Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/99717957-a7c4-3f2b-b4dd-d828835d27b7.roa
File: 99717957-a7c4-3f2b-b4dd-d828835d27b7.roa (raw, json)
Hash identifier: g4zx6uIQjuRpz4PbLXbyu7t55pFY7Zy00Ded4++oJuE=
Subject key identifier: 02:62:4D:B8:4A:91:E8:FE:93:36:E2:9F:1E:2A:0B:33:3C:6C:D4:C1
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F43285848100A9B9110B8AD2E3AEAE3C0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/99717957-a7c4-3f2b-b4dd-d828835d27b7.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 15169
IP address blocks: 2605:ef80:c02c::/47 maxlen: 47
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:9b:91:10:b8:ad:2e:3a:ea:e3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=856a4c58-875e-43f6-bd56-79ef2e33a9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8d:7f:36:f2:8b:36:0e:89:32:91:a5:bd:a7:
64:91:89:40:dd:09:74:a4:0a:45:02:a2:f4:1c:4f:
48:21:3a:2a:b6:ba:a1:b1:28:0f:c6:61:d7:75:ff:
ed:30:d7:05:58:5b:90:0f:d2:84:4f:ee:57:6b:4c:
ce:0c:f4:d7:66:15:43:c2:ce:82:4d:ad:62:15:3a:
e4:f4:23:40:88:90:2e:6b:51:ff:43:3b:c6:d4:17:
8a:17:ed:43:96:54:8e:8c:58:b3:d7:fa:d3:ac:2b:
9f:84:30:a6:f1:6d:97:34:61:5a:5b:05:2b:ab:10:
c0:d1:12:b9:23:12:29:56:8a:70:0a:69:50:45:77:
05:9b:de:bf:1a:29:6a:ac:5f:20:c2:78:27:15:04:
2f:5d:f8:48:60:f8:2a:06:d9:35:7c:38:62:02:0b:
45:eb:22:db:bc:13:a8:f8:fb:05:3b:bc:8d:2d:97:
82:09:50:32:38:72:36:1c:41:c6:07:83:bf:9e:bc:
de:81:1e:22:49:68:2f:8f:0b:8b:b6:b0:37:7e:ed:
c9:1f:a0:e3:ef:d0:1c:22:9e:5b:6a:7d:9a:d1:a2:
67:08:bf:4a:79:a4:4b:49:3d:12:b5:5a:56:ac:c3:
8a:f9:bd:fc:79:13:ff:68:e6:2f:ed:a9:df:8b:c8:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:62:4D:B8:4A:91:E8:FE:93:36:E2:9F:1E:2A:0B:33:3C:6C:D4:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/99717957-a7c4-3f2b-b4dd-d828835d27b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:ef80:c02c::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:61:6f:70:92:d7:cb:fa:16:18:ee:fd:ff:6a:5b:39:6b:aa:
e9:7f:dc:08:46:26:56:ae:e2:1a:1b:4b:40:49:29:da:da:f7:
13:a9:74:a4:0a:44:10:6a:ba:02:9e:f5:ac:2c:e5:94:a4:4d:
f5:0b:a1:cb:e6:08:50:62:eb:11:a9:c7:cf:af:54:21:57:26:
b2:cd:67:95:8b:3f:04:c9:96:bb:19:5c:ab:66:38:89:cc:a2:
ca:70:48:96:f5:68:f2:c3:d4:fc:1f:85:f5:f6:09:9e:bf:96:
46:fd:a3:fd:c3:9b:23:df:19:e2:53:ce:05:fd:03:c4:ba:d3:
1a:be:1b:f7:90:f1:13:63:26:8c:c5:db:55:3d:db:c2:75:3f:
54:82:47:f2:68:a2:ca:0f:b9:10:fc:bc:42:92:84:14:26:dc:
18:86:75:f7:ce:1e:4f:f9:87:c2:12:12:f1:98:84:ae:65:21:
af:8c:5d:b7:23:74:d1:5b:ca:74:94:28:f0:fc:96:6b:0c:db:
f9:f9:a5:24:10:97:d1:be:dc:a4:f8:0f:63:f3:15:4d:73:b6:
a2:1a:2e:94:69:1f:57:06:f3:0a:72:d6:71:e0:b6:75:96:47:
a3:2c:ce:4b:7a:3c:11:c8:c7:24:62:ec:73:42:1e:60:5c:97:
e8:00:8f:62
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgQCpuRELitLjrq48AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
ODU2YTRjNTgtODc1ZS00M2Y2LWJkNTYtNzllZjJlMzNhOWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl41/NvKLNg6JMpGlvadkkYlA3Ql0pApFAqL0
HE9IIToqtrqhsSgPxmHXdf/tMNcFWFuQD9KET+5Xa0zODPTXZhVDws6CTa1iFTrk
9CNAiJAua1H/QzvG1BeKF+1DllSOjFiz1/rTrCufhDCm8W2XNGFaWwUrqxDA0RK5
IxIpVopwCmlQRXcFm96/GilqrF8gwngnFQQvXfhIYPgqBtk1fDhiAgtF6yLbvBOo
+PsFO7yNLZeCCVAyOHI2HEHGB4O/nrzegR4iSWgvjwuLtrA3fu3JH6Dj79AcIp5b
an2a0aJnCL9KeaRLST0StVpWrMOK+b38eRP/aOYv7anfi8iBywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAJiTbhKkej+kzbinx4qCzM8bNTBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvOTk3MTc5NTctYTdjNC0z
ZjJiLWI0ZGQtZDgyODgzNWQyN2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgXvgMAs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG5hb3CS18v6Fhju/f9qWzlrqul/3AhGJlau4hobS0BJKdra9xOp
dKQKRBBqugKe9aws5ZSkTfULocvmCFBi6xGpx8+vVCFXJrLNZ5WLPwTJlrsZXKtm
OInMospwSJb1aPLD1PwfhfX2CZ6/lkb9o/3DmyPfGeJTzgX9A8S60xq+G/eQ8RNj
JozF21U928J1P1SCR/JoosoPuRD8vEKShBQm3BiGdffOHk/5h8ISEvGYhK5lIa+M
XbcjdNFbynSUKPD8lmsM2/n5pSQQl9G+3KT4D2PzFU1ztqIaLpRpH1cG8wpy1nHg
tnWWR6Mszkt6PBHIxyRi7HNCHmBcl+gAj2I=
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:52:18 2025 by rpki-client