Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3365d41-e2a5-30b1-ae21-cbdfa6fcecf0.roa
File: f3365d41-e2a5-30b1-ae21-cbdfa6fcecf0.roa (raw, json)
Hash identifier: lcD3a44p6hODGP+oiRSACzkF93BJcwrTz9xfj6kwNYQ=
Subject key identifier: 24:21:2B:29:EF:19:80:F2:DA:A4:8E:EE:A5:13:08:5D:F3:AE:A8:10
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285842C498452D0793132DD8A59BC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3365d41-e2a5-30b1-ae21-cbdfa6fcecf0.roa
Signing time: Wed 02 Aug 2023 12:00:00 +0000
ROA not before: Wed 02 Aug 2023 12:00:00 +0000
ROA not after: Sat 03 Feb 2024 05:00:00 +0000
asID: 28757
IP address blocks: 2001:470:163::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c4:98:45:2d:07:93:13:2d:d8:a5:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 2 12:00:00 2023 GMT
Not After : Feb 3 05:00:00 2024 GMT
Subject: CN=c31bf6d7-d1d9-4526-9e78-bd43096f8358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:34:5e:8b:3e:03:4e:69:04:54:fe:88:bb:
f1:52:8b:1b:d0:8c:73:55:e5:06:76:8d:cf:0f:f2:
a7:be:12:15:d3:db:c2:45:3e:f3:5e:12:8c:a3:ff:
ee:fb:42:cb:5b:7c:4c:b7:49:bf:60:cd:5d:4a:79:
30:d2:e1:e4:7f:81:c6:a0:18:6a:2e:f9:5d:7e:e0:
79:62:20:2a:76:74:59:66:29:cd:54:b2:b8:b7:8f:
5c:4d:81:96:fd:f5:cc:88:41:e9:78:59:39:5c:ea:
65:36:b3:13:4d:6a:a4:55:6a:16:40:a6:71:97:cb:
a8:4d:43:35:4c:76:2c:f1:89:b1:c2:93:06:62:ab:
2a:f8:91:72:c3:09:84:23:ad:73:0f:f2:a2:11:2e:
88:2b:f1:35:54:d4:1f:52:a7:82:e4:fe:9f:40:23:
9e:bc:4b:87:17:c8:8f:4b:d9:1e:b5:53:17:14:77:
6a:f4:2b:3c:57:c6:02:5f:15:e5:7b:dd:0a:3e:66:
7f:c3:aa:ed:5c:29:64:46:a7:f9:d7:75:6e:98:f8:
a7:ac:46:17:d3:61:50:c0:85:96:0f:35:0b:99:80:
35:a9:80:5f:aa:11:f3:e8:61:c9:bf:19:96:ec:0e:
53:5a:98:b4:f0:27:25:4c:59:fe:24:5f:09:82:00:
d7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:21:2B:29:EF:19:80:F2:DA:A4:8E:EE:A5:13:08:5D:F3:AE:A8:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3365d41-e2a5-30b1-ae21-cbdfa6fcecf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:163::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:71:4d:3e:55:a6:37:a9:62:a5:21:10:99:50:04:71:9c:35:
3f:cb:eb:9e:11:83:51:ab:81:2f:e0:8c:d1:32:c7:3d:84:35:
a9:26:84:bc:db:5e:87:de:97:dc:18:9c:0a:2f:39:11:8f:b3:
a8:c8:29:04:dd:d9:d1:6d:7f:32:c7:ec:77:97:e8:90:7f:0d:
56:b0:b9:29:7f:76:95:80:2f:93:01:2a:29:65:f6:27:93:73:
d9:65:94:21:6d:d3:67:35:c3:5d:c8:17:a6:78:3c:14:5e:1c:
5a:a3:6e:80:6d:c0:d7:fb:68:2f:a0:71:f5:37:ce:10:c8:eb:
02:dd:78:6b:5a:f8:9d:9c:39:6e:68:14:4e:dd:4a:06:d9:65:
30:47:3b:cf:98:b1:e6:43:9c:00:02:95:35:17:36:c1:c9:0f:
ce:4f:0d:7b:02:d6:18:a1:d0:23:da:e2:f9:fe:38:e5:d8:38:
e1:f0:80:a6:a1:7f:3c:be:a4:ef:bc:c1:ad:cd:cd:88:be:c7:
28:9f:21:c6:2b:9c:24:3c:df:63:8d:77:0a:07:57:58:c5:8e:
57:13:e5:c5:7b:69:3e:44:ca:40:aa:cb:78:32:dc:a2:97:4a:
54:14:58:9f:af:1c:2f:6e:5e:c1:bb:59:b4:b5:41:db:c9:8e:
c8:8a:e5:0f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWELEmEUtB5MTLdilm8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDgwMjEyMDAwMFoXDTI0MDIwMzA1MDAwMFowLzEtMCsGA1UEAxMk
YzMxYmY2ZDctZDFkOS00NTI2LTllNzgtYmQ0MzA5NmY4MzU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCg0Xos+A05pBFT+iLvxUosb0IxzVeUGdo3P
D/KnvhIV09vCRT7zXhKMo//u+0LLW3xMt0m/YM1dSnkw0uHkf4HGoBhqLvldfuB5
YiAqdnRZZinNVLK4t49cTYGW/fXMiEHpeFk5XOplNrMTTWqkVWoWQKZxl8uoTUM1
THYs8YmxwpMGYqsq+JFywwmEI61zD/KiES6IK/E1VNQfUqeC5P6fQCOevEuHF8iP
S9ketVMXFHdq9Cs8V8YCXxXle90KPmZ/w6rtXClkRqf513VumPinrEYX02FQwIWW
DzULmYA1qYBfqhHz6GHJvxmW7A5TWpi08CclTFn+JF8JggDX+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCQhKynvGYDy2qSO7qUTCF3zrqgQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjMzNjVkNDEtZTJhNS0z
MGIxLWFlMjEtY2JkZmE2ZmNlY2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACxxTT5VpjepYqUhEJlQBHGcNT/L654Rg1GrgS/gjNEyxz2ENakm
hLzbXofel9wYnAovORGPs6jIKQTd2dFtfzLH7HeX6JB/DVawuSl/dpWAL5MBKill
9ieTc9lllCFt02c1w13IF6Z4PBReHFqjboBtwNf7aC+gcfU3zhDI6wLdeGta+J2c
OW5oFE7dSgbZZTBHO8+YseZDnAAClTUXNsHJD85PDXsC1hih0CPa4vn+OOXYOOHw
gKahfzy+pO+8wa3NzYi+xyifIcYrnCQ832ONdwoHV1jFjlcT5cV7aT5EykCqy3gy
3KKXSlQUWJ+vHC9uXsG7WbS1QdvJjsiK5Q8=
-----END CERTIFICATE-----
Generated at Sat Feb 3 06:05:05 2024 by rpki-client on console-fra.rpki-client.org