Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e69e4bc-6135-3374-9c46-8ef6314dccbf.roa
File: 8e69e4bc-6135-3374-9c46-8ef6314dccbf.roa (raw, json)
Hash identifier: F/6qHOuTvowHGCJvSpmpd+gJeuF6fg+pFTZ99P4Xa5Q=
Subject key identifier: 3E:07:8F:4B:E7:F4:3B:C7:38:CA:8A:2A:88:DC:0B:BF:A1:0A:DE:B5
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A506FB992384B68E8BB8800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e69e4bc-6135-3374-9c46-8ef6314dccbf.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 54039
IP address blocks: 2001:470:e0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:6f:b9:92:38:4b:68:e8:bb:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=aefaba44-f0d5-4b5c-81e5-e0f663ebb9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:6b:01:3f:7c:2c:62:35:95:11:ca:14:bb:
60:1a:d6:31:3e:61:32:b1:b8:20:b7:4c:10:e8:b0:
a1:3b:b1:21:90:17:62:77:3c:3f:e8:70:74:c3:ac:
52:d6:79:0c:4d:05:fa:b4:cf:4e:0a:3a:50:43:38:
21:86:85:84:2e:21:c1:31:24:41:22:3f:ab:26:ab:
24:43:52:e6:be:d5:1c:e3:c2:13:69:e0:78:fa:60:
9f:0e:40:93:24:4a:c2:56:47:b7:1c:09:93:22:57:
bb:e5:ea:9e:12:82:e7:89:fc:53:fa:f5:6c:45:24:
7b:02:aa:dd:e5:8f:60:2c:4b:64:cf:e5:23:88:8c:
8b:d1:80:09:60:81:d0:7c:08:ba:fd:26:41:2e:a8:
31:c8:25:45:51:b3:8e:93:a0:ff:72:5b:99:ab:09:
ed:cb:30:02:e8:f9:e8:ef:df:50:80:2f:29:f0:b2:
56:ed:cc:0e:d1:f7:49:06:6b:94:c0:ca:44:93:33:
33:aa:c3:da:48:cd:07:8a:00:9c:2b:04:0b:68:cb:
13:57:66:1e:e2:5d:88:30:72:79:47:65:f0:de:3d:
37:a6:a8:d8:81:fa:48:b6:20:42:6d:92:76:9f:70:
c1:b0:8b:c9:b1:49:9d:ed:83:c6:61:e2:cf:ea:bf:
b6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:07:8F:4B:E7:F4:3B:C7:38:CA:8A:2A:88:DC:0B:BF:A1:0A:DE:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e69e4bc-6135-3374-9c46-8ef6314dccbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:e0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:12:8e:f9:6c:90:29:e0:22:13:cf:a6:0d:77:41:15:74:4e:
9f:4c:11:48:f8:9e:12:de:ea:84:ba:f6:dd:23:10:9a:d0:ea:
6d:10:74:19:a1:4a:84:9a:e8:4e:7c:9e:91:ed:08:a9:8f:02:
cf:c1:f0:f2:ff:35:48:d5:c8:1e:ec:74:a0:be:a2:22:68:8b:
a9:2f:21:8c:09:5e:03:02:77:92:a9:97:92:26:d1:c7:1e:5a:
a7:c8:5e:b8:aa:d0:b2:98:32:86:a4:ee:a0:d9:62:04:89:6a:
1e:f7:2d:73:34:a6:34:88:5a:a2:b8:96:02:91:e8:3c:88:53:
98:02:eb:93:c7:c5:1c:36:5b:3e:d2:7c:e1:76:fa:1c:3d:cd:
bc:5b:28:f6:01:cf:76:b9:6e:dd:06:00:ad:da:88:fc:d7:77:
5d:96:eb:7e:1b:5f:78:9c:dc:49:28:84:95:cb:47:5e:6a:fd:
cb:0c:bb:cc:fb:56:e1:55:96:fe:66:1e:c6:81:4f:58:c4:e9:
53:39:03:14:60:49:45:6f:2c:a7:02:82:15:5a:c3:0e:10:b3:
59:45:fd:88:a0:bd:29:e7:4a:7f:36:bb:c8:ce:ff:ff:7a:37:
6f:db:f6:d1:ee:45:2a:43:e7:4b:71:20:9b:06:a0:eb:6f:6b:
4d:c4:68:3a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEFKUG+5kjhLaOi7iAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
YWVmYWJhNDQtZjBkNS00YjVjLTgxZTUtZTBmNjYzZWJiOWEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG1rAT98LGI1lRHKFLtgGtYxPmEysbggt0wQ
6LChO7EhkBdidzw/6HB0w6xS1nkMTQX6tM9OCjpQQzghhoWELiHBMSRBIj+rJqsk
Q1LmvtUc48ITaeB4+mCfDkCTJErCVke3HAmTIle75eqeEoLnifxT+vVsRSR7Aqrd
5Y9gLEtkz+UjiIyL0YAJYIHQfAi6/SZBLqgxyCVFUbOOk6D/cluZqwntyzAC6Pno
799QgC8p8LJW7cwO0fdJBmuUwMpEkzMzqsPaSM0HigCcKwQLaMsTV2Ye4l2IMHJ5
R2Xw3j03pqjYgfpItiBCbZJ2n3DBsIvJsUmd7YPGYeLP6r+2YwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD4Hj0vn9DvHOMqKKojcC7+hCt61MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGU2OWU0YmMtNjEzNS0z
Mzc0LTljNDYtOGVmNjMxNGRjY2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMMSjvlskCngIhPPpg13QRV0Tp9MEUj4nhLe6oS69t0jEJrQ6m0Q
dBmhSoSa6E58npHtCKmPAs/B8PL/NUjVyB7sdKC+oiJoi6kvIYwJXgMCd5Kpl5Im
0cceWqfIXriq0LKYMoak7qDZYgSJah73LXM0pjSIWqK4lgKR6DyIU5gC65PHxRw2
Wz7SfOF2+hw9zbxbKPYBz3a5bt0GAK3aiPzXd12W634bX3ic3EkohJXLR15q/csM
u8z7VuFVlv5mHsaBT1jE6VM5AxRgSUVvLKcCghVaww4Qs1lF/YigvSnnSn82u8jO
//96N2/b9tHuRSpD50txIJsGoOtva03EaDo=
-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:05 2023 by rpki-client on console-fra.rpki-client.org