Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/306b4051-4940-3d88-b25a-117604ed6dcc.roa
File: 306b4051-4940-3d88-b25a-117604ed6dcc.roa (raw, json)
Hash identifier: pv9YgjM7IiRu/1e49kP9J1BmLl+fNNH2H8K1g5NDyMc=
Subject key identifier: 38:1D:41:59:22:5E:D7:B5:75:12:04:9D:44:13:9C:04:F1:C4:65:99
Certificate issuer: /CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
Certificate serial: 010D0C9F43285842ACCE844E41B26CA220D12600
Authority key identifier: 3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/306b4051-4940-3d88-b25a-117604ed6dcc.roa
Signing time: Wed 26 Jul 2023 13:00:20 +0000
ROA not before: Wed 26 Jul 2023 13:00:20 +0000
ROA not after: Tue 24 Oct 2023 13:00:20 +0000
asID: 50058
IP address blocks: 2001:4858:aaaf::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ac:ce:84:4e:41:b2:6c:a2:20:d1:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
Validity
Not Before: Jul 26 13:00:20 2023 GMT
Not After : Oct 24 13:00:20 2023 GMT
Subject: CN=43d05ad6-8f5e-4c0f-9705-556353be9a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5a:22:a0:60:28:8e:c0:d9:77:0c:e8:00:ab:
e7:c9:e7:e7:b8:da:2c:64:62:93:86:b4:3f:7b:e1:
a8:2d:3e:52:97:5a:25:a7:b9:23:3b:e2:d2:0c:a4:
eb:0b:31:f8:b5:1d:c3:13:54:0a:12:84:5f:3b:0c:
9c:f5:04:a6:d2:61:4c:e5:cd:9a:70:21:72:68:72:
23:ae:eb:b0:05:56:f6:2d:84:c0:64:60:22:73:74:
2a:f6:9d:72:dc:96:b6:20:fe:ea:ea:00:7f:20:57:
91:f8:0a:45:79:ae:c0:34:50:0e:58:e8:62:96:69:
c4:ba:93:cf:8b:bc:b0:bb:c2:7d:62:96:04:63:21:
ea:ba:86:c9:0e:50:0c:ad:3a:89:7f:84:ea:42:d8:
22:b9:36:25:70:13:54:06:10:16:3f:88:d4:c3:f7:
13:c2:06:39:ef:33:25:23:9d:04:2c:10:c3:a9:cf:
88:74:90:f6:d8:ab:3a:4f:59:cb:a9:ee:8a:4d:26:
49:89:4e:e8:4d:3c:28:87:30:f2:d9:9e:d2:1d:ad:
f1:b4:e3:60:de:e8:5a:01:95:60:f1:66:eb:d2:80:
8d:48:46:c0:f5:9f:60:60:11:bc:e3:54:96:fb:99:
dc:24:26:4a:3e:80:1d:40:38:39:4f:6e:57:76:28:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1D:41:59:22:5E:D7:B5:75:12:04:9D:44:13:9C:04:F1:C4:65:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/306b4051-4940-3d88-b25a-117604ed6dcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl
X509v3 Authority Key Identifier:
keyid:3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4858:aaaf::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:d5:76:d6:02:18:38:cd:b5:a1:97:c9:99:92:17:1b:b8:92:
d8:0c:b1:63:e0:6b:9d:27:38:7a:ee:1d:c5:41:1f:aa:a3:b7:
d4:1a:f2:06:bf:80:8d:fd:8e:d0:50:e6:86:a2:c5:4c:4e:5f:
a2:7c:87:79:e8:e4:73:1d:1b:6a:9c:9c:55:4b:ae:6d:84:86:
82:f6:fd:8a:b8:57:a3:9a:e5:9c:c2:09:cc:d6:a9:46:83:c2:
e7:a0:79:95:c6:86:fe:82:59:c3:48:d6:3d:ec:0f:a2:43:dd:
72:24:dd:27:61:46:43:63:e7:a3:d4:2e:af:c8:f9:8e:20:66:
3c:9d:25:02:e4:1e:36:3f:7c:c8:b3:ca:a9:5c:5d:80:7b:d8:
97:8f:ce:03:c9:d4:9f:b2:e9:40:e3:2c:8e:8a:f9:b1:a9:26:
09:7c:af:4c:63:15:be:42:3d:90:cb:a5:da:41:75:ad:f5:1d:
c8:bf:64:62:81:c9:9c:ce:71:54:3f:92:57:e3:32:00:fd:0d:
29:71:7b:98:2d:27:b4:24:87:ee:dc:8c:99:a8:8c:50:9f:11:
6e:d0:e0:8e:63:6e:dc:34:33:80:fd:7e:4d:02:ec:77:6b:53:
49:04:60:5e:a1:3c:01:3f:08:83:dd:23:0d:e6:03:99:89:14:
1e:2b:17:ed
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEKszoROQbJsoiDRJgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQ5MWI3MmMtYjgzYS00MzFjLTljZmQtNjBiNzk3ZjMx
MTNlMB4XDTIzMDcyNjEzMDAyMFoXDTIzMTAyNDEzMDAyMFowLzEtMCsGA1UEAxMk
NDNkMDVhZDYtOGY1ZS00YzBmLTk3MDUtNTU2MzUzYmU5YTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FoioGAojsDZdwzoAKvnyefnuNosZGKThrQ/
e+GoLT5Sl1olp7kjO+LSDKTrCzH4tR3DE1QKEoRfOwyc9QSm0mFM5c2acCFyaHIj
ruuwBVb2LYTAZGAic3Qq9p1y3Ja2IP7q6gB/IFeR+ApFea7ANFAOWOhilmnEupPP
i7ywu8J9YpYEYyHquobJDlAMrTqJf4TqQtgiuTYlcBNUBhAWP4jUw/cTwgY57zMl
I50ELBDDqc+IdJD22Ks6T1nLqe6KTSZJiU7oTTwohzDy2Z7SHa3xtONg3uhaAZVg
8Wbr0oCNSEbA9Z9gYBG841SW+5ncJCZKPoAdQDg5T25XdihSMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDgdQVkiXte1dRIEnUQTnATxxGWZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZDkx
YjcyYy1iODNhLTQzMWMtOWNmZC02MGI3OTdmMzExM2UvMzA2YjQwNTEtNDk0MC0z
ZDg4LWIyNWEtMTE3NjA0ZWQ2ZGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWQ5MWI3MmMtYjgzYS00MzFjLTlj
ZmQtNjBiNzk3ZjMxMTNlLzlkOTFiNzJjLWI4M2EtNDMxYy05Y2ZkLTYwYjc5N2Yz
MTEzZS5jcmwwHwYDVR0jBBgwFoAUPjNm+hrAnQiv1exytdf7JMy2qUkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZDkxYjcyYy1iODNhLTQzMWMtOWNmZC02MGI3
OTdmMzExM2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIWKqv
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEvVdtYCGDjNtaGXyZmSFxu4ktgMsWPga50nOHruHcVBH6qjt9Qa
8ga/gI39jtBQ5oaixUxOX6J8h3no5HMdG2qcnFVLrm2EhoL2/Yq4V6Oa5ZzCCczW
qUaDwuegeZXGhv6CWcNI1j3sD6JD3XIk3SdhRkNj56PULq/I+Y4gZjydJQLkHjY/
fMizyqlcXYB72JePzgPJ1J+y6UDjLI6K+bGpJgl8r0xjFb5CPZDLpdpBda31Hci/
ZGKByZzOcVQ/klfjMgD9DSlxe5gtJ7Qkh+7cjJmojFCfEW7Q4I5jbtw0M4D9fk0C
7HdrU0kEYF6hPAE/CIPdIw3mA5mJFB4rF+0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:08:15 2024 by rpki-client on console-fra.rpki-client.org