Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/db64bf49-37c9-3d44-9b26-caa037a352d9.roa
File: db64bf49-37c9-3d44-9b26-caa037a352d9.roa (raw, json)
Hash identifier: Wsf5fVOQGChtQ7LjiVACVAfraaQxY/PzA5W9JhisLgI=
Subject key identifier: DB:60:0B:90:19:03:68:7F:42:0C:5A:11:90:46:1D:D3:A5:93:23:BB
Certificate issuer: /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial: 010D0C9F43285846FB8ADC560D7BE8D6AC840F40
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/db64bf49-37c9-3d44-9b26-caa037a352d9.roa
Signing time: Sat 24 Aug 2024 13:00:41 +0000
ROA not before: Sat 24 Aug 2024 13:00:41 +0000
ROA not after: Fri 22 Nov 2024 14:00:41 +0000
asID: 23470
IP address blocks: 2602:f988:40::/42 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:fb:8a:dc:56:0d:7b:e8:d6:ac:84:0f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
Validity
Not Before: Aug 24 13:00:41 2024 GMT
Not After : Nov 22 14:00:41 2024 GMT
Subject: CN=45bc678f-c255-491c-aa0e-2b91fa7410b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:41:6c:ee:6c:c8:74:df:bb:81:f0:0f:40:b6:
ee:7e:1d:c0:0a:57:31:2b:c1:4e:7a:df:34:ee:7b:
26:a6:a5:50:3e:e2:50:36:cc:b8:32:49:27:bc:71:
91:93:98:b2:58:a1:c5:45:df:21:65:19:70:c1:88:
c6:dc:d6:c2:01:2c:69:79:01:35:b9:0e:9e:27:7c:
69:ca:53:10:bb:29:be:95:c5:ff:90:2b:2b:2a:af:
d6:b3:a2:f4:a2:e8:bf:fa:16:92:d4:4b:cf:9b:2a:
2c:e6:12:01:88:4d:77:be:01:ad:20:a3:82:cf:7d:
3e:d1:a1:39:f7:d5:25:ab:d5:61:f7:80:a4:4e:26:
8e:5f:e2:2c:6e:38:ff:9c:b7:af:50:43:8e:14:40:
15:96:e0:ca:47:b3:54:a3:b4:e5:45:f2:69:49:e9:
08:6c:6f:1a:21:02:b7:af:0d:0c:64:86:8d:d9:96:
ab:ca:34:e9:91:0c:bd:ab:b8:64:75:c0:ea:c5:5a:
e9:c2:1a:77:d7:0e:6d:0e:93:73:e0:0f:93:6d:ca:
74:df:78:2e:63:d3:ee:b4:10:d5:4b:ed:21:64:f4:
00:c6:05:9a:31:33:39:b1:ba:25:ce:4b:37:8a:b4:
2e:c6:21:cd:99:94:48:42:94:e3:a4:24:e9:49:1b:
98:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:60:0B:90:19:03:68:7F:42:0C:5A:11:90:46:1D:D3:A5:93:23:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/db64bf49-37c9-3d44-9b26-caa037a352d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
X509v3 Authority Key Identifier:
keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f988:40::/42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:72:14:d8:0d:37:39:9d:8b:2d:03:0b:da:52:0f:f0:46:20:
af:81:a6:d5:e6:dd:f5:88:9e:33:25:c8:8f:cc:13:d6:ca:10:
f9:96:40:d7:e2:1b:3d:45:fb:ed:32:ae:c9:e5:a1:2e:e1:9a:
4e:b2:ee:fa:83:88:95:49:8c:4c:d7:07:70:6c:cd:8a:ac:c8:
49:c2:e2:b4:3e:0b:cd:13:dd:61:3e:e1:35:db:0c:4a:1b:3c:
2b:7c:f4:a1:4e:58:60:29:c7:e8:c1:35:16:c9:3f:05:f2:5a:
c9:ff:fc:4b:cf:81:64:08:3a:c3:b8:9e:f5:7a:75:bb:78:ea:
43:dd:ad:11:e1:01:22:a0:7c:29:d7:f4:88:46:83:91:33:aa:
f3:29:05:b8:b2:16:a3:75:45:87:02:93:bc:5e:2f:eb:3d:70:
15:35:5c:5e:dc:dd:49:8d:7d:e6:8a:a2:0a:c7:73:f2:c7:17:
c7:a7:64:d4:d7:3d:cc:67:31:ad:8f:37:06:a9:f8:b6:8e:66:
d3:c5:37:4d:ef:da:2f:a2:ab:20:e7:10:5a:a6:91:1d:a0:24:
76:03:6c:62:3e:04:fe:4e:37:b7:b7:bb:ee:fe:9d:ea:0b:3b:
35:ee:77:65:1a:51:de:63:07:8b:e7:12:b9:38:7d:8c:e6:70:
96:4a:0f:68
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEb7itxWDXvo1qyED0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMThhOTI4ZWItNDhhNS00NTYwLWEyMTctMzZjYjFlYTMy
NjQ4MB4XDTI0MDgyNDEzMDA0MVoXDTI0MTEyMjE0MDA0MVowLzEtMCsGA1UEAxMk
NDViYzY3OGYtYzI1NS00OTFjLWFhMGUtMmI5MWZhNzQxMGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkFs7mzIdN+7gfAPQLbufh3AClcxK8FOet80
7nsmpqVQPuJQNsy4MkknvHGRk5iyWKHFRd8hZRlwwYjG3NbCASxpeQE1uQ6eJ3xp
ylMQuym+lcX/kCsrKq/Ws6L0oui/+haS1EvPmyos5hIBiE13vgGtIKOCz30+0aE5
99Ulq9Vh94CkTiaOX+Isbjj/nLevUEOOFEAVluDKR7NUo7TlRfJpSekIbG8aIQK3
rw0MZIaN2ZaryjTpkQy9q7hkdcDqxVrpwhp31w5tDpNz4A+Tbcp033guY9PutBDV
S+0hZPQAxgWaMTM5sbolzks3irQuxiHNmZRIQpTjpCTpSRuYrwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNtgC5AZA2h/QgxaEZBGHdOlkyO7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xOGE5
MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNiMWVhMzI2NDgvZGI2NGJmNDktMzdjOS0z
ZDQ0LTliMjYtY2FhMDM3YTM1MmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMThhOTI4ZWItNDhhNS00NTYwLWEy
MTctMzZjYjFlYTMyNjQ4LzE4YTkyOGViLTQ4YTUtNDU2MC1hMjE3LTM2Y2IxZWEz
MjY0OC5jcmwwHwYDVR0jBBgwFoAU9H6x3C6P5f0Uj3qixMZGdbQwqzgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xOGE5MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNi
MWVhMzI2NDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL5iABA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEFyFNgNNzmdiy0DC9pSD/BGIK+BptXm3fWInjMlyI/ME9bKEPmW
QNfiGz1F++0yrsnloS7hmk6y7vqDiJVJjEzXB3BszYqsyEnC4rQ+C80T3WE+4TXb
DEobPCt89KFOWGApx+jBNRbJPwXyWsn//EvPgWQIOsO4nvV6dbt46kPdrRHhASKg
fCnX9IhGg5EzqvMpBbiyFqN1RYcCk7xeL+s9cBU1XF7c3UmNfeaKogrHc/LHF8en
ZNTXPcxnMa2PNwap+LaOZtPFN03v2i+iqyDnEFqmkR2gJHYDbGI+BP5ON7e3u+7+
neoLOzXud2UaUd5jB4vnErk4fYzmcJZKD2g=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:10 2025 by rpki-client