Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/04887106-82f0-3842-adbe-631ff9dbb008.roa
File: 04887106-82f0-3842-adbe-631ff9dbb008.roa (raw, json)
Hash identifier: GPbhT4i6ALnsHqvKs8tBJ52Y4kR36phFaZ0026F8O5g=
Subject key identifier: B6:9B:48:ED:E7:1B:93:73:4F:A3:BB:AA:B4:3F:52:08:B8:5A:91:78
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858445DA455B678323A62D6148CC0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/04887106-82f0-3842-adbe-631ff9dbb008.roa
Signing time: Thu 28 Dec 2023 14:00:20 +0000
ROA not before: Thu 28 Dec 2023 14:00:20 +0000
ROA not after: Wed 27 Mar 2024 13:00:20 +0000
asID: 11232
IP address blocks: 2604:7a00::/28 maxlen: 28
2605:4a80::/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:5d:a4:55:b6:78:32:3a:62:d6:14:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Dec 28 14:00:20 2023 GMT
Not After : Mar 27 13:00:20 2024 GMT
Subject: CN=f818428b-0daa-4a2e-ba7a-fac26f67acfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:42:36:5a:7c:41:2a:6c:16:79:f4:a1:49:de:
c7:19:ff:90:2a:50:94:74:c9:86:f6:46:52:ec:d3:
ab:7a:e3:bc:f0:2f:0c:2d:c6:80:36:19:15:2d:fd:
7d:c0:34:48:02:1e:f0:b4:35:8e:ee:8b:87:9f:f5:
78:dc:a1:8b:70:c7:9a:9d:dc:7d:34:e0:21:bb:d3:
93:c0:97:f4:bd:e6:1d:22:5a:c4:1a:e5:f2:f6:78:
72:8d:46:cf:1f:b9:f7:d6:85:cd:cb:93:af:a9:02:
6a:ea:4d:fe:01:86:5f:19:91:07:69:56:86:58:48:
06:31:73:77:49:dd:f6:45:67:01:32:aa:fa:2c:2d:
c9:60:ed:fd:40:a6:1b:84:3d:fd:c2:25:d0:ab:ce:
75:a1:88:e6:9b:71:c3:d4:5b:23:b7:2b:71:49:9a:
4f:43:78:84:b5:12:c8:cb:71:e9:4b:ce:f0:a5:c4:
6a:ba:f5:3c:5f:1b:08:36:2c:cd:ca:32:b2:cc:77:
63:be:31:61:91:f0:66:fd:13:c2:bf:72:89:30:b9:
d9:17:b1:94:aa:8f:c6:64:ba:51:c0:cc:67:c9:6a:
5a:ef:37:1a:5b:99:19:7f:e1:83:01:2b:c5:9f:f6:
18:b4:3a:fa:22:bd:9c:12:ff:99:74:ae:ac:33:36:
66:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9B:48:ED:E7:1B:93:73:4F:A3:BB:AA:B4:3F:52:08:B8:5A:91:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/04887106-82f0-3842-adbe-631ff9dbb008.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:7a00::/28
2605:4a80::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:d8:85:c0:e6:b1:76:70:e8:51:c7:16:ac:8b:a4:5c:9e:b7:
07:c6:58:c7:b7:f2:93:60:7f:84:2d:f7:f9:f3:e5:35:79:f0:
04:8a:81:fa:a4:7f:63:d8:4d:b2:df:4d:ea:69:ef:bf:d1:c8:
ab:f1:6b:56:15:ad:32:78:1e:3e:d0:a2:98:a3:7b:f5:f6:c0:
97:28:40:d6:cd:77:c6:6e:4f:1a:07:77:8d:af:ab:6d:a3:cc:
d1:a7:22:b3:3e:f4:f1:4d:94:7e:67:de:fa:98:5a:49:c1:ca:
9d:43:bc:79:27:7e:1a:ae:b6:d1:c4:0d:a6:82:01:b4:ed:0c:
b9:17:84:a2:6a:ef:62:f4:7c:12:5a:32:f4:03:35:34:8c:60:
8a:99:37:19:11:19:d1:49:1d:77:45:db:c2:6f:93:28:b3:e9:
cc:e0:01:90:59:1d:ac:e1:de:67:ec:89:6a:49:b5:09:13:ef:
67:67:3e:b8:27:3d:b4:dc:1b:92:6a:c4:a4:11:a7:c9:fb:83:
9a:2a:ba:0d:40:84:25:0e:17:96:21:6b:b1:ad:ba:90:d1:b0:
cd:09:56:27:c6:f7:5e:b3:e2:2f:b1:c6:e3:9f:2f:98:d9:4d:
28:b5:d0:8a:77:07:41:8f:d8:63:8c:b2:52:78:73:e9:98:f2:
40:06:48:95
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWERdpFW2eDI6YtYUjMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTIzMTIyODE0MDAyMFoXDTI0MDMyNzEzMDAyMFowLzEtMCsGA1UEAxMk
ZjgxODQyOGItMGRhYS00YTJlLWJhN2EtZmFjMjZmNjdhY2ZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0I2WnxBKmwWefShSd7HGf+QKlCUdMmG9kZS
7NOreuO88C8MLcaANhkVLf19wDRIAh7wtDWO7ouHn/V43KGLcMeandx9NOAhu9OT
wJf0veYdIlrEGuXy9nhyjUbPH7n31oXNy5OvqQJq6k3+AYZfGZEHaVaGWEgGMXN3
Sd32RWcBMqr6LC3JYO39QKYbhD39wiXQq851oYjmm3HD1FsjtytxSZpPQ3iEtRLI
y3HpS87wpcRquvU8XxsINizNyjKyzHdjvjFhkfBm/RPCv3KJMLnZF7GUqo/GZLpR
wMxnyWpa7zcaW5kZf+GDASvFn/YYtDr6Ir2cEv+ZdK6sMzZm5QIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFLabSO3nG5NzT6O7qrQ/Ugi4WpF4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMDQ4ODcxMDYtODJmMC0z
ODQyLWFkYmUtNjMxZmY5ZGJiMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUEJgR6AAMF
BCYFSoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAO9iFwOaxdnDoUccWrIukXJ63B8ZYx7fyk2B/hC33+fPl
NXnwBIqB+qR/Y9hNst9N6mnvv9HIq/FrVhWtMngePtCimKN79fbAlyhA1s13xm5P
Ggd3ja+rbaPM0acisz708U2Ufmfe+phaScHKnUO8eSd+Gq620cQNpoIBtO0MuReE
omrvYvR8Eloy9AM1NIxgipk3GREZ0Ukdd0Xbwm+TKLPpzOABkFkdrOHeZ+yJakm1
CRPvZ2c+uCc9tNwbkmrEpBGnyfuDmiq6DUCEJQ4XliFrsa26kNGwzQlWJ8b3XrPi
L7HG458vmNlNKLXQincHQY/YY4yyUnhz6ZjyQAZIlQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:49 2024 by rpki-client on console-ams.rpki-client.org