Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f8419d3-9897-3c2d-8aee-d300f4ea4b2e.roa
File: 4f8419d3-9897-3c2d-8aee-d300f4ea4b2e.roa (raw, json)
Hash identifier: sNP9J7cLnoHJAsHNY0GmmBsCAA76Ol3iFpOB6T8CG2Y=
Subject key identifier: 60:79:9E:B8:C4:51:A8:A1:99:A9:CE:64:92:CD:64:F4:13:DC:0E:A5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B885465B3DD9B5E54D2C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f8419d3-9897-3c2d-8aee-d300f4ea4b2e.roa
Signing time: Wed 11 Dec 2024 15:17:56 +0000
ROA not before: Wed 11 Dec 2024 15:17:56 +0000
ROA not after: Tue 11 Mar 2025 14:17:56 +0000
asID: 36617
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:88:54:65:b3:dd:9b:5e:54:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:56 2024 GMT
Not After : Mar 11 14:17:56 2025 GMT
Subject: CN=7068a3b4-0fe9-454d-9a82-369151a8b468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:a4:58:fa:56:83:61:58:02:49:2e:72:74:
6c:ff:77:41:43:f8:f4:3f:64:99:3b:70:d9:26:ec:
8b:89:8e:bd:d9:5d:1c:0d:71:1e:73:ba:e5:16:8a:
35:18:58:6a:fa:22:40:c3:83:dd:a3:eb:b6:4b:09:
17:79:cf:0a:c0:77:48:e0:c0:eb:b6:43:4c:4b:43:
4a:63:1a:ac:11:a2:11:b6:19:db:5e:25:40:93:5f:
ec:11:ac:11:b9:f5:44:58:56:80:d9:60:75:b9:5e:
37:10:fb:7e:70:c6:00:73:aa:5e:37:ae:03:33:56:
8e:2e:99:ca:32:a3:f0:da:ce:3a:c6:19:08:e3:46:
ac:04:62:35:3a:51:ca:35:83:99:e2:46:75:81:98:
da:ba:54:da:99:76:24:4b:1d:1a:c2:8c:03:47:e4:
d3:f0:12:71:d9:80:cf:2a:8e:f0:90:0a:13:d0:d1:
a4:ce:f6:b4:e6:aa:b1:82:b5:6a:44:a0:31:bd:9a:
11:ea:cf:b8:f1:b3:b7:7f:c8:34:4f:9f:8e:57:5f:
a7:d1:d7:44:ef:95:d5:bb:f0:0f:3b:48:3b:26:61:
6a:0a:b4:89:00:74:61:bf:14:91:57:35:cf:f6:94:
23:b2:1d:48:31:47:be:55:9e:1f:55:98:f1:93:35:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:79:9E:B8:C4:51:A8:A1:99:A9:CE:64:92:CD:64:F4:13:DC:0E:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f8419d3-9897-3c2d-8aee-d300f4ea4b2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:63:fb:fb:6b:d1:fa:71:09:30:de:95:d2:ff:4b:44:86:93:
09:00:0a:99:20:47:4e:b8:43:6e:e7:2b:56:d8:43:a6:61:6e:
89:70:05:05:a6:6c:f0:b1:95:d8:45:ea:22:03:fb:e1:f9:ba:
c5:41:05:62:20:4f:cf:84:da:18:06:6c:1a:fe:a8:78:eb:5e:
f8:cf:22:a7:c5:fd:34:fc:a8:1a:56:43:54:75:33:de:01:13:
ec:99:48:28:1f:ab:f6:90:83:51:ef:e2:58:93:4f:a5:6c:aa:
6f:00:a4:c6:ce:b1:8f:d9:2f:53:44:1f:d0:58:bc:70:19:26:
9c:68:c7:6c:43:f5:dd:2d:bb:08:4e:e7:c2:a4:5e:15:1a:75:
68:75:43:88:09:ef:83:27:17:fd:10:f7:c1:df:d0:6d:89:5f:
d1:85:fd:9c:82:c2:76:ed:a1:f6:42:6d:d3:31:5d:32:e1:5e:
1f:8d:a5:68:47:14:10:dd:c5:cd:cc:7c:85:24:63:7c:36:c9:
4c:7a:18:62:93:fe:a2:bd:42:9c:32:aa:75:6e:2e:9f:69:e8:
63:36:86:6a:04:a1:d3:83:87:66:b0:11:1e:76:ab:40:68:b8:
4c:d4:9b:58:57:e4:b7:c8:be:c6:2a:e1:53:d9:09:ec:cf:52:
01:c4:2d:59
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgsG4hUZbPdm15U0sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxMTE1MTc1NloXDTI1MDMxMTE0MTc1NlowLzEtMCsGA1UEAxMk
NzA2OGEzYjQtMGZlOS00NTRkLTlhODItMzY5MTUxYThiNDY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmikWPpWg2FYAkkucnRs/3dBQ/j0P2SZO3DZ
JuyLiY692V0cDXEec7rlFoo1GFhq+iJAw4Pdo+u2SwkXec8KwHdI4MDrtkNMS0NK
YxqsEaIRthnbXiVAk1/sEawRufVEWFaA2WB1uV43EPt+cMYAc6peN64DM1aOLpnK
MqPw2s46xhkI40asBGI1OlHKNYOZ4kZ1gZjaulTamXYkSx0awowDR+TT8BJx2YDP
Ko7wkAoT0NGkzva05qqxgrVqRKAxvZoR6s+48bO3f8g0T5+OV1+n0ddE75XVu/AP
O0g7JmFqCrSJAHRhvxSRVzXP9pQjsh1IMUe+VZ4fVZjxkzUdVwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGB5nrjEUaihmanOZJLNZPQT3A6lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGY4NDE5ZDMtOTg5Ny0z
YzJkLThhZWUtZDMwMGY0ZWE0YjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC1j+/tr0fpxCTDeldL/S0SGkwkACpkgR064Q27nK1bYQ6Zhbolw
BQWmbPCxldhF6iID++H5usVBBWIgT8+E2hgGbBr+qHjrXvjPIqfF/TT8qBpWQ1R1
M94BE+yZSCgfq/aQg1Hv4liTT6Vsqm8ApMbOsY/ZL1NEH9BYvHAZJpxox2xD9d0t
uwhO58KkXhUadWh1Q4gJ74MnF/0Q98Hf0G2JX9GF/ZyCwnbtofZCbdMxXTLhXh+N
pWhHFBDdxc3MfIUkY3w2yUx6GGKT/qK9QpwyqnVuLp9p6GM2hmoEodODh2awER52
q0BouEzUm1hX5LfIvsYq4VPZCezPUgHELVk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:04 2025 by rpki-client