Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/f855240e-268d-3a8e-b52a-e6af64f647de.roa
File: f855240e-268d-3a8e-b52a-e6af64f647de.roa (raw, json)
Hash identifier: l6neshM4NUshO2l19UgOuAYVnURv3NFCCRbG7mh93nA=
Subject key identifier: 20:37:DB:3B:F3:E0:BD:53:7A:3B:C3:1C:23:15:E2:1F:65:E5:AC:E9
Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial: 010D0C9F43285843EB846B210E05BC150A2BBBE0
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/f855240e-268d-3a8e-b52a-e6af64f647de.roa
Signing time: Fri 17 Nov 2023 16:53:58 +0000
ROA not before: Fri 17 Nov 2023 16:53:58 +0000
ROA not after: Thu 15 Feb 2024 16:53:58 +0000
asID: 203888
IP address blocks: 2602:f9df::/40 maxlen: 40
2602:f9df:300::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:eb:84:6b:21:0e:05:bc:15:0a:2b:bb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Validity
Not Before: Nov 17 16:53:58 2023 GMT
Not After : Feb 15 16:53:58 2024 GMT
Subject: CN=b2b299ff-3e49-47d8-98c8-67a02a2df309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:87:85:7c:a6:c3:e2:5b:bb:be:77:55:b5:cd:
14:52:82:ac:d8:96:2f:d6:a6:e1:4f:18:e1:2e:58:
ea:bd:21:58:57:96:4c:c1:d5:95:8f:05:6a:41:76:
33:14:00:87:c3:2f:1f:15:01:67:46:8a:99:d9:f5:
d8:8e:30:eb:78:04:f0:a2:58:ea:c9:4e:e7:e8:1d:
91:cb:b6:c5:2a:f9:62:1f:15:01:52:22:6f:10:6a:
8a:7a:3e:b2:f8:05:80:90:b0:99:f7:77:50:ea:cd:
35:07:09:90:04:7f:01:e8:87:ce:7c:61:42:92:aa:
0e:e5:03:8e:7b:76:28:55:20:82:d1:b3:22:84:53:
d0:29:4e:e3:80:9c:dc:08:de:8d:39:0b:c8:52:62:
4d:da:7e:dc:f8:73:bd:3b:8d:2e:2c:47:68:d9:3e:
3a:50:fd:03:33:9e:bf:34:7f:eb:cf:95:5f:da:29:
64:28:d4:47:e7:dc:6d:47:61:d6:5c:42:b3:6b:bf:
88:dd:4d:a8:4f:f9:5c:96:60:72:f5:d2:81:5f:d8:
bd:03:7c:9f:30:13:e6:7d:67:1a:cd:43:43:e9:c9:
8b:91:0a:fe:3f:99:c7:34:01:7c:e4:02:d4:c2:b1:
2d:1b:c9:9b:a4:55:6e:0b:a0:3e:b6:7f:70:fc:1d:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:37:DB:3B:F3:E0:BD:53:7A:3B:C3:1C:23:15:E2:1F:65:E5:AC:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/f855240e-268d-3a8e-b52a-e6af64f647de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
X509v3 Authority Key Identifier:
keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9df::/40
2602:f9df:300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:d4:04:d9:52:65:6d:5e:bd:c8:f5:03:a2:07:2e:c4:56:3a:
d7:bd:23:c7:1b:58:66:ef:ae:7f:29:a1:ba:58:04:c3:ad:65:
e6:6f:ff:3b:d9:01:c3:43:59:d5:f2:2b:ea:d5:71:47:ec:d8:
bc:00:67:dd:88:60:81:e2:58:3d:5e:90:9f:27:42:85:7c:f0:
12:4e:73:fc:21:ed:95:5b:76:fd:ea:63:44:59:3a:bc:7c:21:
99:cb:e4:10:ff:f8:73:fa:8f:9a:3c:e8:00:fe:b6:43:87:2b:
0f:2e:40:64:b0:1b:b2:ca:d9:b6:6e:0a:b2:b0:4e:f6:0e:f5:
dc:80:31:1b:07:80:04:ba:a1:3a:90:95:ea:94:1b:8e:fd:48:
cb:51:08:15:ce:d6:fd:58:3a:07:f1:c5:db:18:a5:e4:bf:7c:
25:40:0f:8f:15:70:5f:87:80:35:2f:d0:db:c8:a7:6f:57:36:
d7:28:c3:d3:bc:1b:14:1a:9a:a1:44:0c:31:a0:e0:af:e7:2c:
35:f8:74:b4:a2:ff:65:47:2d:ad:82:27:66:a4:90:6c:91:33:
37:99:bb:50:9a:cd:8a:3a:5d:0f:c7:11:ab:5c:67:ff:50:3d:
46:dd:31:65:32:2b:03:57:8a:de:ea:70:e3:fa:48:69:f2:b4:
ae:1c:94:22
-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgIUAQ0Mn0MoWEPrhGshDgW8FQoru+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDk2ZWE2ZTQtOTVhMy00NTA4LThjMmYtMDQ2YWVkOTg4
ZWJlMB4XDTIzMTExNzE2NTM1OFoXDTI0MDIxNTE2NTM1OFowLzEtMCsGA1UEAxMk
YjJiMjk5ZmYtM2U0OS00N2Q4LTk4YzgtNjdhMDJhMmRmMzA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoeFfKbD4lu7vndVtc0UUoKs2JYv1qbhTxjh
LljqvSFYV5ZMwdWVjwVqQXYzFACHwy8fFQFnRoqZ2fXYjjDreATwoljqyU7n6B2R
y7bFKvliHxUBUiJvEGqKej6y+AWAkLCZ93dQ6s01BwmQBH8B6IfOfGFCkqoO5QOO
e3YoVSCC0bMihFPQKU7jgJzcCN6NOQvIUmJN2n7c+HO9O40uLEdo2T46UP0DM56/
NH/rz5Vf2ilkKNRH59xtR2HWXEKza7+I3U2oT/lclmBy9dKBX9i9A3yfMBPmfWca
zUND6cmLkQr+P5nHNAF85ALUwrEtG8mbpFVuC6A+tn9w/B2mnQIDAQABo4IDXzCC
A1swHQYDVR0OBBYEFCA32zvz4L1TejvDHCMV4h9l5azpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZl
YTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZhZWQ5ODhlYmUvZjg1NTI0MGUtMjY4ZC0z
YThlLWI1MmEtZTZhZjY0ZjY0N2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDk2ZWE2ZTQtOTVhMy00NTA4LThj
MmYtMDQ2YWVkOTg4ZWJlL2Q5NmVhNmU0LTk1YTMtNDUwOC04YzJmLTA0NmFlZDk4
OGViZS5jcmwwHwYDVR0jBBgwFoAU4sOVlIX/CSihjYr1q3rJCtav0+YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZlYTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZh
ZWQ5ODhlYmUuY2VyMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAJgL53wAD
BgAmAvnfAzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW
LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G
CSqGSIb3DQEBCwUAA4IBAQCF1ATZUmVtXr3I9QOiBy7EVjrXvSPHG1hm765/KaG6
WATDrWXmb/872QHDQ1nV8ivq1XFH7Ni8AGfdiGCB4lg9XpCfJ0KFfPASTnP8Ie2V
W3b96mNEWTq8fCGZy+QQ//hz+o+aPOgA/rZDhysPLkBksBuyytm2bgqysE72DvXc
gDEbB4AEuqE6kJXqlBuO/UjLUQgVztb9WDoH8cXbGKXkv3wlQA+PFXBfh4A1L9Db
yKdvVzbXKMPTvBsUGpqhRAwxoOCv5yw1+HS0ov9lRy2tgidmpJBskTM3mbtQms2K
Ol0PxxGrXGf/UD1G3TFlMisDV4re6nDj+khp8rSuHJQi
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org