Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/045c0d40-99ea-3fb6-9328-4743a138fd64.roa
File: 045c0d40-99ea-3fb6-9328-4743a138fd64.roa (raw, json)
Hash identifier: Lcxy2SnsVlBGW1C+HznlnkJWISEj9Gx4P0Ud5tVKbIo=
Subject key identifier: 38:7A:8D:DB:35:7C:52:C9:FF:D5:96:AD:B0:8A:E6:73:81:88:BC:58
Certificate issuer: /CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
Certificate serial: 010D0C9F4328576D51CC73C042CFC1735783175F
Authority key identifier: 16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/045c0d40-99ea-3fb6-9328-4743a138fd64.roa
Signing time: Thu 16 Jul 2020 12:04:35 +0000
ROA not before: Tue 14 Jul 2020 04:00:00 +0000
ROA not after: Wed 19 Oct 2022 04:00:00 +0000
asID: 32726
IP address blocks: 2620:12f:2000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:57:83:17:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
Validity
Not Before: Jul 14 04:00:00 2020 GMT
Not After : Oct 19 04:00:00 2022 GMT
Subject: CN=7c72480b-648f-4944-acc3-7153f96898c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:ba:44:4f:75:ce:be:76:82:57:12:3a:68:
dc:48:ce:93:7b:5e:7c:f1:c4:ed:0c:64:bc:68:14:
1e:cc:71:43:9e:9a:3a:9b:91:1c:98:d0:3a:b8:1f:
a0:70:80:d1:8c:be:6d:77:d6:9e:b9:aa:03:2f:be:
ff:d7:51:5a:07:20:ca:c7:43:cf:9a:36:40:cb:bd:
72:46:ac:84:97:1a:87:05:11:c6:2c:2d:ed:dd:b7:
34:e5:c5:19:e4:c4:bf:92:b4:c1:30:3e:c2:25:26:
b4:9f:2d:dc:d5:d4:1d:6f:1e:6a:b2:e2:48:ce:f1:
1e:94:76:f5:c4:a3:5e:5c:e5:a8:c4:9e:c1:7a:3b:
80:a5:c5:47:1f:ee:74:97:6d:77:fa:cf:16:d1:3d:
43:84:5c:7f:b1:98:46:fd:01:e7:8a:6e:a9:fa:b1:
f1:91:79:7e:be:36:6f:06:63:dd:c8:22:0a:20:75:
87:27:6a:47:d4:5e:cf:8b:58:f2:56:c1:8e:ec:e1:
0c:ba:8a:60:5e:be:33:b0:1c:4a:de:a8:ee:9c:15:
94:b4:c3:71:ef:72:df:2e:42:12:36:17:c4:e0:6b:
0f:35:15:fb:91:b0:98:09:09:d8:e2:da:b8:d9:45:
06:22:93:2b:90:bb:a2:c8:02:46:07:0a:22:17:26:
a6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7A:8D:DB:35:7C:52:C9:FF:D5:96:AD:B0:8A:E6:73:81:88:BC:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/045c0d40-99ea-3fb6-9328-4743a138fd64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.crl
X509v3 Authority Key Identifier:
keyid:16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:12f:2000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:3c:2d:82:83:75:23:ac:17:3a:4c:9b:47:60:30:8c:2e:63:
15:b4:66:8e:9f:69:61:55:13:ab:72:5c:f1:3e:a2:18:55:1b:
54:2f:54:12:86:e1:22:8d:6d:bd:71:c3:31:9f:7a:5d:97:e0:
29:ea:f6:d8:78:9c:bc:c7:db:99:dd:71:01:2c:42:d8:dd:84:
4f:2c:32:8c:cf:da:8b:52:b4:04:85:ac:93:58:d4:27:82:1e:
75:54:33:57:5a:36:67:f0:bd:8a:cc:b5:92:b9:f7:09:95:3a:
fc:7d:41:c7:64:dd:a5:e4:91:6b:ba:c5:56:58:3a:86:95:6f:
19:8d:95:1f:44:e0:2a:47:60:e2:82:01:90:a0:7c:4a:81:90:
7c:17:d9:8b:26:b2:f9:8c:12:8f:26:d8:eb:30:6c:1b:9d:e4:
ec:e8:b2:3d:7b:b8:4f:8a:c7:82:6d:fd:9b:c5:f8:9e:34:1a:
f8:c0:ef:93:b4:2e:79:0c:1f:7d:5c:6e:73:76:10:aa:91:9a:
36:33:24:1c:aa:f9:3b:24:49:3a:7f:4a:b5:c4:74:66:f9:34:
55:cf:9e:76:f3:ce:5b:e3:b7:c7:56:ce:19:d3:e0:be:f1:b9:
7a:22:0d:76:ea:40:18:66:b6:84:7b:78:4e:13:dd:a2:27:64:
4e:ec:40:7a
-----BEGIN CERTIFICATE-----
MIIGQTCCBSugAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc1eDF18wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDcyNDVjZGJmLTk3ZDctNDM3Ni05ZDhkLTI5OGNkYTVkMzg1
NDAeFw0yMDA3MTQwNDAwMDBaFw0yMjEwMTkwNDAwMDBaMC8xLTArBgNVBAMTJDdj
NzI0ODBiLTY0OGYtNDk0NC1hY2MzLTcxNTNmOTY4OThjNjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANC5ukRPdc6+doJXEjpo3EjOk3tefPHE7QxkvGgU
HsxxQ56aOpuRHJjQOrgfoHCA0Yy+bXfWnrmqAy++/9dRWgcgysdDz5o2QMu9ckas
hJcahwURxiwt7d23NOXFGeTEv5K0wTA+wiUmtJ8t3NXUHW8earLiSM7xHpR29cSj
XlzlqMSewXo7gKXFRx/udJdtd/rPFtE9Q4Rcf7GYRv0B54puqfqx8ZF5fr42bwZj
3cgiCiB1hydqR9Rez4tY8lbBjuzhDLqKYF6+M7AcSt6o7pwVlLTDce9y3y5CEjYX
xOBrDzUV+5GwmAkJ2OLauNlFBiKTK5C7osgCRgcKIhcmphcCAwEAAaOCA1cwggNT
MB0GA1UdDgQWBBQ4eo3bNXxSyf/Vlq2wiuZzgYi8WDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzI0NWNk
YmYtOTdkNy00Mzc2LTlkOGQtMjk4Y2RhNWQzODU0LzA0NWMwZDQwLTk5ZWEtM2Zi
Ni05MzI4LTQ3NDNhMTM4ZmQ2NC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzcyNDVjZGJmLTk3ZDctNDM3Ni05ZDhk
LTI5OGNkYTVkMzg1NC83MjQ1Y2RiZi05N2Q3LTQzNzYtOWQ4ZC0yOThjZGE1ZDM4
NTQuY3JsMB8GA1UdIwQYMBaAFBbhgrBORQwqnt0N8KqsBig+2Zc/MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvNzI0NWNkYmYtOTdkNy00Mzc2LTlkOGQtMjk4Y2Rh
NWQzODU0LmNlcjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYgAS8gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQEL
A4IBAQAgPC2Cg3UjrBc6TJtHYDCMLmMVtGaOn2lhVROrclzxPqIYVRtUL1QShuEi
jW29ccMxn3pdl+Ap6vbYeJy8x9uZ3XEBLELY3YRPLDKMz9qLUrQEhayTWNQngh51
VDNXWjZn8L2KzLWSufcJlTr8fUHHZN2l5JFrusVWWDqGlW8ZjZUfROAqR2DiggGQ
oHxKgZB8F9mLJrL5jBKPJtjrMGwbneTs6LI9e7hPiseCbf2bxfieNBr4wO+TtC55
DB99XG5zdhCqkZo2MyQcqvk7JEk6f0q1xHRm+TRVz552885b47fHVs4Z0+C+8bl6
Ig126kAYZraEe3hOE92iJ2RO7EB6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:58 2024 by rpki-client on console-fra.rpki-client.org