Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/d72ef2c5-1cbf-3773-bbe7-b088b33c3b0a.roa
File: d72ef2c5-1cbf-3773-bbe7-b088b33c3b0a.roa (raw, json)
Hash identifier: SKlhHcwqlnrfXPRzvlzoDQGBL0krAK3NsjRqTzP5MQg=
Subject key identifier: 23:53:AC:9A:6E:68:9A:13:94:1E:5B:59:83:91:EE:C7:53:C6:D8:10
Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial: 010D0C9F432858442F25A138C0F1A7DF1D9859E0
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/d72ef2c5-1cbf-3773-bbe7-b088b33c3b0a.roa
Signing time: Mon 11 Dec 2023 22:17:57 +0000
ROA not before: Mon 11 Dec 2023 22:17:57 +0000
ROA not after: Sun 10 Mar 2024 21:17:57 +0000
asID: 26967
IP address blocks: 2620:125:b00f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:2f:25:a1:38:c0:f1:a7:df:1d:98:59:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Validity
Not Before: Dec 11 22:17:57 2023 GMT
Not After : Mar 10 21:17:57 2024 GMT
Subject: CN=a8e004b2-1d2f-44aa-ba67-bcb12cac0896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:40:74:12:e1:5e:07:3d:56:a9:24:b1:2d:
19:d2:04:a7:3f:05:f1:64:e2:a3:25:e2:81:08:87:
38:0b:35:b9:98:1a:e9:52:67:58:c9:a0:69:08:66:
ff:cb:16:a3:eb:a3:d3:68:ac:f4:7f:33:c5:9d:2c:
6a:39:db:8c:d7:12:a9:ee:57:6e:eb:ab:c3:28:0b:
86:ac:87:64:f7:fa:48:5b:59:14:8b:68:ed:0b:57:
1a:7d:9f:46:1e:0c:cc:d1:81:22:5e:de:75:c6:bf:
86:10:71:30:fc:8a:03:fb:84:7d:9e:d4:5f:0e:7a:
e0:2e:d5:01:ff:e2:7c:72:6e:7d:e7:61:c9:42:67:
59:c2:8e:15:ad:cb:b8:a5:aa:85:24:2b:47:5b:ad:
cb:60:c4:a6:8c:4b:22:70:a8:94:38:e2:19:6a:58:
5c:19:06:48:0e:18:b4:c8:43:3a:17:1e:58:41:83:
af:16:ca:b7:f0:64:df:0b:2e:2b:95:72:69:e2:a7:
b3:58:c1:d0:e0:ce:ab:41:48:dc:d4:bc:37:8a:1c:
75:c1:89:bc:b6:90:6f:cd:ff:7a:70:95:56:b6:dd:
da:c2:97:5a:31:1b:8a:bf:ec:58:87:7f:cd:ca:6a:
3f:74:e4:ce:4e:48:62:2e:bd:96:39:bc:65:0a:f3:
7e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:53:AC:9A:6E:68:9A:13:94:1E:5B:59:83:91:EE:C7:53:C6:D8:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/d72ef2c5-1cbf-3773-bbe7-b088b33c3b0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
X509v3 Authority Key Identifier:
keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:125:b00f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:9a:54:64:88:ba:f8:14:ce:58:99:e6:b8:f8:43:86:8e:9f:
a4:d5:1b:bb:ca:8d:ad:22:7f:99:db:a8:aa:04:29:77:94:2b:
7c:5d:8b:b7:47:90:99:3c:55:88:b0:c7:01:11:0a:46:fd:92:
e9:7e:a9:89:19:05:c8:ed:bb:df:a8:a7:a9:89:08:00:52:3b:
e6:f2:3f:76:d8:da:a8:2d:60:e4:75:34:16:b3:62:b5:4b:b0:
c3:a6:e8:c7:58:34:af:34:93:5f:87:bb:ba:1a:e7:7d:27:1b:
ca:85:c4:cb:d3:cd:26:e1:e1:1b:26:ec:b6:b7:24:4b:b0:15:
26:a0:4e:96:98:0b:db:b6:c2:ee:b5:6f:30:3a:1d:35:d0:78:
87:b3:29:04:06:bf:c5:f8:7c:22:3a:e0:d2:8c:f4:f0:cf:bb:
22:8a:fc:41:65:c7:fb:5d:ce:ea:e6:2d:f0:a6:92:e9:7c:b0:
1d:76:58:db:ea:68:51:24:02:3a:70:dd:07:f3:9a:56:0e:02:
8f:de:65:90:20:a0:d9:05:2b:8a:64:68:36:bf:d5:73:87:e1:
cf:4e:18:1b:6d:34:c6:79:d6:d8:30:3c:61:8c:52:3a:bf:85:
16:06:b1:06:e1:a5:14:67:bb:03:46:b8:b4:f1:5c:2a:c1:08:
3f:c6:5b:89
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEQvJaE4wPGn3x2YWeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2
ZTAwMB4XDTIzMTIxMTIyMTc1N1oXDTI0MDMxMDIxMTc1N1owLzEtMCsGA1UEAxMk
YThlMDA0YjItMWQyZi00NGFhLWJhNjctYmNiMTJjYWMwODk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TRAdBLhXgc9VqkksS0Z0gSnPwXxZOKjJeKB
CIc4CzW5mBrpUmdYyaBpCGb/yxaj66PTaKz0fzPFnSxqOduM1xKp7ldu66vDKAuG
rIdk9/pIW1kUi2jtC1cafZ9GHgzM0YEiXt51xr+GEHEw/IoD+4R9ntRfDnrgLtUB
/+J8cm5952HJQmdZwo4Vrcu4paqFJCtHW63LYMSmjEsicKiUOOIZalhcGQZIDhi0
yEM6Fx5YQYOvFsq38GTfCy4rlXJp4qezWMHQ4M6rQUjc1Lw3ihx1wYm8tpBvzf96
cJVWtt3awpdaMRuKv+xYh3/Nymo/dOTOTkhiLr2WObxlCvN+lwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCNTrJpuaJoTlB5bWYOR7sdTxtgQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx
YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvZDcyZWYyYzUtMWNiZi0z
NzczLWJiZTctYjA4OGIzM2MzYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx
NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj
NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh
MTk3YzZlMDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABJbAP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACuaVGSIuvgUzliZ5rj4Q4aOn6TVG7vKja0if5nbqKoEKXeUK3xd
i7dHkJk8VYiwxwERCkb9kul+qYkZBcjtu9+op6mJCABSO+byP3bY2qgtYOR1NBaz
YrVLsMOm6MdYNK80k1+Hu7oa530nG8qFxMvTzSbh4Rsm7La3JEuwFSagTpaYC9u2
wu61bzA6HTXQeIezKQQGv8X4fCI64NKM9PDPuyKK/EFlx/tdzurmLfCmkul8sB12
WNvqaFEkAjpw3QfzmlYOAo/eZZAgoNkFK4pkaDa/1XOH4c9OGBttNMZ51tgwPGGM
Ujq/hRYGsQbhpRRnuwNGuLTxXCrBCD/GW4k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:43 2024 by rpki-client on console-ams.rpki-client.org