Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/17f5c286-98c9-3358-b950-5342f621d6a6.roa
File: 17f5c286-98c9-3358-b950-5342f621d6a6.roa (raw, json)
Hash identifier: VpEzzBWgQeD7Jbs2RNzNlwoOuWrEmUeqTfsUXjmaJPM=
Subject key identifier: 6A:21:3F:56:EA:EA:CF:FC:9E:6B:4C:01:BD:40:C0:E2:96:19:0D:60
Certificate issuer: /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial: 010D0C9F432858437EE1F3C39375B0CF8B256900
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/17f5c286-98c9-3358-b950-5342f621d6a6.roa
Signing time: Mon 09 Oct 2023 18:59:19 +0000
ROA not before: Mon 09 Oct 2023 18:59:19 +0000
ROA not after: Sun 07 Jan 2024 19:59:19 +0000
asID: 400
IP address blocks: 2602:fa2e:a97:401::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:7e:e1:f3:c3:93:75:b0:cf:8b:25:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
Validity
Not Before: Oct 9 18:59:19 2023 GMT
Not After : Jan 7 19:59:19 2024 GMT
Subject: CN=89e85d5b-64b6-4ab3-a5d2-9e91b9c8d1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bc:a9:6f:60:a4:50:55:ed:95:af:49:b6:0a:
c1:35:8e:66:00:23:68:47:ed:d7:70:6b:24:f4:ff:
22:88:ba:c5:a8:c7:2f:69:7e:ba:9e:2c:88:3c:f7:
05:79:04:6d:90:0b:09:7b:9d:7c:5e:ab:01:8a:20:
75:ce:23:22:5d:83:46:da:44:fb:ca:27:2e:d5:81:
60:00:27:ae:df:ac:63:97:66:03:52:48:ed:cb:5e:
06:8c:84:a9:4a:ee:54:7a:58:b7:1d:5c:07:05:a7:
4e:55:57:c9:1d:4b:be:29:e7:0f:46:b7:83:56:eb:
87:a3:43:b6:7c:42:88:fa:3f:19:49:29:77:69:7d:
54:59:fc:f7:a6:60:4e:45:ac:06:03:2c:37:26:55:
5e:18:91:49:68:25:51:7b:7c:87:42:dc:09:8f:f1:
c1:8e:c7:43:52:91:d1:b2:df:8b:a0:2c:93:b8:e0:
55:40:21:d0:15:01:f7:00:57:59:66:fb:1d:66:79:
56:13:82:7f:70:1d:ea:54:e4:66:ca:3f:67:b0:2a:
45:46:bb:8d:cf:0b:19:bd:d0:cc:d3:1f:c6:bb:99:
b9:3a:40:38:a7:4f:86:4b:4c:bf:74:95:fa:e5:c8:
f1:f1:c2:c7:34:13:c3:2b:8f:6d:1f:74:61:ee:03:
86:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:21:3F:56:EA:EA:CF:FC:9E:6B:4C:01:BD:40:C0:E2:96:19:0D:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/17f5c286-98c9-3358-b950-5342f621d6a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl
X509v3 Authority Key Identifier:
keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa2e:a97:401::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:d0:e0:2c:e9:3a:ea:78:7c:ad:ea:38:a0:7a:4e:11:3d:81:
69:af:d6:7b:a5:4a:7a:ab:9f:6a:15:c8:ee:5a:18:af:80:3c:
06:9d:1d:4c:2a:78:2e:d9:34:d1:21:58:f2:4b:97:69:5a:c5:
83:7b:fc:35:fb:1e:ee:85:8f:54:45:e0:dd:fc:5e:e4:4f:fc:
cb:1e:a1:48:af:9f:54:6b:c3:3e:5b:19:f5:3b:69:72:5e:99:
43:8e:73:26:f1:ea:67:51:ce:f0:e1:d2:6d:d5:db:ba:08:c6:
a6:11:8e:b1:34:48:4f:a3:00:59:aa:d7:27:a2:bd:fd:c4:b1:
f3:85:b4:e0:b0:56:f1:c2:74:9d:93:9d:12:51:4f:39:05:7f:
50:7f:d6:d0:18:d8:10:96:83:55:75:0e:3a:74:8d:37:05:1a:
f4:19:63:70:59:40:ff:81:2b:9a:24:2c:f7:ad:6d:da:69:a8:
cd:10:7f:61:28:54:24:7c:d3:28:21:d0:0c:42:ee:eb:5c:94:
67:34:ee:cc:1f:d6:00:60:bb:a1:bb:a5:08:d4:42:fa:a6:3d:
b3:84:fe:d7:0b:46:96:cf:a8:71:22:c8:ae:85:8c:d8:5f:25:
be:41:e5:0c:14:81:e0:24:bd:35:f5:5b:72:60:d4:42:18:c6:
b5:7d:ac:ac
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEN+4fPDk3Wwz4slaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWY5ODMyMDctODA3My00MmFmLTg4ZWUtZGY0OTAyYzhh
ZGFmMB4XDTIzMTAwOTE4NTkxOVoXDTI0MDEwNzE5NTkxOVowLzEtMCsGA1UEAxMk
ODllODVkNWItNjRiNi00YWIzLWE1ZDItOWU5MWI5YzhkMWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bypb2CkUFXtla9JtgrBNY5mACNoR+3XcGsk
9P8iiLrFqMcvaX66niyIPPcFeQRtkAsJe518XqsBiiB1ziMiXYNG2kT7yicu1YFg
ACeu36xjl2YDUkjty14GjISpSu5Ueli3HVwHBadOVVfJHUu+KecPRreDVuuHo0O2
fEKI+j8ZSSl3aX1UWfz3pmBORawGAyw3JlVeGJFJaCVRe3yHQtwJj/HBjsdDUpHR
st+LoCyTuOBVQCHQFQH3AFdZZvsdZnlWE4J/cB3qVORmyj9nsCpFRruNzwsZvdDM
0x/Gu5m5OkA4p0+GS0y/dJX65cjx8cLHNBPDK49tH3Rh7gOGrwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFGohP1bq6s/8nmtMAb1AwOKWGQ1gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85Zjk4
MzIwNy04MDczLTQyYWYtODhlZS1kZjQ5MDJjOGFkYWYvMTdmNWMyODYtOThjOS0z
MzU4LWI5NTAtNTM0MmY2MjFkNmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWY5ODMyMDctODA3My00MmFmLTg4
ZWUtZGY0OTAyYzhhZGFmLzlmOTgzMjA3LTgwNzMtNDJhZi04OGVlLWRmNDkwMmM4
YWRhZi5jcmwwHwYDVR0jBBgwFoAUwyy5+3oif0oFHkqZqPtujWhZyqEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85Zjk4MzIwNy04MDczLTQyYWYtODhlZS1kZjQ5
MDJjOGFkYWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL6LgqX
BAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAl9DgLOk66nh8reo4oHpOET2Baa/We6VKequfahXI7loYr4A8
Bp0dTCp4Ltk00SFY8kuXaVrFg3v8Nfse7oWPVEXg3fxe5E/8yx6hSK+fVGvDPlsZ
9Ttpcl6ZQ45zJvHqZ1HO8OHSbdXbugjGphGOsTRIT6MAWarXJ6K9/cSx84W04LBW
8cJ0nZOdElFPOQV/UH/W0BjYEJaDVXUOOnSNNwUa9BljcFlA/4ErmiQs961t2mmo
zRB/YShUJHzTKCHQDELu61yUZzTuzB/WAGC7obulCNRC+qY9s4T+1wtGls+ocSLI
roWM2F8lvkHlDBSB4CS9NfVbcmDUQhjGtX2srA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:14 2024 by rpki-client on console-fra.rpki-client.org