Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/ee4cd9a4-e182-39eb-8b90-9d60433d02c7.roa
File: ee4cd9a4-e182-39eb-8b90-9d60433d02c7.roa (raw, json)
Hash identifier: gWX9RdRRP19FciAahiuI/DEppAWjRkZP4l1KX/cf0ZU=
Subject key identifier: FF:68:EF:08:0B:5F:8D:D2:B5:05:42:F6:56:61:FC:1B:00:85:C4:F0
Certificate issuer: /CN=d06d1174-4bf4-465b-9f0b-1091633e6717
Certificate serial: 010D0C9F432858483FD9960C8BD6B3939C1DE080
Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/ee4cd9a4-e182-39eb-8b90-9d60433d02c7.roa
Signing time: Wed 18 Dec 2024 17:01:13 +0000
ROA not before: Wed 18 Dec 2024 17:01:13 +0000
ROA not after: Tue 18 Mar 2025 16:01:13 +0000
asID: 14618
IP address blocks: 2602:fb00:a0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:d9:96:0c:8b:d6:b3:93:9c:1d:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717
Validity
Not Before: Dec 18 17:01:13 2024 GMT
Not After : Mar 18 16:01:13 2025 GMT
Subject: CN=a0d2c44b-2f78-4e6b-8818-ba5793687ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:81:02:d2:ab:1c:b9:b4:c2:c9:24:3b:33:7a:
d9:98:f6:ce:71:f0:14:4b:53:3f:1e:8e:b2:e4:0a:
80:90:0f:d5:e1:e8:37:a9:b7:95:a9:2e:52:a6:ad:
1c:33:00:c7:e1:ba:0a:79:ec:b6:a7:ef:ec:ea:c5:
e9:8d:ee:fe:3e:a8:fb:98:4b:55:b4:41:39:84:d3:
de:27:66:c4:9b:88:9a:aa:f4:9f:70:d1:ae:6a:d7:
0d:7f:b7:f4:61:eb:f7:19:ff:2e:46:cb:70:27:86:
d3:0d:d8:f5:28:ca:8a:e2:21:fb:0d:3a:e4:ad:82:
ec:24:71:0b:7c:80:f1:90:d7:94:68:0a:47:a0:3e:
88:03:9f:f9:e8:bb:73:46:a6:e4:3e:80:f4:83:0a:
5a:26:88:f9:6a:21:eb:eb:02:16:ff:ba:47:16:31:
53:98:95:7f:05:af:7b:6c:d4:a2:da:c9:ff:24:14:
a9:bf:16:37:bf:34:54:45:ab:81:5d:a0:f3:2b:ae:
ad:fb:85:3c:2b:87:0e:10:9f:58:01:5e:a7:11:72:
a9:04:16:4d:14:c6:ee:02:9a:ca:72:d5:62:6c:e6:
34:d9:85:cf:ba:82:05:a4:0a:fb:e4:f8:88:a4:ed:
0d:42:e5:f2:db:d5:99:d0:ec:66:7c:ca:ed:06:05:
e6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:68:EF:08:0B:5F:8D:D2:B5:05:42:F6:56:61:FC:1B:00:85:C4:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/ee4cd9a4-e182-39eb-8b90-9d60433d02c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl
X509v3 Authority Key Identifier:
keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb00:a0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:6c:3d:e5:b7:67:f9:bc:61:3f:02:50:2b:24:52:a1:a1:50:
7e:8e:48:53:33:60:58:f3:5c:14:0c:cd:93:a5:79:11:92:86:
e4:9d:6c:4c:2c:b1:21:40:91:7b:cb:87:09:44:f0:78:5d:9b:
43:b1:86:e4:6c:75:e3:05:37:cf:57:be:ba:8a:3a:3e:5d:e2:
f7:32:3d:ca:7b:96:db:53:60:6d:f1:7a:d3:25:12:b2:67:29:
d3:d9:a0:87:5a:1a:d3:ab:75:98:1c:e9:67:99:d6:f8:c4:0f:
4b:b1:08:8b:c6:cf:59:05:4f:d1:5b:57:7c:67:0c:23:a1:4c:
4f:ff:9c:d4:d1:28:14:71:05:b0:84:c1:b2:08:a7:2c:50:b7:
0f:10:b2:0e:26:fa:0d:be:27:2f:c1:50:8b:84:b7:4e:94:c1:
66:49:00:1f:50:25:13:d0:af:5f:ea:91:07:02:6b:c6:d3:89:
df:fd:db:c4:74:f0:5d:39:d4:fd:1b:73:72:57:bd:49:a8:c4:
ff:43:21:64:b2:e0:3c:4c:0f:3d:63:b0:30:9d:6e:70:73:a9:
6a:e2:2c:c7:6e:87:58:ab:20:10:0f:eb:6d:0d:72:ee:a5:a9:
e0:08:e8:16:3f:78:49:55:6f:6f:52:b5:3e:a4:35:4b:fc:d6:
06:55:0c:a5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg/2ZYMi9azk5wd4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDA2ZDExNzQtNGJmNC00NjViLTlmMGItMTA5MTYzM2U2
NzE3MB4XDTI0MTIxODE3MDExM1oXDTI1MDMxODE2MDExM1owLzEtMCsGA1UEAxMk
YTBkMmM0NGItMmY3OC00ZTZiLTg4MTgtYmE1NzkzNjg3ZWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioEC0qscubTCySQ7M3rZmPbOcfAUS1M/Ho6y
5AqAkA/V4eg3qbeVqS5Spq0cMwDH4boKeey2p+/s6sXpje7+Pqj7mEtVtEE5hNPe
J2bEm4iaqvSfcNGuatcNf7f0Yev3Gf8uRstwJ4bTDdj1KMqK4iH7DTrkrYLsJHEL
fIDxkNeUaApHoD6IA5/56LtzRqbkPoD0gwpaJoj5aiHr6wIW/7pHFjFTmJV/Ba97
bNSi2sn/JBSpvxY3vzRURauBXaDzK66t+4U8K4cOEJ9YAV6nEXKpBBZNFMbuAprK
ctVibOY02YXPuoIFpAr75PiIpO0NQuXy29WZ0OxmfMrtBgXmkQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP9o7wgLX43StQVC9lZh/BsAhcTwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZk
MTE3NC00YmY0LTQ2NWItOWYwYi0xMDkxNjMzZTY3MTcvZWU0Y2Q5YTQtZTE4Mi0z
OWViLThiOTAtOWQ2MDQzM2QwMmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDA2ZDExNzQtNGJmNC00NjViLTlm
MGItMTA5MTYzM2U2NzE3L2QwNmQxMTc0LTRiZjQtNDY1Yi05ZjBiLTEwOTE2MzNl
NjcxNy5jcmwwHwYDVR0jBBgwFoAU9jj3atiqgLwTOxXzDa4QNzLQ0McwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZkMTE3NC00YmY0LTQ2NWItOWYwYi0xMDkx
NjMzZTY3MTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL7AACg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAFsPeW3Z/m8YT8CUCskUqGhUH6OSFMzYFjzXBQMzZOleRGShuSd
bEwssSFAkXvLhwlE8Hhdm0OxhuRsdeMFN89XvrqKOj5d4vcyPcp7lttTYG3xetMl
ErJnKdPZoIdaGtOrdZgc6WeZ1vjED0uxCIvGz1kFT9FbV3xnDCOhTE//nNTRKBRx
BbCEwbIIpyxQtw8Qsg4m+g2+Jy/BUIuEt06UwWZJAB9QJRPQr1/qkQcCa8bTid/9
28R08F051P0bc3JXvUmoxP9DIWSy4DxMDz1jsDCdbnBzqWriLMduh1irIBAP620N
cu6lqeAI6BY/eElVb29StT6kNUv81gZVDKU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:13 2025 by rpki-client