Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/5bce6833-075a-3aa0-b814-4a12bc2bdcd0.roa
File: 5bce6833-075a-3aa0-b814-4a12bc2bdcd0.roa (raw, json)
Hash identifier: feGERBuMnVlQbRrv3EOzrolQQ382LK5IvhByZMhyaL0=
Subject key identifier: 8A:5A:C5:3D:BF:B7:10:26:A2:08:08:AE:05:EA:89:53:A1:C2:CD:96
Certificate issuer: /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial: 010D0C9F4328584519D2B91113477124AD2B90D8
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/5bce6833-075a-3aa0-b814-4a12bc2bdcd0.roa
Signing time: Mon 04 Mar 2024 23:45:52 +0000
ROA not before: Mon 04 Mar 2024 23:45:52 +0000
ROA not after: Sun 02 Jun 2024 22:45:52 +0000
asID: 396908
IP address blocks: 2602:f956::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:19:d2:b9:11:13:47:71:24:ad:2b:90:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Validity
Not Before: Mar 4 23:45:52 2024 GMT
Not After : Jun 2 22:45:52 2024 GMT
Subject: CN=90b894c0-edac-473c-9cfe-e143f677ced5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:76:75:81:74:8d:f0:15:e3:49:21:d6:27:0f:
2a:20:dc:b1:6e:3b:0c:3d:70:43:ef:b7:ca:ef:c8:
06:6b:1e:b5:6f:f2:63:12:2d:51:31:e9:94:f1:76:
58:8b:1d:39:16:bf:84:46:3c:ac:08:2d:bb:04:7f:
1c:76:a9:74:74:52:47:94:27:ae:52:ac:f0:98:ea:
42:a2:ba:58:a0:93:53:dc:9d:a1:b5:1f:59:8b:f9:
fd:a8:03:3d:69:79:e0:44:64:60:22:76:64:3b:3f:
1d:0a:22:01:c2:9f:31:bf:20:8e:cb:22:85:f3:69:
1c:1e:ac:87:dd:39:ff:92:8c:28:1d:f2:b6:0c:50:
4f:8d:c0:d8:98:42:26:89:cb:31:b0:3b:6b:ea:11:
f1:3a:9d:70:ec:65:8d:61:8a:b5:c7:8f:e5:50:dc:
df:61:9f:36:62:a1:41:40:a7:d3:05:a0:ca:96:9d:
8f:14:ca:0a:dd:4f:f9:84:3d:ca:5d:cb:b1:26:85:
98:9f:0c:8a:b3:fb:d8:df:8d:81:e5:e5:ad:a6:62:
12:b5:48:ac:2e:3b:ee:b9:54:30:be:c9:f2:75:b1:
14:60:cf:d9:4f:70:3c:da:8f:85:19:eb:f1:20:d8:
73:ab:da:7d:81:ad:90:22:90:3b:a3:2e:45:f0:bb:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5A:C5:3D:BF:B7:10:26:A2:08:08:AE:05:EA:89:53:A1:C2:CD:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/5bce6833-075a-3aa0-b814-4a12bc2bdcd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
X509v3 Authority Key Identifier:
keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f956::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:5d:ff:6b:4a:ae:eb:a1:1a:64:9d:10:29:8f:b4:69:d2:90:
4a:0b:3b:d3:ec:68:07:fe:ab:64:a6:19:4f:e6:50:5e:9a:50:
9f:44:cd:07:d7:6b:7a:4e:74:91:9b:d2:25:c3:26:1b:b0:18:
87:b8:22:81:c5:73:87:63:ef:d1:7f:fd:96:a5:2f:11:13:a1:
90:3c:15:cd:f7:83:17:0a:6b:37:cc:c7:a2:75:fc:ac:24:7c:
06:9f:b9:24:f6:17:20:e6:2e:12:4b:f6:6b:3f:c2:96:36:50:
7a:ff:47:97:02:4b:75:9f:c8:3f:ca:e6:7e:d4:b3:a1:b8:9d:
25:3d:a0:58:81:28:32:3e:b4:79:6e:78:c8:fc:d7:43:9e:2d:
67:07:2f:64:e0:10:d8:f1:94:e0:51:d3:b9:43:26:b7:72:2a:
89:ad:7c:6c:e4:67:88:88:90:70:72:d2:20:96:ea:0f:d8:97:
ea:28:ff:da:7a:0f:ba:46:b6:18:66:d8:6e:cb:b5:1e:13:7f:
5b:89:a2:7c:2f:af:51:b4:8c:8a:4f:dd:df:cb:28:94:6c:aa:
a7:24:a1:9e:56:d7:d0:b7:64:d9:08:ca:b8:05:20:bc:10:00:
c4:fe:f7:ff:77:64:8d:d5:f4:6c:db:c7:d6:cf:cb:82:1b:4f:
3e:7d:f5:e1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEUZ0rkRE0dxJK0rkNgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIyYzI3Y2EtZmI3Yy00Y2FkLTlmOWItNGY3NTRmODY0
MjYzMB4XDTI0MDMwNDIzNDU1MloXDTI0MDYwMjIyNDU1MlowLzEtMCsGA1UEAxMk
OTBiODk0YzAtZWRhYy00NzNjLTljZmUtZTE0M2Y2NzdjZWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnZ1gXSN8BXjSSHWJw8qINyxbjsMPXBD77fK
78gGax61b/JjEi1RMemU8XZYix05Fr+ERjysCC27BH8cdql0dFJHlCeuUqzwmOpC
orpYoJNT3J2htR9Zi/n9qAM9aXngRGRgInZkOz8dCiIBwp8xvyCOyyKF82kcHqyH
3Tn/kowoHfK2DFBPjcDYmEImicsxsDtr6hHxOp1w7GWNYYq1x4/lUNzfYZ82YqFB
QKfTBaDKlp2PFMoK3U/5hD3KXcuxJoWYnwyKs/vY342B5eWtpmIStUisLjvuuVQw
vsnydbEUYM/ZT3A82o+FGevxINhzq9p9ga2QIpA7oy5F8LuQXwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIpaxT2/txAmoggIrgXqiVOhws2WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJj
MjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1NGY4NjQyNjMvNWJjZTY4MzMtMDc1YS0z
YWEwLWI4MTQtNGExMmJjMmJkY2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIyYzI3Y2EtZmI3Yy00Y2FkLTlm
OWItNGY3NTRmODY0MjYzL2ViMmMyN2NhLWZiN2MtNGNhZC05ZjliLTRmNzU0Zjg2
NDI2My5jcmwwHwYDVR0jBBgwFoAUz7laojwbIP8QynSPJVz1CYmivlEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJjMjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1
NGY4NjQyNjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5VgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZl3/a0qu66EaZJ0QKY+0adKQSgs70+xoB/6rZKYZT+ZQXppQn0TN
B9drek50kZvSJcMmG7AYh7gigcVzh2Pv0X/9lqUvEROhkDwVzfeDFwprN8zHonX8
rCR8Bp+5JPYXIOYuEkv2az/CljZQev9HlwJLdZ/IP8rmftSzobidJT2gWIEoMj60
eW54yPzXQ54tZwcvZOAQ2PGU4FHTuUMmt3Iqia18bORniIiQcHLSIJbqD9iX6ij/
2noPuka2GGbYbsu1HhN/W4mifC+vUbSMik/d38solGyqpyShnlbX0Ldk2QjKuAUg
vBAAxP73/3dkjdX0bNvH1s/LghtPPn314Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org