Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/5afbb2ea-2063-3503-b614-13ba9484f143.roa
File: 5afbb2ea-2063-3503-b614-13ba9484f143.roa (raw, json)
Hash identifier: wGLl0v/9wlYcH2VaaNHgpkK+81li7l4SLsjcEPbmvZk=
Subject key identifier: 71:A8:7B:F7:A3:37:CA:6A:77:59:EC:B9:BB:E4:D1:9C:67:DF:FD:F2
Certificate issuer: /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial: 010D0C9F43285843E0A4EFA4367EC9554984EA00
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/5afbb2ea-2063-3503-b614-13ba9484f143.roa
Signing time: Mon 13 Nov 2023 19:25:36 +0000
ROA not before: Mon 13 Nov 2023 19:25:36 +0000
ROA not after: Sun 11 Feb 2024 19:25:36 +0000
asID: 19651
IP address blocks: 2602:f9ec::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:e0:a4:ef:a4:36:7e:c9:55:49:84:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
Validity
Not Before: Nov 13 19:25:36 2023 GMT
Not After : Feb 11 19:25:36 2024 GMT
Subject: CN=d230fc23-8ab2-4dc5-ae87-71adc26c96c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6a:17:d5:99:40:23:29:8b:42:49:bd:f2:bf:
6b:26:85:e0:0c:19:57:9a:5d:6b:29:92:c6:1e:31:
26:0a:d5:60:c8:5a:96:ea:a2:af:39:87:d4:cb:62:
62:55:f5:09:11:1f:00:da:49:6b:3e:59:f4:fb:b6:
2b:7a:f2:f2:ff:3b:e0:f6:fa:63:10:c0:f1:1b:b9:
06:52:8e:05:30:f5:d8:8e:ff:e6:41:ee:fa:a3:c2:
d0:3d:39:4f:df:fb:24:31:79:73:62:3b:6f:2d:14:
45:e0:96:77:7b:74:64:72:77:e1:bb:cc:bc:b1:cf:
2c:67:1a:2a:be:e6:76:a3:aa:a3:53:fb:08:cc:57:
92:b4:9f:e3:4a:39:a0:a2:4b:0b:07:f0:fa:98:65:
1c:ae:a9:3a:a7:b5:30:0b:f4:b4:26:08:d4:01:93:
d3:1d:e6:a7:f6:5c:5d:49:24:75:70:1e:41:06:83:
a1:23:27:05:be:75:05:c0:42:00:19:6b:69:a1:9d:
7a:77:ea:50:02:9b:97:b8:ff:05:b6:fe:d9:88:c1:
fe:36:f4:6c:e4:12:eb:39:c0:24:57:b5:12:c4:be:
cd:56:fd:7e:ad:a0:31:1e:23:ba:41:20:15:ac:8e:
4b:04:c0:ad:34:60:5b:23:14:0f:82:e3:3a:64:38:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A8:7B:F7:A3:37:CA:6A:77:59:EC:B9:BB:E4:D1:9C:67:DF:FD:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/5afbb2ea-2063-3503-b614-13ba9484f143.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
X509v3 Authority Key Identifier:
keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9ec::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:0a:99:27:df:65:2e:b6:01:8e:e3:3b:99:e8:ac:87:f1:09:
52:66:b4:1e:7b:c1:9a:0c:f2:f8:d7:46:bb:5e:20:3b:d8:b8:
18:d3:ba:8c:ca:64:92:ca:d4:a7:f8:bd:d9:c3:75:e2:e6:72:
49:55:0e:18:f9:55:2b:fa:c7:97:c7:b7:8c:98:8d:96:e0:0d:
94:d8:b0:02:3a:7b:76:89:c3:03:ee:99:f5:3e:04:82:b1:30:
ad:4d:fe:c6:12:dc:16:13:44:ac:b9:a8:fe:e9:5e:33:ec:ed:
0a:a6:af:2a:b1:f3:76:75:aa:f9:85:f7:e2:d4:d3:27:e2:8a:
0d:64:27:31:d4:4b:3d:1e:6e:a8:83:dd:30:a2:9c:d5:2d:20:
dc:71:fc:d7:7b:aa:9b:29:21:b2:f7:fd:c8:29:f1:4b:18:c4:
71:9f:a4:7a:42:a7:83:ec:3a:75:0a:0e:7b:67:f3:b5:d8:83:
ac:dd:74:73:88:14:16:1d:db:36:22:bf:9c:ce:82:58:c1:21:
34:74:5a:ea:59:cc:64:d4:06:d7:0a:f3:a6:ab:88:a8:41:7c:
5d:e2:48:dd:d5:d4:df:b6:e2:83:46:df:af:55:4a:bb:b7:22:
9a:ab:05:68:55:27:21:65:8b:23:3c:6a:8f:82:12:c8:f6:03:
c7:a6:d9:a8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEPgpO+kNn7JVUmE6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA3NTYxZmUtNGIwNC00MTdhLWI0MjMtMzQ5YjhiNGIw
NDdkMB4XDTIzMTExMzE5MjUzNloXDTI0MDIxMTE5MjUzNlowLzEtMCsGA1UEAxMk
ZDIzMGZjMjMtOGFiMi00ZGM1LWFlODctNzFhZGMyNmM5NmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12oX1ZlAIymLQkm98r9rJoXgDBlXml1rKZLG
HjEmCtVgyFqW6qKvOYfUy2JiVfUJER8A2klrPln0+7YrevLy/zvg9vpjEMDxG7kG
Uo4FMPXYjv/mQe76o8LQPTlP3/skMXlzYjtvLRRF4JZ3e3Rkcnfhu8y8sc8sZxoq
vuZ2o6qjU/sIzFeStJ/jSjmgoksLB/D6mGUcrqk6p7UwC/S0JgjUAZPTHean9lxd
SSR1cB5BBoOhIycFvnUFwEIAGWtpoZ16d+pQApuXuP8Ftv7ZiMH+NvRs5BLrOcAk
V7USxL7NVv1+raAxHiO6QSAVrI5LBMCtNGBbIxQPguM6ZDgrCQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHGoe/ejN8pqd1nsubvk0Zxn3/3yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1
NjFmZS00YjA0LTQxN2EtYjQyMy0zNDliOGI0YjA0N2QvNWFmYmIyZWEtMjA2My0z
NTAzLWI2MTQtMTNiYTk0ODRmMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDA3NTYxZmUtNGIwNC00MTdhLWI0
MjMtMzQ5YjhiNGIwNDdkLzAwNzU2MWZlLTRiMDQtNDE3YS1iNDIzLTM0OWI4YjRi
MDQ3ZC5jcmwwHwYDVR0jBBgwFoAUam3UldcOa/DEVubcc/Wc40Ocg3UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1NjFmZS00YjA0LTQxN2EtYjQyMy0zNDli
OGI0YjA0N2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL57AAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANAqZJ99lLrYBjuM7meish/EJUma0HnvBmgzy+NdGu14gO9i4GNO6
jMpkksrUp/i92cN14uZySVUOGPlVK/rHl8e3jJiNluANlNiwAjp7donDA+6Z9T4E
grEwrU3+xhLcFhNErLmo/uleM+ztCqavKrHzdnWq+YX34tTTJ+KKDWQnMdRLPR5u
qIPdMKKc1S0g3HH813uqmykhsvf9yCnxSxjEcZ+kekKng+w6dQoOe2fztdiDrN10
c4gUFh3bNiK/nM6CWMEhNHRa6lnMZNQG1wrzpquIqEF8XeJI3dXU37big0bfr1VK
u7cimqsFaFUnIWWLIzxqj4ISyPYDx6bZqA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:10 2024 by rpki-client on console-fra.rpki-client.org