Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/f7b81120-0772-3558-8042-18bcb12c9f46.roa
File: f7b81120-0772-3558-8042-18bcb12c9f46.roa (raw, json)
Hash identifier: ElW1zVNpt2ecJ9B6mKZIX32TYEyEwLD838IMne/TMCA=
Subject key identifier: 3F:33:82:CA:97:5B:2B:07:5E:F5:9A:BF:E6:1A:57:07:1D:07:1D:D6
Certificate issuer: /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial: 010D0C9F4328584823953DE9CF7C0B1B8CEBAD80
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/f7b81120-0772-3558-8042-18bcb12c9f46.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 30058
IP address blocks: 2602:fb1b:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:3d:e9:cf:7c:0b:1b:8c:eb:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=3ecb996d-8525-4d7a-883a-d747b6f6b98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fc:88:94:b2:b6:c6:a5:58:4b:3b:2e:cc:8d:
20:73:f7:44:6c:a7:b4:a6:b5:5c:44:b4:60:bf:d2:
95:f3:79:67:39:f9:42:81:b9:c6:c4:f2:0d:55:1a:
88:d5:7c:28:61:8b:2a:cf:42:bc:e3:eb:57:22:fc:
12:17:63:27:68:b7:d2:52:40:b8:aa:ec:57:53:b8:
7d:33:01:98:56:63:ea:2d:c5:de:7e:7d:8a:63:01:
b3:f3:57:8b:a7:42:ee:70:06:a1:69:a7:3e:96:18:
4c:e5:b0:5c:ea:59:a6:f1:76:ae:21:ac:8d:47:bc:
4a:27:ce:a7:b0:a0:a9:cf:4f:69:4f:a6:19:69:39:
e8:6f:29:76:8c:50:c5:80:39:c5:60:5e:0a:35:b6:
a1:cc:a1:41:51:01:cc:42:8c:71:22:04:06:59:cb:
a9:a5:82:8e:0b:3f:2f:db:dc:7f:c7:c2:ec:5a:c4:
b3:cd:ea:af:6d:9e:70:66:ff:fd:20:d5:69:e4:89:
ef:31:e6:05:75:27:cd:24:66:1e:72:bd:76:d4:f1:
2b:af:b4:67:42:25:43:f8:a1:00:55:07:08:e8:14:
f7:39:84:b6:84:dc:e1:01:d8:d3:7b:c1:fd:c1:17:
80:23:f0:7b:2f:3f:49:9f:aa:45:31:f7:c7:2f:83:
c3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:33:82:CA:97:5B:2B:07:5E:F5:9A:BF:E6:1A:57:07:1D:07:1D:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/f7b81120-0772-3558-8042-18bcb12c9f46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
X509v3 Authority Key Identifier:
keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb1b:4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:5d:d5:cd:23:f2:39:f9:9a:e7:63:e8:b2:17:73:e8:f5:5d:
5d:c0:83:1c:a0:49:f2:4c:9c:ac:9d:39:31:3c:1d:d9:37:e6:
bc:ce:b1:d0:24:ac:ef:e6:49:bb:ad:b3:e9:12:00:1d:f3:ec:
34:1a:5d:76:5d:b4:1a:d8:22:de:82:fc:c8:68:f4:66:84:7b:
6b:8b:17:cc:be:29:86:20:6f:f8:ae:be:c8:ba:4e:28:38:46:
f4:6e:c8:c9:76:18:af:75:91:f7:4b:2e:fe:61:f3:2d:e9:20:
1b:4f:82:62:7d:2f:78:39:b4:48:be:39:a1:a6:2e:31:ef:2c:
88:17:f4:c0:b8:f2:93:a3:09:2f:d6:ae:85:7c:e4:c3:43:a9:
58:b6:93:17:13:da:d2:ee:0d:f0:c1:35:8e:fc:df:b2:f3:eb:
65:13:2b:03:d5:b0:cc:16:0c:30:a7:dd:09:c8:45:5e:f8:73:
33:42:73:c7:62:1f:99:1d:7f:05:43:24:46:e3:e1:cf:ba:cf:
7c:a6:a2:5c:d8:5c:cb:6e:fc:9d:5a:15:55:49:41:61:25:68:
00:a4:bb:cb:36:12:cf:e3:83:aa:b2:c9:c8:f2:ee:28:3a:ce:
25:e1:0c:d7:98:12:9c:d5:06:17:5e:dc:a3:4c:c4:86:a4:8c:
00:d0:1a:9c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgjlT3pz3wLG4zrrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODExYmQyYWMtYzUzZC00MGE2LWJmYTQtMjc1YzIyNDFh
ZjYzMB4XDTI0MTIwODE0MDA1MVoXDTI1MDMwODE0MDA1MVowLzEtMCsGA1UEAxMk
M2VjYjk5NmQtODUyNS00ZDdhLTg4M2EtZDc0N2I2ZjZiOThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PyIlLK2xqVYSzsuzI0gc/dEbKe0prVcRLRg
v9KV83lnOflCgbnGxPINVRqI1XwoYYsqz0K84+tXIvwSF2MnaLfSUkC4quxXU7h9
MwGYVmPqLcXefn2KYwGz81eLp0LucAahaac+lhhM5bBc6lmm8XauIayNR7xKJ86n
sKCpz09pT6YZaTnobyl2jFDFgDnFYF4KNbahzKFBUQHMQoxxIgQGWcuppYKOCz8v
29x/x8LsWsSzzeqvbZ5wZv/9INVp5InvMeYFdSfNJGYecr121PErr7RnQiVD+KEA
VQcI6BT3OYS2hNzhAdjTe8H9wReAI/B7Lz9Jn6pFMffHL4PDfwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD8zgsqXWysHXvWav+YaVwcdBx3WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFi
ZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVjMjI0MWFmNjMvZjdiODExMjAtMDc3Mi0z
NTU4LTgwNDItMThiY2IxMmM5ZjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODExYmQyYWMtYzUzZC00MGE2LWJm
YTQtMjc1YzIyNDFhZjYzLzgxMWJkMmFjLWM1M2QtNDBhNi1iZmE0LTI3NWMyMjQx
YWY2My5jcmwwHwYDVR0jBBgwFoAUL6VyaMN3iHmP21Xe0bvHxqiGXYcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFiZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVj
MjI0MWFmNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7GwAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGdd1c0j8jn5mudj6LIXc+j1XV3AgxygSfJMnKydOTE8Hdk35rzO
sdAkrO/mSbuts+kSAB3z7DQaXXZdtBrYIt6C/Mho9GaEe2uLF8y+KYYgb/iuvsi6
Tig4RvRuyMl2GK91kfdLLv5h8y3pIBtPgmJ9L3g5tEi+OaGmLjHvLIgX9MC48pOj
CS/WroV85MNDqVi2kxcT2tLuDfDBNY7837Lz62UTKwPVsMwWDDCn3QnIRV74czNC
c8diH5kdfwVDJEbj4c+6z3ymolzYXMtu/J1aFVVJQWElaACku8s2Es/jg6qyycjy
7ig6ziXhDNeYEpzVBhde3KNMxIakjADQGpw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:25 2025 by rpki-client