Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/081e08bc-ee67-3195-a74a-5001581cbc24.roa
File: 081e08bc-ee67-3195-a74a-5001581cbc24.roa (raw, json)
Hash identifier: 2xYdNK6Hc/esqXbJ1WpzRCpO7GszxgDuWeMuBMGLjeQ=
Subject key identifier: 8E:B4:CF:A5:E6:FD:AC:94:86:37:C5:65:77:44:98:AB:51:D7:A6:BF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73FF0DF3929FE1FDDDEC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/081e08bc-ee67-3195-a74a-5001581cbc24.roa
Signing time: Fri 29 Nov 2024 13:58:41 +0000
ROA not before: Fri 29 Nov 2024 13:58:41 +0000
ROA not after: Thu 27 Feb 2025 13:58:41 +0000
asID: 397204
IP address blocks: 2620:0:5050::30/128 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:ff:0d:f3:92:9f:e1:fd:dd:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:41 2024 GMT
Not After : Feb 27 13:58:41 2025 GMT
Subject: CN=d117fd05-bbd2-4713-9cce-ebb40c88b306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:ec:a0:b7:2d:79:84:18:60:50:ad:4e:ba:
06:d6:8c:1c:69:74:f7:ae:e7:2c:4e:38:c1:0f:b0:
8e:6c:b2:b8:a7:70:9d:db:60:bb:fb:52:dc:93:99:
4b:de:42:63:3c:ad:d0:d0:a3:2b:a7:b0:e3:4d:2e:
a4:9d:0d:f4:c0:51:34:86:ad:07:2f:eb:95:41:a1:
87:66:7b:6b:fe:17:27:55:83:8f:6d:92:2d:d3:15:
04:02:58:23:33:45:d0:34:67:d0:0b:eb:a0:d5:96:
3b:a9:f7:b6:ce:1d:00:45:d1:85:95:98:1e:9c:ee:
d4:10:75:02:42:d5:aa:db:aa:6c:aa:11:ff:ce:12:
d5:3b:0b:3f:ce:f9:f8:dc:fe:0a:ca:11:0d:40:f8:
f7:a1:6e:9e:aa:bf:f6:17:fc:ab:f1:a0:ac:7c:e2:
71:95:e3:5a:c8:c0:5a:6c:31:ab:95:31:9d:86:ee:
ff:a7:e5:e4:67:7c:70:0c:a2:ca:1f:2b:eb:f9:cc:
65:f8:2d:2b:51:1e:98:d0:26:dc:80:ba:17:93:d6:
5d:85:f6:dd:de:44:bd:c9:3a:7b:d9:88:66:11:3c:
ef:45:e6:eb:01:61:0c:84:b4:fb:c8:10:23:b0:e0:
2d:c9:53:96:36:30:79:1b:a0:13:82:07:6c:38:0e:
71:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B4:CF:A5:E6:FD:AC:94:86:37:C5:65:77:44:98:AB:51:D7:A6:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/081e08bc-ee67-3195-a74a-5001581cbc24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:fa:83:3a:53:e9:e0:d7:fb:1a:69:dc:9d:60:ab:15:e6:36:
a1:a2:b3:c9:eb:4e:92:67:54:32:f6:3f:b4:16:9e:5a:a2:38:
cd:b7:bf:54:96:a8:60:34:75:30:4d:17:58:a5:23:5d:64:a6:
68:43:9b:d7:03:b5:a8:4d:64:93:7a:d4:6c:7d:25:45:b0:a9:
f1:49:36:21:4b:a8:64:fd:9c:74:f6:86:7c:8a:00:04:e7:f7:
34:f1:f1:db:2e:9a:ae:ed:70:f0:3c:4c:73:56:a7:12:54:af:
2b:e2:69:ff:dd:3e:28:8e:15:93:f1:86:28:8d:3a:6e:01:5b:
f7:5c:25:ce:e2:46:35:cf:d1:d4:34:05:39:22:61:43:a5:18:
28:7a:81:b0:6e:8f:30:9f:8a:54:de:84:94:02:43:6e:2b:a3:
0a:a7:59:f0:25:99:c4:b6:54:64:65:19:41:5c:18:be:97:aa:
73:27:a9:16:c2:ed:42:f6:b6:57:d7:f7:16:d6:4f:a4:63:8f:
af:e8:c5:9c:2e:38:4c:86:e0:dd:26:60:24:01:6a:95:46:3c:
80:80:e7:21:3e:f4:6c:f2:b7:d0:f7:e2:7b:f1:38:5b:1a:32:
db:a1:8f:15:d0:10:ad:b6:a2:37:12:a7:b7:61:d6:b0:bf:27:
3d:ba:e9:51
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEgKc/8N85Kf4f3d7IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEyOTEzNTg0MVoXDTI1MDIyNzEzNTg0MVowLzEtMCsGA1UEAxMk
ZDExN2ZkMDUtYmJkMi00NzEzLTljY2UtZWJiNDBjODhiMzA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaLsoLcteYQYYFCtTroG1owcaXT3rucsTjjB
D7CObLK4p3Cd22C7+1Lck5lL3kJjPK3Q0KMrp7DjTS6knQ30wFE0hq0HL+uVQaGH
Zntr/hcnVYOPbZIt0xUEAlgjM0XQNGfQC+ug1ZY7qfe2zh0ARdGFlZgenO7UEHUC
QtWq26psqhH/zhLVOws/zvn43P4KyhENQPj3oW6eqr/2F/yr8aCsfOJxleNayMBa
bDGrlTGdhu7/p+XkZ3xwDKLKHyvr+cxl+C0rUR6Y0CbcgLoXk9Zdhfbd3kS9yTp7
2YhmETzvRebrAWEMhLT7yBAjsOAtyVOWNjB5G6ATggdsOA5xwQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFI60z6Xm/ayUhjfFZXdEmKtR16a/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDgxZTA4YmMtZWU2Ny0z
MTk1LWE3NGEtNTAwMTU4MWNiYzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA2+oM6U+ng1/saadydYKsV5jahorPJ606SZ1Qy
9j+0Fp5aojjNt79UlqhgNHUwTRdYpSNdZKZoQ5vXA7WoTWSTetRsfSVFsKnxSTYh
S6hk/Zx09oZ8igAE5/c08fHbLpqu7XDwPExzVqcSVK8r4mn/3T4ojhWT8YYojTpu
AVv3XCXO4kY1z9HUNAU5ImFDpRgoeoGwbo8wn4pU3oSUAkNuK6MKp1nwJZnEtlRk
ZRlBXBi+l6pzJ6kWwu1C9rZX1/cW1k+kY4+v6MWcLjhMhuDdJmAkAWqVRjyAgOch
PvRs8rfQ9+J78ThbGjLboY8V0BCttqI3Eqe3Ydawvyc9uulR
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:35 2025 by rpki-client