Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5289eebe-db62-368d-bf72-d40de00fba52.roa
File: 5289eebe-db62-368d-bf72-d40de00fba52.roa (raw, json)
Hash identifier: A6If0Ts4yggHw7gFp/eZhK/HhjQaKTTPQ/aKjU5UHLk=
Subject key identifier: B1:23:75:61:4B:66:2C:56:B7:CC:F0:34:50:52:62:92:0E:48:CA:F5
Certificate issuer: /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Certificate serial: 010D0C9F43285847E21E2D4466E1D6BD0DD01B80
Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5289eebe-db62-368d-bf72-d40de00fba52.roa
Signing time: Fri 15 Nov 2024 03:13:26 +0000
ROA not before: Fri 15 Nov 2024 03:13:26 +0000
ROA not after: Thu 13 Feb 2025 03:13:26 +0000
asID: 399624
IP address blocks: 2602:f7a7::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e2:1e:2d:44:66:e1:d6:bd:0d:d0:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Validity
Not Before: Nov 15 03:13:26 2024 GMT
Not After : Feb 13 03:13:26 2025 GMT
Subject: CN=304bff65-b7b0-4b1d-82e7-b56890b59c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:69:34:b8:d4:7b:ce:fb:fa:fa:e2:c5:a9:22:
ab:36:63:7b:7c:9d:26:fc:10:93:5b:81:b8:48:28:
d7:31:f5:4a:b9:a7:7c:ee:eb:c8:8a:b2:66:ef:71:
3e:33:52:e0:85:06:2c:50:9f:34:dc:bb:e3:6e:d7:
87:90:40:c5:40:fb:cb:84:97:82:bb:e3:93:fa:b8:
be:a2:6d:3d:38:19:6c:d5:b0:f1:50:30:26:6d:e2:
a1:b7:27:3b:71:40:a8:18:df:20:4c:a9:d6:c1:51:
c9:c2:35:cf:39:e6:8d:99:5b:75:7d:05:42:f6:e3:
6b:e2:92:89:8f:f7:08:45:de:23:23:2b:31:fa:3e:
db:58:be:68:12:00:34:1a:02:e6:f6:8f:24:18:8c:
64:2b:53:30:78:7b:54:74:50:41:46:44:99:27:05:
df:c5:02:a8:4a:dd:00:dc:c7:49:07:a7:7c:77:5e:
10:df:a1:86:d6:2a:51:03:3b:3e:5b:e8:32:91:73:
52:0a:c8:b4:a0:39:30:2e:12:54:2b:31:78:00:60:
be:cc:58:09:eb:65:da:1d:15:e6:76:dc:fa:0e:ab:
05:3d:ae:76:58:8c:d9:75:e1:73:58:43:f0:9e:2e:
62:cf:78:e6:6e:90:b6:3d:8f:f6:47:68:38:22:bf:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:23:75:61:4B:66:2C:56:B7:CC:F0:34:50:52:62:92:0E:48:CA:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5289eebe-db62-368d-bf72-d40de00fba52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl
X509v3 Authority Key Identifier:
keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f7a7::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:ae:5f:09:24:cf:9c:b4:17:ea:2a:21:a1:3d:11:f9:55:3e:
07:90:51:d8:19:9f:83:85:1e:93:ed:d5:6c:10:fa:53:80:c9:
d7:cf:3e:b9:60:89:0a:91:6b:00:5c:ae:5c:c0:16:f0:f7:e9:
30:8b:d7:36:50:01:76:65:da:dd:3e:2b:69:5b:9f:a5:ce:f2:
f0:94:7d:0e:97:eb:ad:03:10:8f:26:2e:38:8a:bf:4f:46:6f:
f6:32:0a:21:11:07:2d:1f:0b:3d:8b:50:df:1e:31:50:8b:53:
c8:2c:fa:1b:c9:61:97:ae:aa:9f:56:68:57:3b:f5:6d:0b:76:
fc:c5:fc:2b:32:2f:60:8b:64:b4:84:63:3c:45:4a:95:ec:b8:
39:31:77:3e:fd:38:0d:91:92:6f:ee:43:44:49:dc:b2:4f:27:
2f:a7:92:0e:22:ce:79:4e:85:66:9b:26:00:66:6d:ba:cf:df:
71:62:ed:3a:7e:a6:c1:41:92:77:9d:3e:08:b9:38:27:d6:aa:
f6:d2:3f:bd:5f:c2:c7:bf:34:18:31:94:e9:96:f4:3e:37:50:
26:e4:dd:4d:f4:c1:57:10:ec:cd:1f:a2:59:47:4b:a2:17:73:
e7:d0:01:43:c4:0b:4c:cd:aa:d7:a4:bd:e1:25:ad:23:98:d4:
99:3c:ae:c4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfiHi1EZuHWvQ3QG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWUyMmM1OWUtMjkwNC00ZWE2LWIwNDQtMGE5ZmFjMzk0
NmNjMB4XDTI0MTExNTAzMTMyNloXDTI1MDIxMzAzMTMyNlowLzEtMCsGA1UEAxMk
MzA0YmZmNjUtYjdiMC00YjFkLTgyZTctYjU2ODkwYjU5YzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWk0uNR7zvv6+uLFqSKrNmN7fJ0m/BCTW4G4
SCjXMfVKuad87uvIirJm73E+M1LghQYsUJ803LvjbteHkEDFQPvLhJeCu+OT+ri+
om09OBls1bDxUDAmbeKhtyc7cUCoGN8gTKnWwVHJwjXPOeaNmVt1fQVC9uNr4pKJ
j/cIRd4jIysx+j7bWL5oEgA0GgLm9o8kGIxkK1MweHtUdFBBRkSZJwXfxQKoSt0A
3MdJB6d8d14Q36GG1ipRAzs+W+gykXNSCsi0oDkwLhJUKzF4AGC+zFgJ62XaHRXm
dtz6DqsFPa52WIzZdeFzWEPwni5iz3jmbpC2PY/2R2g4Ir9QmQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLEjdWFLZixWt8zwNFBSYpIOSMr1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIy
YzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlmYWMzOTQ2Y2MvNTI4OWVlYmUtZGI2Mi0z
NjhkLWJmNzItZDQwZGUwMGZiYTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWUyMmM1OWUtMjkwNC00ZWE2LWIw
NDQtMGE5ZmFjMzk0NmNjLzVlMjJjNTllLTI5MDQtNGVhNi1iMDQ0LTBhOWZhYzM5
NDZjYy5jcmwwHwYDVR0jBBgwFoAUVAq19A7rP/3q8yJu5kT27+vMkGkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIyYzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlm
YWMzOTQ2Y2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3pwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAM65fCSTPnLQX6iohoT0R+VU+B5BR2Bmfg4Uek+3VbBD6U4DJ188+
uWCJCpFrAFyuXMAW8PfpMIvXNlABdmXa3T4raVufpc7y8JR9DpfrrQMQjyYuOIq/
T0Zv9jIKIREHLR8LPYtQ3x4xUItTyCz6G8lhl66qn1ZoVzv1bQt2/MX8KzIvYItk
tIRjPEVKley4OTF3Pv04DZGSb+5DREncsk8nL6eSDiLOeU6FZpsmAGZtus/fcWLt
On6mwUGSd50+CLk4J9aq9tI/vV/Cx780GDGU6Zb0PjdQJuTdTfTBVxDszR+iWUdL
ohdz59ABQ8QLTM2q16S94SWtI5jUmTyuxA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:24:22 2025 by rpki-client