Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/bd0f0fe6-06cf-36a4-bb4f-6302b411b50e.roa
File: bd0f0fe6-06cf-36a4-bb4f-6302b411b50e.roa (raw, json)
Hash identifier: G6kWYgVcYLksrz8+cOMXR16cAuqT4LKfQHrx+Tm4Bwk=
Subject key identifier: AE:3F:FC:2F:C8:33:2E:CD:0D:67:AE:0E:BA:05:E0:91:59:B0:39:00
Certificate issuer: /CN=2cf622f9-718a-4280-a116-72e2088c51e3
Certificate serial: 010D0C9F43285842E6BD187018C9B25B03949EA0
Authority key identifier: 30:62:DA:58:A9:F0:B9:FB:EC:8F:6F:CC:83:49:98:CF:E3:B4:0C:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/bd0f0fe6-06cf-36a4-bb4f-6302b411b50e.roa
Signing time: Wed 16 Aug 2023 07:02:11 +0000
ROA not before: Wed 16 Aug 2023 07:02:11 +0000
ROA not after: Tue 14 Nov 2023 08:02:11 +0000
asID: 394490
IP address blocks: 2620:dd:c000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:e6:bd:18:70:18:c9:b2:5b:03:94:9e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf622f9-718a-4280-a116-72e2088c51e3
Validity
Not Before: Aug 16 07:02:11 2023 GMT
Not After : Nov 14 08:02:11 2023 GMT
Subject: CN=745a9ab0-f86c-4b97-bec9-33e8c2b4bdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e1:b5:2b:61:e5:92:8c:2a:80:5e:a5:28:d4:
8d:35:59:ee:eb:02:1f:29:9a:22:4e:45:7a:c3:5d:
46:4c:66:56:0c:cf:97:59:3a:3d:cf:78:f2:ca:28:
a6:93:01:36:a0:f2:61:ad:e3:35:49:d5:05:b6:b3:
f2:1d:48:02:69:da:0e:c4:8f:5e:e8:8d:42:6c:cb:
90:f9:6f:04:07:3a:d9:28:85:3e:c2:98:11:fb:9e:
28:75:21:fb:81:cc:92:13:0a:04:9a:ee:df:df:97:
98:df:51:e5:74:89:46:8c:6d:58:76:45:42:7e:c2:
7b:f1:55:0b:e3:92:e3:a5:e0:62:66:30:11:06:c9:
e0:24:9c:c4:9f:26:49:70:1d:a9:94:29:d3:44:e3:
cc:7b:be:1c:2b:23:ff:a4:1b:e3:1b:25:bc:a5:fa:
ec:0a:9a:76:bb:f4:ff:e0:f9:1e:11:f2:12:56:a0:
b8:bc:0c:04:c3:90:2a:df:9c:c2:91:6d:de:4d:29:
3d:d9:a0:00:0f:48:e5:ff:0e:71:ae:26:17:16:f5:
b4:80:c3:53:45:9b:3a:c8:cb:3d:62:96:a2:c7:0e:
1a:42:d8:be:d1:44:a2:da:2f:28:0c:89:a0:4d:fe:
11:97:62:cb:8a:91:f0:a9:44:47:6c:e7:fa:91:e6:
31:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3F:FC:2F:C8:33:2E:CD:0D:67:AE:0E:BA:05:E0:91:59:B0:39:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/bd0f0fe6-06cf-36a4-bb4f-6302b411b50e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.crl
X509v3 Authority Key Identifier:
keyid:30:62:DA:58:A9:F0:B9:FB:EC:8F:6F:CC:83:49:98:CF:E3:B4:0C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:dd:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:25:66:51:49:d9:f4:11:83:f9:4b:be:2f:a1:c6:13:dd:88:
19:ae:3c:8f:60:2a:89:1b:24:52:59:54:64:eb:d6:7e:12:11:
b5:52:13:63:59:a4:71:7b:ae:4e:00:bb:08:09:40:d0:7b:bb:
be:cc:75:ad:ad:ad:bc:8d:64:fd:33:c9:23:e5:d0:f0:dd:5f:
b8:ae:9c:cf:8a:c9:28:97:c5:ef:59:46:77:28:55:d6:00:4c:
8d:30:bb:4d:7d:b5:28:96:86:ea:bc:b5:db:0f:b8:02:fb:83:
7c:a1:76:6c:6e:10:cc:43:b2:0e:b8:ad:cb:64:6b:b9:3d:a3:
b2:34:ce:53:4d:3a:33:82:9e:4d:d5:fc:41:31:55:d9:07:0c:
0f:37:6a:1d:1f:f2:47:44:42:38:d1:c7:b6:30:96:25:a4:4f:
30:50:5e:85:1c:b1:d4:6b:f8:3a:ef:17:8d:17:e5:b6:e9:5d:
44:12:4e:70:b7:1b:5f:33:02:f0:39:aa:32:08:b3:88:bb:a7:
83:c7:88:64:17:0a:a9:dd:52:f7:44:94:ab:23:7c:22:3d:5c:
d0:a8:be:1e:1d:db:bb:d5:b3:f0:f0:7e:66:6e:16:09:d5:ab:
a2:a4:5f:0a:0d:ce:25:fd:49:35:ab:b8:be:10:18:64:bf:96:
e2:16:77:f7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWELmvRhwGMmyWwOUnqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmNmNjIyZjktNzE4YS00MjgwLWExMTYtNzJlMjA4OGM1
MWUzMB4XDTIzMDgxNjA3MDIxMVoXDTIzMTExNDA4MDIxMVowLzEtMCsGA1UEAxMk
NzQ1YTlhYjAtZjg2Yy00Yjk3LWJlYzktMzNlOGMyYjRiZGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuG1K2HlkowqgF6lKNSNNVnu6wIfKZoiTkV6
w11GTGZWDM+XWTo9z3jyyiimkwE2oPJhreM1SdUFtrPyHUgCadoOxI9e6I1CbMuQ
+W8EBzrZKIU+wpgR+54odSH7gcySEwoEmu7f35eY31HldIlGjG1YdkVCfsJ78VUL
45LjpeBiZjARBsngJJzEnyZJcB2plCnTROPMe74cKyP/pBvjGyW8pfrsCpp2u/T/
4PkeEfISVqC4vAwEw5Aq35zCkW3eTSk92aAAD0jl/w5xriYXFvW0gMNTRZs6yMs9
Ypaixw4aQti+0USi2i8oDImgTf4Rl2LLipHwqURHbOf6keYxIQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK4//C/IMy7NDWeuDroF4JFZsDkAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yY2Y2
MjJmOS03MThhLTQyODAtYTExNi03MmUyMDg4YzUxZTMvYmQwZjBmZTYtMDZjZi0z
NmE0LWJiNGYtNjMwMmI0MTFiNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmNmNjIyZjktNzE4YS00MjgwLWEx
MTYtNzJlMjA4OGM1MWUzLzJjZjYyMmY5LTcxOGEtNDI4MC1hMTE2LTcyZTIwODhj
NTFlMy5jcmwwHwYDVR0jBBgwFoAUMGLaWKnwufvsj2/Mg0mYz+O0DGowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yY2Y2MjJmOS03MThhLTQyODAtYTExNi03MmUy
MDg4YzUxZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA3cAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADYlZlFJ2fQRg/lLvi+hxhPdiBmuPI9gKokbJFJZVGTr1n4SEbVS
E2NZpHF7rk4AuwgJQNB7u77Mda2trbyNZP0zySPl0PDdX7iunM+KySiXxe9ZRnco
VdYATI0wu019tSiWhuq8tdsPuAL7g3yhdmxuEMxDsg64rctka7k9o7I0zlNNOjOC
nk3V/EExVdkHDA83ah0f8kdEQjjRx7YwliWkTzBQXoUcsdRr+DrvF40X5bbpXUQS
TnC3G18zAvA5qjIIs4i7p4PHiGQXCqndUvdElKsjfCI9XNCovh4d27vVs/DwfmZu
FgnVq6KkXwoNziX9STWruL4QGGS/luIWd/c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:55 2024 by rpki-client on console-ams.rpki-client.org