Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/8f0730c4-31c5-3eaa-b7cf-1d4f88d2c8b3.roa
File: 8f0730c4-31c5-3eaa-b7cf-1d4f88d2c8b3.roa (raw, json)
Hash identifier: t9YLtUerwkYGy0IidckORtRA6rbeS2hLYFsTobO4npg=
Subject key identifier: 83:6B:91:83:40:72:95:39:99:73:8D:26:05:40:35:8F:93:8E:2E:BC
Certificate issuer: /CN=b816cc2e-175e-4e44-a8ee-e02aaa1cbfed
Certificate serial: 010D0C9F4328584395034D7D8BA2C22C39EFD670
Authority key identifier: 58:08:22:F8:27:95:CB:5B:40:BA:B1:1A:58:6F:74:92:BD:20:C0:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/8f0730c4-31c5-3eaa-b7cf-1d4f88d2c8b3.roa
Signing time: Tue 17 Oct 2023 17:14:18 +0000
ROA not before: Tue 17 Oct 2023 17:14:18 +0000
ROA not after: Mon 15 Jan 2024 18:14:18 +0000
asID: 13692
IP address blocks: 64.29.48.0/20 maxlen: 20
2602:80c:6000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:95:03:4d:7d:8b:a2:c2:2c:39:ef:d6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b816cc2e-175e-4e44-a8ee-e02aaa1cbfed
Validity
Not Before: Oct 17 17:14:18 2023 GMT
Not After : Jan 15 18:14:18 2024 GMT
Subject: CN=b314e48d-464e-40e6-8665-45ea23e3551e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:10:e8:ee:ec:2b:ce:b0:a0:8b:2f:3d:19:
6f:82:4d:ec:6a:e3:ee:5d:11:1d:91:fc:8e:3b:f7:
63:9b:07:dd:9b:11:a2:f5:ef:6b:75:f9:0d:07:a8:
02:58:2c:e0:c7:bf:58:27:7c:db:e4:95:3d:31:4f:
7d:e0:6e:c3:b7:ec:ff:23:f0:82:66:18:77:4b:ed:
60:bc:6a:3a:db:62:dc:ff:78:59:be:f4:a5:e6:85:
c1:43:48:6d:35:c2:23:ca:6f:cc:58:48:a8:1d:cf:
ff:ea:4b:5f:2b:45:1b:5c:3f:d8:68:be:e7:40:08:
ca:6d:c4:98:3a:72:f3:7f:5a:20:ac:45:34:68:c4:
a8:ee:b8:79:da:3b:3b:ae:4e:d6:a2:39:be:c8:de:
ec:21:38:0a:da:dc:df:e4:5f:43:17:ac:de:95:cf:
a7:97:da:11:06:38:9a:25:c0:58:7c:fe:6b:c1:19:
a0:27:d7:30:d9:98:96:a9:25:67:f3:c2:b0:05:c5:
7a:7a:92:a9:ff:1d:a5:a4:a4:44:a6:5d:92:22:5c:
cf:cc:29:d9:e5:50:a6:26:71:cc:70:3e:43:5a:a7:
ac:27:13:d4:71:03:1d:06:45:e5:38:78:25:25:47:
97:33:e1:df:ce:f4:b4:36:35:56:a5:ab:80:4f:47:
95:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6B:91:83:40:72:95:39:99:73:8D:26:05:40:35:8F:93:8E:2E:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/8f0730c4-31c5-3eaa-b7cf-1d4f88d2c8b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed.crl
X509v3 Authority Key Identifier:
keyid:58:08:22:F8:27:95:CB:5B:40:BA:B1:1A:58:6F:74:92:BD:20:C0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed.cer
sbgp-ipAddrBlock: critical
IPv4:
64.29.48.0/20
IPv6:
2602:80c:6000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:d9:d9:d2:94:c3:33:ee:18:57:c7:48:1e:d4:b1:e4:46:9c:
6b:8b:e0:9b:3a:6e:c6:03:f2:53:1d:6b:80:42:7b:0c:59:b5:
46:af:59:d3:d7:91:28:44:6c:b5:8a:76:26:95:38:7c:27:dd:
d0:49:d6:70:07:4e:80:83:6a:fc:1d:96:6e:75:24:9f:0b:3a:
af:7c:49:5f:7b:3b:9e:00:f3:e9:fd:47:8d:36:6f:90:ee:e4:
2d:9f:02:0f:19:cc:92:da:8a:cc:7e:26:af:7c:d6:c9:01:ba:
7e:79:80:d6:cd:9b:0f:99:a0:19:05:2d:e0:36:46:fd:65:14:
73:56:26:25:bb:04:68:94:59:37:1e:70:26:e1:54:cd:b0:b4:
fa:f5:d4:19:b0:d9:a6:58:d2:37:b2:6b:3f:53:4d:d7:81:62:
7d:55:24:d5:69:47:d3:7c:8f:8a:5c:76:e2:8b:f0:2b:2d:1d:
e7:cb:2d:52:11:05:ee:0a:0b:f6:6b:0a:07:9d:83:95:f1:39:
cb:ef:f7:80:23:9c:46:4f:ff:f2:b7:00:6a:2d:7c:0c:f9:7f:
f5:07:be:9c:d8:4e:1c:a8:84:5b:62:cd:32:b2:aa:45:e6:5d:
52:af:8f:77:35:13:4c:36:62:b9:b0:3d:79:04:71:29:87:ea:
60:84:cb:8b
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEOVA019i6LCLDnv1nAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjgxNmNjMmUtMTc1ZS00ZTQ0LWE4ZWUtZTAyYWFhMWNi
ZmVkMB4XDTIzMTAxNzE3MTQxOFoXDTI0MDExNTE4MTQxOFowLzEtMCsGA1UEAxMk
YjMxNGU0OGQtNDY0ZS00MGU2LTg2NjUtNDVlYTIzZTM1NTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUMQ6O7sK86woIsvPRlvgk3sauPuXREdkfyO
O/djmwfdmxGi9e9rdfkNB6gCWCzgx79YJ3zb5JU9MU994G7Dt+z/I/CCZhh3S+1g
vGo622Lc/3hZvvSl5oXBQ0htNcIjym/MWEioHc//6ktfK0UbXD/YaL7nQAjKbcSY
OnLzf1ogrEU0aMSo7rh52js7rk7Wojm+yN7sITgK2tzf5F9DF6zelc+nl9oRBjia
JcBYfP5rwRmgJ9cw2ZiWqSVn88KwBcV6epKp/x2lpKREpl2SIlzPzCnZ5VCmJnHM
cD5DWqesJxPUcQMdBkXlOHglJUeXM+HfzvS0NjVWpauAT0eVvQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFINrkYNAcpU5mXONJgVANY+Tji68MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iODE2
Y2MyZS0xNzVlLTRlNDQtYThlZS1lMDJhYWExY2JmZWQvOGYwNzMwYzQtMzFjNS0z
ZWFhLWI3Y2YtMWQ0Zjg4ZDJjOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjgxNmNjMmUtMTc1ZS00ZTQ0LWE4
ZWUtZTAyYWFhMWNiZmVkL2I4MTZjYzJlLTE3NWUtNGU0NC1hOGVlLWUwMmFhYTFj
YmZlZC5jcmwwHwYDVR0jBBgwFoAUWAgi+CeVy1tAurEaWG90kr0gwJwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iODE2Y2MyZS0xNzVlLTRlNDQtYThlZS1lMDJh
YWExY2JmZWQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEQB0wMA4E
AgACMAgDBgQmAggMYDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB92dnSlMMz7hhXx0ge1LHkRpxri+CbOm7G
A/JTHWuAQnsMWbVGr1nT15EoRGy1inYmlTh8J93QSdZwB06Ag2r8HZZudSSfCzqv
fElfezueAPPp/UeNNm+Q7uQtnwIPGcyS2orMfiavfNbJAbp+eYDWzZsPmaAZBS3g
Nkb9ZRRzViYluwRolFk3HnAm4VTNsLT69dQZsNmmWNI3sms/U03XgWJ9VSTVaUfT
fI+KXHbii/ArLR3nyy1SEQXuCgv2awoHnYOV8TnL7/eAI5xGT//ytwBqLXwM+X/1
B76c2E4cqIRbYs0ysqpF5l1Sr493NRNMNmK5sD15BHEph+pghMuL
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org