Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1aaf8de8-dc32-37c3-aebb-7047fb4e41b2.roa
File: 1aaf8de8-dc32-37c3-aebb-7047fb4e41b2.roa (raw, json)
Hash identifier: 6//q6txVFspJRzf87NsCI9e39hJLWbDE52GAUYeMAYk=
Subject key identifier: 4F:4A:9F:4B:07:C3:B2:4C:2D:AA:E7:E2:4D:1F:4A:38:8A:F3:06:69
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F432858480D3FCB85883C6BFD390E2F40
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1aaf8de8-dc32-37c3-aebb-7047fb4e41b2.roa
Signing time: Sat 30 Nov 2024 14:00:50 +0000
ROA not before: Sat 30 Nov 2024 14:00:50 +0000
ROA not after: Fri 28 Feb 2025 14:00:50 +0000
asID: 15169
IP address blocks: 2605:ef80:c070::/45 maxlen: 45
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0d:3f:cb:85:88:3c:6b:fd:39:0e:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Nov 30 14:00:50 2024 GMT
Not After : Feb 28 14:00:50 2025 GMT
Subject: CN=d5a9d031-7517-4ae1-bd56-35295a1c04b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:e6:41:70:aa:3c:e2:6b:74:3d:24:22:18:
13:07:a3:da:3b:0c:20:91:59:dd:47:8d:73:ce:e7:
b8:6a:4e:33:8b:ee:10:b5:e6:7c:ed:a7:e4:ef:b5:
b4:ed:51:90:05:47:b2:81:62:51:8b:34:d9:03:64:
72:e8:95:53:bb:4f:16:50:17:53:30:bb:6b:2f:6c:
04:57:91:06:bf:d5:78:d9:9c:da:76:88:df:32:0a:
b5:5d:2a:0d:8e:6a:4c:7d:a1:d8:38:88:18:da:c0:
fd:74:55:5e:6d:8b:cf:60:9e:fe:9c:ed:30:c8:75:
8c:4e:5b:79:97:74:29:67:84:a4:08:7f:de:98:5c:
b9:5e:db:6d:e5:a5:94:ed:5f:46:aa:1a:04:28:22:
ac:07:6a:4d:8d:db:27:1c:54:32:e1:87:29:6d:67:
e8:54:01:7b:46:34:b1:98:93:d6:81:d6:4b:7d:88:
ba:61:d3:15:39:95:b5:00:40:0d:0b:12:d4:10:73:
f9:5a:f7:2d:a2:a3:44:0c:f2:5f:91:9a:8e:dc:c2:
03:0c:d3:1a:77:40:e3:6a:ca:15:70:1b:6e:32:85:
81:41:1a:89:ce:40:64:82:38:24:96:40:95:f3:66:
b5:6c:0d:56:6e:23:d5:6c:e5:39:e6:da:45:6e:cc:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4A:9F:4B:07:C3:B2:4C:2D:AA:E7:E2:4D:1F:4A:38:8A:F3:06:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1aaf8de8-dc32-37c3-aebb-7047fb4e41b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:ef80:c070::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:b8:31:f5:15:da:ae:03:8a:cb:b5:f4:19:24:6a:f8:db:fb:
1f:54:d5:25:49:df:3c:8b:bc:5a:7c:24:67:8c:7c:57:1a:45:
e6:55:ca:45:9d:59:4e:ad:ef:04:7d:67:aa:80:c3:ca:93:f5:
31:27:b7:d5:eb:99:19:c9:1d:33:23:a3:67:1b:ce:70:c4:67:
91:4c:fd:86:38:da:42:e5:f3:42:e5:c9:76:4f:df:a6:ae:e0:
06:85:15:db:cc:4d:ea:ef:00:2d:ef:48:3e:c3:11:45:10:ff:
f6:ea:8f:e4:41:38:17:98:3d:d1:4e:78:f5:e6:3a:e6:1a:5f:
e3:82:62:94:39:09:e8:21:1b:16:84:51:aa:42:4f:2b:e8:54:
75:8d:a9:a3:b2:e6:78:d9:c5:b7:9f:d3:88:2a:38:8a:0d:91:
ed:35:08:bf:59:78:f5:c7:c1:93:f3:40:12:4f:75:a5:6c:08:
f0:a5:f3:80:e9:0d:a1:0e:fc:91:00:a8:12:da:f0:9a:62:08:
91:9f:ba:b0:a8:54:20:45:7c:96:15:6b:bd:b0:2b:c7:53:da:
78:4e:8b:58:9e:02:c1:8a:74:72:bf:76:11:d9:e4:9f:20:f2:
bc:06:22:54:7d:79:23:1e:aa:89:d0:37:70:60:89:31:c2:ec:
f3:10:4e:bc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgNP8uFiDxr/TkOL0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTI0MTEzMDE0MDA1MFoXDTI1MDIyODE0MDA1MFowLzEtMCsGA1UEAxMk
ZDVhOWQwMzEtNzUxNy00YWUxLWJkNTYtMzUyOTVhMWMwNGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve3mQXCqPOJrdD0kIhgTB6PaOwwgkVndR41z
zue4ak4zi+4QteZ87afk77W07VGQBUeygWJRizTZA2Ry6JVTu08WUBdTMLtrL2wE
V5EGv9V42ZzadojfMgq1XSoNjmpMfaHYOIgY2sD9dFVebYvPYJ7+nO0wyHWMTlt5
l3QpZ4SkCH/emFy5Xttt5aWU7V9GqhoEKCKsB2pNjdsnHFQy4YcpbWfoVAF7RjSx
mJPWgdZLfYi6YdMVOZW1AEANCxLUEHP5WvctoqNEDPJfkZqO3MIDDNMad0DjasoV
cBtuMoWBQRqJzkBkgjgklkCV82a1bA1WbiPVbOU55tpFbszulwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE9Kn0sHw7JMLarn4k0fSjiK8wZpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvMWFhZjhkZTgtZGMzMi0z
N2MzLWFlYmItNzA0N2ZiNGU0MWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgXvgMBw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACq4MfUV2q4Disu19Bkkavjb+x9U1SVJ3zyLvFp8JGeMfFcaReZV
ykWdWU6t7wR9Z6qAw8qT9TEnt9XrmRnJHTMjo2cbznDEZ5FM/YY42kLl80LlyXZP
36au4AaFFdvMTervAC3vSD7DEUUQ//bqj+RBOBeYPdFOePXmOuYaX+OCYpQ5Cegh
GxaEUapCTyvoVHWNqaOy5njZxbef04gqOIoNke01CL9ZePXHwZPzQBJPdaVsCPCl
84DpDaEO/JEAqBLa8JpiCJGfurCoVCBFfJYVa72wK8dT2nhOi1ieAsGKdHK/dhHZ
5J8g8rwGIlR9eSMeqonQN3BgiTHC7PMQTrw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:52:18 2025 by rpki-client