Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/5968bbcf-0550-3f1b-b449-ad98299803f4.roa
File: 5968bbcf-0550-3f1b-b449-ad98299803f4.roa (raw, json)
Hash identifier: VnB+wwwe4WnbkNkUE0DH91n4gV68JfAdaelO0L3RWEs=
Subject key identifier: 81:85:A1:FB:CF:6B:78:62:72:2B:B4:A2:02:66:14:29:C1:48:F9:77
Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a
Certificate serial: 010D0C9F432858454CB4A1CEDC3D2D002494E940
Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/5968bbcf-0550-3f1b-b449-ad98299803f4.roa
Signing time: Sat 23 Mar 2024 05:11:28 +0000
ROA not before: Sat 23 Mar 2024 05:11:28 +0000
ROA not after: Fri 21 Jun 2024 05:11:28 +0000
asID: 400745
IP address blocks: 2620:59:2000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:4c:b4:a1:ce:dc:3d:2d:00:24:94:e9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a
Validity
Not Before: Mar 23 05:11:28 2024 GMT
Not After : Jun 21 05:11:28 2024 GMT
Subject: CN=fc58ab5a-9da6-4599-aa6a-fd19c51d147c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:93:a2:42:96:2c:45:9b:55:2a:da:fb:0f:
1c:fb:fb:7c:09:27:7f:f4:1b:f4:50:45:04:95:b4:
30:f6:ae:1f:0f:dc:cd:29:5a:f6:f7:ab:4b:d8:0e:
6d:82:85:a8:2b:a0:29:e2:4f:e3:26:c5:83:9e:2c:
54:a0:5e:22:33:ea:57:c1:58:32:45:68:a1:31:a8:
1b:a0:21:f8:9e:e9:d0:dd:3c:ce:28:c1:3a:82:31:
11:7a:d3:08:95:e4:cb:af:52:d4:57:28:88:4a:31:
14:78:b0:ff:cc:6c:71:6a:3f:fc:24:43:e4:8c:07:
f0:f6:e9:4d:e0:b7:7c:b1:cb:e9:42:4d:7d:fb:17:
d9:5f:20:dd:1c:1a:7c:fc:da:7b:e8:d4:72:99:84:
27:2e:b7:3b:14:7f:da:42:92:7b:38:77:1e:35:a9:
6b:b0:d9:ca:87:6f:7a:14:76:e8:8d:a7:03:5f:a5:
ae:45:01:57:b1:37:76:4a:de:71:67:54:8f:00:d1:
66:2a:cd:39:89:1a:d1:ef:53:f9:9d:6e:74:3b:0b:
ca:e3:ab:6a:bf:4e:b3:50:0e:a0:be:46:e5:b3:43:
f6:c6:e3:54:41:64:05:55:46:ab:dc:e6:b2:d7:37:
01:b0:56:5c:7f:7a:89:c8:9f:ae:8a:32:e6:fb:be:
3b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:85:A1:FB:CF:6B:78:62:72:2B:B4:A2:02:66:14:29:C1:48:F9:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/5968bbcf-0550-3f1b-b449-ad98299803f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl
X509v3 Authority Key Identifier:
keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:59:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:39:4b:c1:7c:51:dd:df:b2:1b:34:c8:1d:29:8e:1e:7f:14:
38:4a:7a:c0:bc:39:34:8a:f8:e3:6f:50:5c:8c:54:5c:64:1e:
d2:fc:49:ef:c9:b5:bd:94:92:ba:de:dd:b3:fb:9b:d6:fe:c5:
1c:7d:f4:d7:f4:b4:22:ab:54:46:fe:69:3b:8d:fb:4f:8a:ee:
3d:bb:60:16:e9:3f:77:85:17:1f:4e:62:6f:65:db:b4:43:11:
e4:d6:7b:5c:13:a7:0a:e9:b8:6d:f2:7e:8c:7e:54:03:84:f7:
b5:94:00:b3:21:6e:0c:4f:b7:d7:22:2f:e7:62:23:15:ea:ad:
0d:32:a8:1c:eb:da:01:0f:20:16:4b:9d:4f:de:83:5c:2f:e6:
17:e1:6a:79:e8:32:d2:a0:04:97:af:a2:ca:17:68:7d:92:ed:
b4:e2:b6:b7:05:ce:13:e4:d0:b1:14:ed:b5:a3:ed:04:ab:63:
28:9b:73:b9:8a:6f:0e:74:4a:89:17:0b:75:f2:92:3c:b7:7a:
81:43:a4:36:b2:25:0b:19:d0:55:46:ac:2e:69:2e:d6:e3:88:
84:34:93:d4:39:96:36:78:85:e0:fb:92:ea:59:2d:b5:52:11:
9b:40:7b:6a:b5:cb:4b:4c:26:a4:13:a2:f1:1e:9d:2a:ce:66:
44:6d:74:58
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVMtKHO3D0tACSU6UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2
MDlhMB4XDTI0MDMyMzA1MTEyOFoXDTI0MDYyMTA1MTEyOFowLzEtMCsGA1UEAxMk
ZmM1OGFiNWEtOWRhNi00NTk5LWFhNmEtZmQxOWM1MWQxNDdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeSTokKWLEWbVSra+w8c+/t8CSd/9Bv0UEUE
lbQw9q4fD9zNKVr296tL2A5tgoWoK6Ap4k/jJsWDnixUoF4iM+pXwVgyRWihMagb
oCH4nunQ3TzOKME6gjERetMIleTLr1LUVyiISjEUeLD/zGxxaj/8JEPkjAfw9ulN
4Ld8scvpQk19+xfZXyDdHBp8/Np76NRymYQnLrc7FH/aQpJ7OHceNalrsNnKh296
FHbojacDX6WuRQFXsTd2St5xZ1SPANFmKs05iRrR71P5nW50OwvK46tqv06zUA6g
vkbls0P2xuNUQWQFVUar3Oay1zcBsFZcf3qJyJ+uijLm+747jQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIGFofvPa3hiciu0ogJmFCnBSPl3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4
NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvNTk2OGJiY2YtMDU1MC0z
ZjFiLWI0NDktYWQ5ODI5OTgwM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx
OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl
NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2
OWMxZTYwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAWSAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFs5S8F8Ud3fshs0yB0pjh5/FDhKesC8OTSK+ONvUFyMVFxkHtL8
Se/Jtb2Ukrre3bP7m9b+xRx99Nf0tCKrVEb+aTuN+0+K7j27YBbpP3eFFx9OYm9l
27RDEeTWe1wTpwrpuG3yfox+VAOE97WUALMhbgxPt9ciL+diIxXqrQ0yqBzr2gEP
IBZLnU/eg1wv5hfhannoMtKgBJevosoXaH2S7bTitrcFzhPk0LEU7bWj7QSrYyib
c7mKbw50SokXC3Xykjy3eoFDpDayJQsZ0FVGrC5pLtbjiIQ0k9Q5ljZ4heD7kupZ
LbVSEZtAe2q1y0tMJqQTovEenSrOZkRtdFg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:27 2025 by rpki-client