Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/5876c3e9-97fe-364a-bd77-66a9bf2c6f99.roa
File: 5876c3e9-97fe-364a-bd77-66a9bf2c6f99.roa (raw, json)
Hash identifier: 536aSd5uIUZYRhDQmmWpwBta0iC4+X+9Q1d1egNNcIE=
Subject key identifier: 2F:EC:88:98:73:CD:E0:E0:03:FB:2F:94:6B:D4:E9:F1:70:50:77:51
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F43285848100AA273F79E05748D99A180
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/5876c3e9-97fe-364a-bd77-66a9bf2c6f99.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 15169
IP address blocks: 2605:ef80:c020::/47 maxlen: 47
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:a2:73:f7:9e:05:74:8d:99:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=68846d27-c8e1-44f6-b64b-7f25eb9598a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:c4:7a:a2:22:71:37:5a:9c:b2:8d:45:93:
38:c3:2b:50:83:27:76:e2:df:20:d4:44:0e:7a:27:
95:ae:76:9b:db:b2:7d:69:5d:1c:52:d9:b2:03:57:
f2:4e:ab:71:a5:92:02:ce:8c:1d:cc:8b:49:8f:a4:
56:37:11:7c:78:42:27:92:da:b5:d6:a9:13:3c:02:
8c:67:56:5e:75:9a:5d:87:08:f9:ec:0c:82:23:d5:
c6:93:57:95:a3:3d:90:1e:df:60:06:a8:73:b1:23:
10:86:94:85:9a:f5:a3:5b:8a:31:f9:c6:af:af:4e:
c6:a5:44:d1:34:fb:df:e9:00:c4:00:e4:09:b6:81:
a4:20:89:6b:bd:0c:29:35:fe:22:df:b6:d9:e8:6b:
87:cf:38:1d:2d:14:1a:59:0f:30:7e:f4:c1:a0:34:
2f:86:96:de:6e:12:58:bc:e2:e5:5c:38:19:6a:db:
5d:76:ef:a4:f7:d8:56:10:23:32:b2:2c:5a:17:ee:
6e:f7:3b:59:34:71:09:53:8b:6b:65:69:fc:98:f6:
ed:8f:c1:15:92:e5:cb:7c:6a:17:d7:3a:06:60:e5:
6f:ab:54:34:39:8c:71:cd:ba:aa:1b:97:01:a1:4f:
20:41:f2:3b:89:e6:b2:75:1e:c5:b0:44:58:71:2f:
14:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EC:88:98:73:CD:E0:E0:03:FB:2F:94:6B:D4:E9:F1:70:50:77:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/5876c3e9-97fe-364a-bd77-66a9bf2c6f99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:ef80:c020::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:35:9d:1b:4d:bc:94:e8:c0:c4:6d:f6:ae:81:a4:b0:49:bc:
40:2c:e2:7b:1b:19:d0:68:97:2c:e3:31:60:ed:27:2f:43:e2:
33:34:ce:cb:bc:67:1b:24:5d:9e:6b:19:8d:be:aa:86:ec:5c:
63:bc:ef:9d:95:8f:83:ea:93:d9:28:d0:ff:63:78:1a:79:7b:
cf:44:1f:04:59:a7:48:e0:b4:1d:f2:1d:b8:7f:31:20:49:de:
07:77:f6:74:d8:3d:e4:de:f4:17:fb:00:e8:c1:7c:90:18:75:
98:4c:9f:2f:7c:3b:af:7f:47:50:ae:34:a7:57:0e:98:5d:fa:
bb:69:eb:fe:c9:38:ef:d6:76:9a:59:10:e6:ad:fa:71:05:b7:
be:22:ab:4b:bb:b6:0a:48:16:1a:3f:6d:4b:3a:51:10:05:ae:
f2:ef:d5:6a:16:78:92:50:f1:2a:d6:a3:c6:bc:ce:dc:e1:f3:
98:fd:3d:4c:7a:54:8e:6f:ff:b1:bf:7c:ff:07:05:28:8a:18:
2c:bd:5b:5d:40:0b:3b:76:81:7c:79:68:6b:ba:58:33:85:cf:
f3:7a:5f:93:f0:39:1f:22:85:81:e8:57:97:7b:cc:e0:6c:8b:
8a:8f:21:c3:b8:10:42:40:4c:f6:5d:03:e1:c4:a8:1d:1c:69:
47:b3:d0:d3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgQCqJz954FdI2ZoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
Njg4NDZkMjctYzhlMS00NGY2LWI2NGItN2YyNWViOTU5OGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKHEeqIicTdanLKNRZM4wytQgyd24t8g1EQO
eieVrnab27J9aV0cUtmyA1fyTqtxpZICzowdzItJj6RWNxF8eEInktq11qkTPAKM
Z1ZedZpdhwj57AyCI9XGk1eVoz2QHt9gBqhzsSMQhpSFmvWjW4ox+cavr07GpUTR
NPvf6QDEAOQJtoGkIIlrvQwpNf4i37bZ6GuHzzgdLRQaWQ8wfvTBoDQvhpbebhJY
vOLlXDgZattddu+k99hWECMysixaF+5u9ztZNHEJU4trZWn8mPbtj8EVkuXLfGoX
1zoGYOVvq1Q0OYxxzbqqG5cBoU8gQfI7ieaydR7FsERYcS8UqQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC/siJhzzeDgA/svlGvU6fFwUHdRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvNTg3NmMzZTktOTdmZS0z
NjRhLWJkNzctNjZhOWJmMmM2Zjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgXvgMAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAE1nRtNvJTowMRt9q6BpLBJvEAs4nsbGdBolyzjMWDtJy9D4jM0
zsu8ZxskXZ5rGY2+qobsXGO8752Vj4Pqk9ko0P9jeBp5e89EHwRZp0jgtB3yHbh/
MSBJ3gd39nTYPeTe9Bf7AOjBfJAYdZhMny98O69/R1CuNKdXDphd+rtp6/7JOO/W
dppZEOat+nEFt74iq0u7tgpIFho/bUs6URAFrvLv1WoWeJJQ8SrWo8a8ztzh85j9
PUx6VI5v/7G/fP8HBSiKGCy9W11ACzt2gXx5aGu6WDOFz/N6X5PwOR8ihYHoV5d7
zOBsi4qPIcO4EEJATPZdA+HEqB0caUez0NM=
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:16:13 2025 by rpki-client