtBFx5F/M2X5XYZDwgls1iaCKUnfHWMGT3
410UH08TKApun1fNylY8uiBB2DL/WYXJvZhLCDiDWhqg0za/gDD6vP5DSdUORKV7
Q/7EYoXAKRXss/3/ZLgUZLsclmecLmkeAIXPKTVmkT/OjjU2fhPje1lZjm6hjmaz
CRjqumGIPvtL+4OSiS1RibOZbL+LLJ9QkoP92EY05UohIBITi480FuSznB/hhyjd
u1Vj8CK7IM26npzsBfVmDoadAUwa+J4sTf0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:44 2023 by rpki-client on console-fra.rpki-client.org