Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/849be31d-6be1-3234-8196-2fcfdb579023.roa
File: 849be31d-6be1-3234-8196-2fcfdb579023.roa (raw, json)
Hash identifier: 8pbLXv/oCrAiXZUNNKcnIJFlQYdr6k62Tt9ZjomL6MY=
Subject key identifier: F6:51:97:CE:A6:7C:21:2F:A1:7F:86:CD:4D:D2:F5:73:9C:23:07:8B
Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial: 010D0C9F432858376527E5303E24F2965BA68F00
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/849be31d-6be1-3234-8196-2fcfdb579023.roa
Signing time: Tue 11 Feb 2020 05:00:00 +0000
ROA not before: Tue 11 Feb 2020 05:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 394354
IP address blocks: 2620:10a:801b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:65:27:e5:30:3e:24:f2:96:5b:a6:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Validity
Not Before: Feb 11 05:00:00 2020 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=e27ab72d-2845-4719-9bf4-c244ee0f4c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:7e:55:8d:31:bb:4f:6b:79:59:1c:15:a3:
47:63:0b:55:ee:12:f0:dd:3f:ce:4c:21:0f:89:65:
30:1a:10:22:0a:7c:dd:33:c4:f7:0a:27:2b:12:6a:
fd:33:68:ec:2e:75:2c:00:0e:f0:7f:d2:83:9c:06:
aa:90:5a:b5:23:bb:e8:8b:09:bf:fd:f7:a9:85:49:
33:20:e5:48:35:fd:cf:77:84:61:c5:f1:47:85:d6:
c0:dd:31:cb:84:32:3f:0c:81:0a:27:a9:75:77:5d:
df:9b:d4:62:86:a7:d6:03:d2:7b:e3:df:62:8d:5a:
70:8e:15:91:87:d8:6d:df:7b:84:65:d1:b8:a3:5b:
a9:bc:8a:95:b9:bb:0a:11:2b:fc:b6:92:a7:07:b6:
99:5e:16:99:d1:ec:75:0d:1d:88:25:d7:36:7e:cc:
6e:a5:36:ce:a9:ba:12:c3:2b:2d:34:cc:0f:fa:df:
70:c1:e7:52:15:80:9c:a0:f7:16:cd:41:98:61:76:
81:98:c7:fb:f8:dc:41:32:4d:1c:5e:e2:07:9d:13:
5a:a0:d5:8b:a0:e2:96:16:18:16:66:59:cf:2f:21:
3b:b2:c3:7b:37:cc:4e:0d:27:1b:81:4b:68:5f:8f:
1e:46:b2:5b:7d:dc:44:4d:0d:2b:88:93:93:4a:d5:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:51:97:CE:A6:7C:21:2F:A1:7F:86:CD:4D:D2:F5:73:9C:23:07:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/849be31d-6be1-3234-8196-2fcfdb579023.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
X509v3 Authority Key Identifier:
keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10a:801b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:bd:ba:cc:98:f3:e4:a7:8f:35:02:69:53:4c:e0:aa:44:4b:
8a:6d:e9:de:1b:c7:82:fa:b0:5b:c2:4e:f1:79:94:15:89:6d:
37:33:fe:57:eb:11:82:75:92:89:a1:02:17:e5:83:05:b9:f9:
a2:c0:04:a5:e2:26:d5:3b:7c:48:2e:66:9b:d1:66:b3:06:69:
92:39:84:ba:8e:06:74:71:47:97:3a:ce:a8:de:47:60:58:90:
66:f6:e8:f3:b1:b4:62:16:4d:0e:47:9f:7e:fb:50:ad:4e:e4:
0d:97:25:1b:3c:6d:8e:fd:25:2f:c8:a0:26:cb:6e:57:19:3f:
68:54:33:0c:07:b3:0b:a4:93:f2:f5:f7:fe:fa:ee:24:8a:38:
f6:5c:32:b2:e0:2a:d1:ef:ca:19:bf:da:31:9e:31:db:a9:fb:
1c:53:16:dd:92:73:a4:2d:ab:a3:3d:10:80:36:de:00:aa:7a:
ca:a3:f1:2e:e3:ea:77:c3:f8:aa:98:b2:fb:8a:9c:07:85:d0:
80:a3:10:b0:f7:18:cc:ab:e3:2e:84:10:c6:64:2b:fd:4f:b7:
0c:3a:2c:31:a1:e6:97:a5:47:5d:93:bc:35:26:87:e4:76:cf:
52:4c:e2:7a:fc:dc:af:d2:8b:17:56:c5:9c:22:97:9b:17:bc:
39:e3:65:9a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDdlJ+UwPiTyllumjwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx
OGU4MB4XDTIwMDIxMTA1MDAwMFoXDTIyMTIyOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZTI3YWI3MmQtMjg0NS00NzE5LTliZjQtYzI0NGVlMGY0YzI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukF+VY0xu09reVkcFaNHYwtV7hLw3T/OTCEP
iWUwGhAiCnzdM8T3CicrEmr9M2jsLnUsAA7wf9KDnAaqkFq1I7voiwm//fephUkz
IOVINf3Pd4RhxfFHhdbA3THLhDI/DIEKJ6l1d13fm9RihqfWA9J7499ijVpwjhWR
h9ht33uEZdG4o1upvIqVubsKESv8tpKnB7aZXhaZ0ex1DR2IJdc2fsxupTbOqboS
wystNMwP+t9wwedSFYCcoPcWzUGYYXaBmMf7+NxBMk0cXuIHnRNaoNWLoOKWFhgW
ZlnPLyE7ssN7N8xODScbgUtoX48eRrJbfdxETQ0riJOTStUYWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPZRl86mfCEvoX+GzU3S9XOcIweLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2
MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvODQ5YmUzMWQtNmJlMS0z
MjM0LTgxOTYtMmZjZmRiNTc5MDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2
MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi
MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5
NzZhYjE4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABCoAb
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABi9usyY8+SnjzUCaVNM4KpES4pt6d4bx4L6sFvCTvF5lBWJbTcz
/lfrEYJ1komhAhflgwW5+aLABKXiJtU7fEguZpvRZrMGaZI5hLqOBnRxR5c6zqje
R2BYkGb26POxtGIWTQ5Hn377UK1O5A2XJRs8bY79JS/IoCbLblcZP2hUMwwHswuk
k/L19/767iSKOPZcMrLgKtHvyhm/2jGeMdup+xxTFt2Sc6Qtq6M9EIA23gCqesqj
8S7j6nfD+KqYsvuKnAeF0ICjELD3GMyr4y6EEMZkK/1Ptww6LDGh5pelR12TvDUm
h+R2z1JM4nr83K/SixdWxZwil5sXvDnjZZo=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:13:17 2025 by rpki-client