Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/e699a7c9-a651-3e8d-81a1-512f04e659b9.roa
File: e699a7c9-a651-3e8d-81a1-512f04e659b9.roa (raw, json)
Hash identifier: cqFUVWiwQ44z8CYIMxIq04WwY2ELlaoZ5Z4l52Os+vs=
Subject key identifier: D1:E2:FE:06:EF:86:21:4B:D0:7F:3A:80:EE:E2:8E:6E:5A:F7:57:03
Certificate issuer: /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial: 010D0C9F43285845EF893250A896BE118A914140
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/e699a7c9-a651-3e8d-81a1-512f04e659b9.roa
Signing time: Mon 20 May 2024 13:00:35 +0000
ROA not before: Mon 20 May 2024 13:00:35 +0000
ROA not after: Sun 18 Aug 2024 13:00:35 +0000
asID: 51082
IP address blocks: 2606:f280::/32 maxlen: 32
2604:1740::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:ef:89:32:50:a8:96:be:11:8a:91:41:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
Validity
Not Before: May 20 13:00:35 2024 GMT
Not After : Aug 18 13:00:35 2024 GMT
Subject: CN=43585433-373d-4b60-a446-f25c5f7af608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:fc:c2:8b:ef:43:4a:80:72:30:3f:fd:8d:
74:ec:54:fc:e8:38:9f:c9:6f:36:b8:fc:6d:fc:6e:
f7:12:37:ed:cf:60:bb:b1:96:5b:6b:47:bd:74:a1:
08:35:23:07:f3:62:25:30:8d:de:22:b0:69:48:bb:
e3:ee:5c:a2:9f:52:3e:61:08:cc:b5:cd:45:3c:3a:
97:11:c0:86:ea:2a:f7:47:44:08:f4:64:da:f3:ba:
86:f5:4e:e6:02:0a:f2:57:46:ed:b4:15:fa:7a:fe:
95:5e:08:5d:9e:27:c0:c9:ac:bf:3a:80:3d:89:98:
b7:d7:a3:d2:2e:36:77:94:dd:43:a4:76:fd:be:a4:
cc:5b:55:4b:60:b9:da:2c:51:38:91:75:69:5c:23:
f3:72:29:38:cf:bf:5c:9e:ba:f0:5e:c4:4a:d5:48:
fd:90:0f:6a:ab:7a:a2:89:8e:a6:74:cf:4e:46:06:
64:71:e9:81:39:39:8f:9c:c3:df:68:73:ba:73:8d:
92:d8:3e:cf:e8:9f:89:74:0b:df:0b:df:8d:17:ba:
e8:35:20:05:36:e0:88:47:6e:ee:c0:10:82:51:04:
ce:76:1d:46:23:d8:13:ea:bf:01:cd:96:27:7c:2d:
5e:92:83:ec:4c:da:81:b0:b5:22:ba:4c:48:50:ff:
64:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E2:FE:06:EF:86:21:4B:D0:7F:3A:80:EE:E2:8E:6E:5A:F7:57:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/e699a7c9-a651-3e8d-81a1-512f04e659b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl
X509v3 Authority Key Identifier:
keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:1740::/32
2606:f280::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:5e:b8:4f:e0:34:ce:77:43:37:26:5a:c3:02:94:2f:c3:58:
39:6a:90:ab:95:54:7e:de:dd:fe:5b:1f:c7:40:3c:e7:a8:72:
da:46:4c:18:ce:76:d9:4a:3d:dc:b1:f9:84:e1:05:11:44:ea:
a7:5b:1e:ce:34:64:7e:a9:d4:42:47:c2:e0:44:67:43:19:e9:
bb:67:84:66:23:ac:dd:47:5d:f2:d4:dd:c3:8f:a8:9d:ca:e1:
b7:3e:1b:0d:9c:cc:89:5d:8d:cb:9e:f5:26:21:48:bc:ec:a9:
fa:b1:7e:35:5e:01:0f:76:8d:57:53:1a:2b:a6:b3:cc:b0:0c:
4d:3b:d8:57:70:12:3f:5f:d9:3a:e5:4a:67:2a:2f:26:fd:6a:
63:4d:d8:82:f7:9a:56:09:85:30:9c:08:34:84:5a:f0:7d:78:
44:05:83:c6:14:20:07:94:66:f3:31:c7:21:22:db:06:d0:d8:
6a:17:16:0f:84:c8:21:3b:d2:d2:07:e9:5e:60:51:62:b9:ee:
dc:58:cd:58:62:e4:2b:b6:f3:97:87:96:8d:be:a2:ca:14:6c:
1e:2d:13:09:77:79:b5:5d:f6:a9:82:6a:34:58:6d:43:4f:a7:
e9:75:bf:e0:b1:41:3b:90:ca:98:4d:09:cd:17:90:c5:69:c3:
af:ab:88:09
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEXviTJQqJa+EYqRQUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjM5ZTJhNzItOTM0Ny00MzE2LTliZTctMjBiZGY2NTEy
NzExMB4XDTI0MDUyMDEzMDAzNVoXDTI0MDgxODEzMDAzNVowLzEtMCsGA1UEAxMk
NDM1ODU0MzMtMzczZC00YjYwLWE0NDYtZjI1YzVmN2FmNjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZv8wovvQ0qAcjA//Y107FT86DifyW82uPxt
/G73Ejftz2C7sZZba0e9dKEINSMH82IlMI3eIrBpSLvj7lyin1I+YQjMtc1FPDqX
EcCG6ir3R0QI9GTa87qG9U7mAgryV0bttBX6ev6VXghdnifAyay/OoA9iZi316PS
LjZ3lN1DpHb9vqTMW1VLYLnaLFE4kXVpXCPzcik4z79cnrrwXsRK1Uj9kA9qq3qi
iY6mdM9ORgZkcemBOTmPnMPfaHO6c42S2D7P6J+JdAvfC9+NF7roNSAFNuCIR27u
wBCCUQTOdh1GI9gT6r8BzZYnfC1ekoPsTNqBsLUiukxIUP9k3wIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFNHi/gbvhiFL0H86gO7ijm5a91cDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMzll
MmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJkZjY1MTI3MTEvZTY5OWE3YzktYTY1MS0z
ZThkLTgxYTEtNTEyZjA0ZTY1OWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjM5ZTJhNzItOTM0Ny00MzE2LTli
ZTctMjBiZGY2NTEyNzExLzIzOWUyYTcyLTkzNDctNDMxNi05YmU3LTIwYmRmNjUx
MjcxMS5jcmwwHwYDVR0jBBgwFoAUxwBadkJgEZ/tem9/Z5RiZOwta1QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMzllMmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJk
ZjY1MTI3MTEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAJgQXQAMF
ACYG8oAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAfF64T+A0zndDNyZawwKUL8NYOWqQq5VUft7d/lsfx0A8
56hy2kZMGM522Uo93LH5hOEFEUTqp1sezjRkfqnUQkfC4ERnQxnpu2eEZiOs3Udd
8tTdw4+oncrhtz4bDZzMiV2Ny571JiFIvOyp+rF+NV4BD3aNV1MaK6azzLAMTTvY
V3ASP1/ZOuVKZyovJv1qY03YgveaVgmFMJwINIRa8H14RAWDxhQgB5Rm8zHHISLb
BtDYahcWD4TIITvS0gfpXmBRYrnu3FjNWGLkK7bzl4eWjb6iyhRsHi0TCXd5tV32
qYJqNFhtQ0+n6XW/4LFBO5DKmE0JzReQxWnDr6uICQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:29 2025 by rpki-client