Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/857706eb-5a24-3b88-9168-985fbf103144.roa
File: 857706eb-5a24-3b88-9168-985fbf103144.roa (raw, json)
Hash identifier: 9LcWxq2IOvaPcZwv8I2A3IrmjwHCEcFHd0YCeM/2FrU=
Subject key identifier: A8:68:7A:99:90:B2:0E:54:80:B8:C5:D5:BD:D0:8E:2F:10:77:B1:62
Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial: 010D0C9F4328584476B1EFEAC2B522B8B77BA900
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/857706eb-5a24-3b88-9168-985fbf103144.roa
Signing time: Sat 06 Jan 2024 13:23:03 +0000
ROA not before: Sat 06 Jan 2024 13:23:03 +0000
ROA not after: Fri 05 Apr 2024 12:23:03 +0000
asID: 200954
IP address blocks: 2602:f9df:200::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:76:b1:ef:ea:c2:b5:22:b8:b7:7b:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Validity
Not Before: Jan 6 13:23:03 2024 GMT
Not After : Apr 5 12:23:03 2024 GMT
Subject: CN=ee735016-6a10-44ef-8d70-0bce2d141220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ef:9a:53:41:7a:ee:8a:a1:38:e4:e3:24:42:
67:a1:63:a7:4e:be:a1:12:4a:6b:3e:53:cd:f0:13:
62:4e:e3:09:1a:46:6e:48:f8:a8:0b:b3:f8:c9:ce:
7a:e5:88:94:5c:d3:bb:a1:01:92:82:47:0f:8e:7b:
76:a9:99:0c:34:ca:a9:a5:47:f4:e8:5d:1f:00:c2:
0d:20:49:e7:da:9c:d2:79:4f:ad:9e:86:9c:55:1c:
77:e0:28:bc:83:30:18:bb:ed:3d:82:eb:7c:fe:db:
20:03:43:95:d8:1b:52:0a:d4:1c:b2:06:f1:d2:83:
75:51:76:5f:35:ad:70:1a:59:4d:80:8a:9e:b3:0c:
0a:8e:75:e8:6b:97:40:1a:f5:9e:5e:f7:e8:27:b3:
7c:b4:93:2e:d0:29:92:2b:ef:2f:15:40:a9:be:7e:
db:f7:54:36:0f:72:55:4d:6a:e0:b0:10:9f:21:00:
68:8c:3c:37:cd:da:00:df:bc:de:e7:73:49:77:16:
fc:32:c8:bd:83:e2:a7:1d:78:4f:59:98:a9:ff:da:
bc:8c:70:9c:d4:47:8e:ea:8b:05:71:bd:00:b7:a6:
f0:92:5f:4f:e0:fc:01:d2:17:dd:bd:dd:0e:bf:93:
3c:c4:58:25:75:83:03:cd:db:15:89:3d:15:e2:a2:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:68:7A:99:90:B2:0E:54:80:B8:C5:D5:BD:D0:8E:2F:10:77:B1:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/857706eb-5a24-3b88-9168-985fbf103144.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
X509v3 Authority Key Identifier:
keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9df:200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:1c:9b:a4:b7:25:28:17:6c:b6:a5:ba:77:64:14:39:49:ab:
ab:0c:47:07:c8:8f:d0:da:30:7a:7f:4d:1e:6c:b3:65:55:a9:
f2:a2:24:6d:fb:62:e4:9e:6c:8c:63:e0:9c:2a:19:86:d5:76:
f2:84:5a:ee:03:97:3b:45:3c:d6:f4:a3:2d:96:80:0e:d4:14:
e2:10:80:1f:12:cb:ef:7d:19:8f:01:9d:e1:f5:c3:60:a4:a8:
17:2b:a3:39:19:53:1f:0c:23:9d:95:e5:3f:57:30:1c:ae:b8:
22:17:34:f9:52:0a:2a:a8:7a:b7:42:3e:f8:ac:67:72:5a:15:
19:aa:bd:04:08:ef:ad:cb:ea:55:e7:31:a6:c3:7a:1b:c7:e8:
e6:14:13:49:39:c5:fa:9c:22:dd:7c:c5:03:5a:cd:0b:d5:7a:
43:05:a1:a4:22:38:00:94:5f:fd:85:41:af:1e:83:94:38:48:
2f:cb:cc:61:c9:a6:0e:7f:66:07:c0:f3:7a:ae:55:92:ac:f2:
a4:71:00:6d:11:c4:a7:d5:19:9d:9a:55:65:82:15:55:97:6f:
a3:0d:2b:4c:13:71:f0:7b:96:20:1b:a0:a1:0f:1a:90:5b:98:
49:7e:2a:f7:51:92:6d:9d:37:f5:02:71:02:ef:48:af:3a:c4:
1d:a9:e7:d2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWER2se/qwrUiuLd7qQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDk2ZWE2ZTQtOTVhMy00NTA4LThjMmYtMDQ2YWVkOTg4
ZWJlMB4XDTI0MDEwNjEzMjMwM1oXDTI0MDQwNTEyMjMwM1owLzEtMCsGA1UEAxMk
ZWU3MzUwMTYtNmExMC00NGVmLThkNzAtMGJjZTJkMTQxMjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie+aU0F67oqhOOTjJEJnoWOnTr6hEkprPlPN
8BNiTuMJGkZuSPioC7P4yc565YiUXNO7oQGSgkcPjnt2qZkMNMqppUf06F0fAMIN
IEnn2pzSeU+tnoacVRx34Ci8gzAYu+09gut8/tsgA0OV2BtSCtQcsgbx0oN1UXZf
Na1wGllNgIqeswwKjnXoa5dAGvWeXvfoJ7N8tJMu0CmSK+8vFUCpvn7b91Q2D3JV
TWrgsBCfIQBojDw3zdoA37ze53NJdxb8Msi9g+KnHXhPWZip/9q8jHCc1EeO6osF
cb0At6bwkl9P4PwB0hfdvd0Ov5M8xFgldYMDzdsViT0V4qK25wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKhoepmQsg5UgLjF1b3Qji8Qd7FiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZl
YTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZhZWQ5ODhlYmUvODU3NzA2ZWItNWEyNC0z
Yjg4LTkxNjgtOTg1ZmJmMTAzMTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDk2ZWE2ZTQtOTVhMy00NTA4LThj
MmYtMDQ2YWVkOTg4ZWJlL2Q5NmVhNmU0LTk1YTMtNDUwOC04YzJmLTA0NmFlZDk4
OGViZS5jcmwwHwYDVR0jBBgwFoAU4sOVlIX/CSihjYr1q3rJCtav0+YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZlYTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZh
ZWQ5ODhlYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL53wIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAhRybpLclKBdstqW6d2QUOUmrqwxHB8iP0Nowen9NHmyzZVWp8qIk
bfti5J5sjGPgnCoZhtV28oRa7gOXO0U81vSjLZaADtQU4hCAHxLL730ZjwGd4fXD
YKSoFyujORlTHwwjnZXlP1cwHK64Ihc0+VIKKqh6t0I++KxncloVGaq9BAjvrcvq
VecxpsN6G8fo5hQTSTnF+pwi3XzFA1rNC9V6QwWhpCI4AJRf/YVBrx6DlDhIL8vM
YcmmDn9mB8Dzeq5VkqzypHEAbRHEp9UZnZpVZYIVVZdvow0rTBNx8HuWIBugoQ8a
kFuYSX4q91GSbZ039QJxAu9IrzrEHann0g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org