Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/58c557dd-b24c-3113-89fe-9f1f9f3ed616.roa
File: 58c557dd-b24c-3113-89fe-9f1f9f3ed616.roa (raw, json)
Hash identifier: ltopOviRCVja2sa0Hgge2XLkYeuso2wSs0pWhMmpS60=
Subject key identifier: 24:43:64:D6:B2:49:F0:47:7F:F8:9F:2D:65:FD:5F:DC:86:6C:49:8A
Certificate issuer: /CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836
Certificate serial: 010D0C9F43285847A48ECB1F2E88BD8056E9CE00
Authority key identifier: 6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/58c557dd-b24c-3113-89fe-9f1f9f3ed616.roa
Signing time: Thu 24 Oct 2024 02:00:14 +0000
ROA not before: Thu 24 Oct 2024 02:00:14 +0000
ROA not after: Wed 22 Jan 2025 03:00:14 +0000
asID: 394177
IP address blocks: 2602:f7d1::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:a4:8e:cb:1f:2e:88:bd:80:56:e9:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836
Validity
Not Before: Oct 24 02:00:14 2024 GMT
Not After : Jan 22 03:00:14 2025 GMT
Subject: CN=ef813cf9-16cb-45de-a8e4-ea4d869d6778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:19:d6:0a:a2:36:16:d2:cb:f5:ce:7a:ff:f0:
56:1a:e5:c3:7f:d3:08:78:b3:15:7f:23:6a:04:f9:
c4:84:30:76:f6:dc:55:c5:2c:e7:46:42:2d:02:85:
ab:b0:ab:f8:8f:9a:93:6c:88:90:61:09:6e:4e:ff:
8b:d1:38:59:80:6c:b0:c9:3c:9b:28:1d:24:58:a8:
fe:95:2c:22:6c:98:bb:46:32:54:92:2a:86:29:ef:
d6:4a:79:f2:fd:e6:92:f0:c3:ab:b2:1d:96:5b:bb:
ed:6f:e5:33:a5:a4:ef:07:f1:38:23:79:03:9a:55:
5a:ae:09:cf:1b:b1:25:3d:aa:63:99:f4:79:61:ff:
cc:a5:2d:d2:a2:93:eb:20:69:f4:be:e2:60:5f:60:
2d:c9:db:76:35:0c:dc:7a:77:05:69:71:51:98:33:
89:33:54:78:91:6b:db:a5:07:ee:a6:c4:be:71:60:
e4:3e:ca:aa:8c:be:37:6e:17:9f:6e:42:3a:7d:f8:
a2:ef:82:db:40:6c:ed:0f:af:dd:68:39:39:69:17:
2b:e5:3b:73:da:6c:0b:b6:ab:a3:cf:ef:e8:a5:66:
a3:0f:a5:4a:c5:3f:08:ef:99:6a:d1:ba:3f:dd:bc:
d2:45:46:6a:c5:1d:99:3d:dd:e3:13:80:3d:5f:65:
8d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:43:64:D6:B2:49:F0:47:7F:F8:9F:2D:65:FD:5F:DC:86:6C:49:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/58c557dd-b24c-3113-89fe-9f1f9f3ed616.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.crl
X509v3 Authority Key Identifier:
keyid:6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f7d1::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:d6:75:f5:3b:8b:43:86:53:a7:47:df:a3:ca:4d:2c:ce:00:
5d:fd:a9:f1:8a:9b:b4:e7:46:e5:82:3f:a0:d9:ed:47:58:32:
89:31:34:c7:c7:64:14:9e:c9:84:7c:f8:a2:fd:e9:b0:fd:97:
dc:62:14:f8:73:14:03:95:f3:70:b1:4b:d0:78:18:e1:14:78:
6b:31:49:ad:0d:30:89:9b:e6:d6:fb:3a:ba:0f:71:90:88:e1:
fb:11:6c:8a:9b:52:cc:b6:10:2f:7b:ed:65:21:6d:3a:08:a6:
ce:8b:08:4c:7a:ea:79:92:81:83:52:f2:30:2b:4c:78:63:ea:
fa:dd:29:f0:89:ea:b3:e5:9e:85:4c:c4:9e:28:16:af:79:1a:
72:7a:26:1d:74:48:3b:79:67:0d:86:6e:65:2b:4c:3f:19:e0:
a5:b7:1e:0d:d7:ae:b1:16:d3:59:75:87:8b:1f:4b:07:a5:26:
f3:b0:93:db:70:ed:fb:99:41:5d:17:f8:bb:26:19:e2:09:62:
9b:52:30:d1:1b:d7:4b:df:59:2a:2a:bd:09:60:07:3e:a0:f7:
90:c8:b2:67:4a:2e:bf:9d:b8:fb:c9:55:69:20:81:7a:da:25:
3c:7f:cc:3d:28:ab:5f:3d:02:26:ba:52:08:5b:84:c2:48:45:
6f:39:47:72
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEekjssfLoi9gFbpzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZiZmUwMGEtM2ZkNy00MGM3LWIzYmUtMTBmOWI2OTY4
ODM2MB4XDTI0MTAyNDAyMDAxNFoXDTI1MDEyMjAzMDAxNFowLzEtMCsGA1UEAxMk
ZWY4MTNjZjktMTZjYi00NWRlLWE4ZTQtZWE0ZDg2OWQ2Nzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxnWCqI2FtLL9c56//BWGuXDf9MIeLMVfyNq
BPnEhDB29txVxSznRkItAoWrsKv4j5qTbIiQYQluTv+L0ThZgGywyTybKB0kWKj+
lSwibJi7RjJUkiqGKe/WSnny/eaS8MOrsh2WW7vtb+UzpaTvB/E4I3kDmlVargnP
G7ElPapjmfR5Yf/MpS3SopPrIGn0vuJgX2Atydt2NQzcencFaXFRmDOJM1R4kWvb
pQfupsS+cWDkPsqqjL43bhefbkI6ffii74LbQGztD6/daDk5aRcr5Ttz2mwLtquj
z+/opWajD6VKxT8I75lq0bo/3bzSRUZqxR2ZPd3jE4A9X2WNtQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCRDZNaySfBHf/ifLWX9X9yGbEmKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZmJm
ZTAwYS0zZmQ3LTQwYzctYjNiZS0xMGY5YjY5Njg4MzYvNThjNTU3ZGQtYjI0Yy0z
MTEzLTg5ZmUtOWYxZjlmM2VkNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGZiZmUwMGEtM2ZkNy00MGM3LWIz
YmUtMTBmOWI2OTY4ODM2L2RmYmZlMDBhLTNmZDctNDBjNy1iM2JlLTEwZjliNjk2
ODgzNi5jcmwwHwYDVR0jBBgwFoAUavSA+gtYKMjGLV4JpbBNL77AUG0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZmJmZTAwYS0zZmQ3LTQwYzctYjNiZS0xMGY5
YjY5Njg4MzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL30QAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdNZ19TuLQ4ZTp0ffo8pNLM4AXf2p8YqbtOdG5YI/oNntR1gyiTE0
x8dkFJ7JhHz4ov3psP2X3GIU+HMUA5XzcLFL0HgY4RR4azFJrQ0wiZvm1vs6ug9x
kIjh+xFsiptSzLYQL3vtZSFtOgimzosITHrqeZKBg1LyMCtMeGPq+t0p8Inqs+We
hUzEnigWr3kacnomHXRIO3lnDYZuZStMPxngpbceDdeusRbTWXWHix9LB6Um87CT
23Dt+5lBXRf4uyYZ4glim1Iw0RvXS99ZKiq9CWAHPqD3kMiyZ0ouv524+8lVaSCB
etolPH/MPSirXz0CJrpSCFuEwkhFbzlHcg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:22 2025 by rpki-client