Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0afc19be-839f-3d3f-bfbd-63cd80f6e309.roa
File: 0afc19be-839f-3d3f-bfbd-63cd80f6e309.roa (raw, json)
Hash identifier: YVF8rztm+LvUkovMfIiJWEqOV6YpDNX468x/dYV8LiA=
Subject key identifier: FF:59:A9:E6:A4:6B:87:19:67:64:F1:33:62:DE:29:F6:74:8D:EC:FB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285844FE2AD2E4B783C122E9275680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0afc19be-839f-3d3f-bfbd-63cd80f6e309.roa
Signing time: Sat 24 Feb 2024 02:00:26 +0000
ROA not before: Sat 24 Feb 2024 02:00:26 +0000
ROA not after: Fri 24 May 2024 01:00:26 +0000
asID: 701
IP address blocks: 2600:40ff:fff9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:fe:2a:d2:e4:b7:83:c1:22:e9:27:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 24 02:00:26 2024 GMT
Not After : May 24 01:00:26 2024 GMT
Subject: CN=9d59c7aa-cd67-4651-8c12-3d56da13c3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:84:26:7e:ad:45:02:ad:12:f2:60:c2:de:
af:12:17:a6:c3:f5:a6:ad:32:7b:01:47:49:de:60:
77:84:77:ae:a7:d8:9f:e1:f4:5b:9f:af:6b:74:b3:
a3:13:db:6f:fe:50:2d:5a:71:69:cb:fc:2d:85:27:
70:c2:48:94:cc:d9:37:49:31:f7:83:37:f9:81:39:
df:ea:34:88:20:db:3d:35:b7:b6:f2:65:10:18:dd:
60:76:8f:db:ad:bc:a2:70:79:50:c8:1a:35:2d:f9:
5a:78:81:fb:b4:72:6b:6e:a5:f6:09:ef:67:41:43:
7b:20:24:f5:c8:82:5f:46:43:30:1f:ee:a4:0d:8b:
84:43:04:62:52:63:93:75:68:27:d4:d1:b2:f1:86:
94:6e:c0:62:23:da:d8:d0:22:e2:d6:0b:d8:cd:4d:
cd:6f:8e:13:30:a9:57:32:d0:8c:f3:85:f7:26:03:
5d:41:a4:9d:88:1e:1f:a4:26:23:d8:df:d5:16:1e:
78:75:3c:fd:f8:1c:5d:f7:49:2e:b1:0a:52:a0:54:
a6:8b:cc:3e:4f:29:c5:d2:e2:22:8b:d8:33:d5:c5:
ef:21:da:62:aa:aa:87:cc:14:69:9e:de:05:21:13:
d9:97:58:e8:4a:f4:cc:b1:57:2f:fe:94:e1:6d:29:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:59:A9:E6:A4:6B:87:19:67:64:F1:33:62:DE:29:F6:74:8D:EC:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0afc19be-839f-3d3f-bfbd-63cd80f6e309.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:40ff:fff9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:2d:76:bd:41:47:da:a3:05:f2:a8:77:6c:b2:34:16:77:6f:
b7:7f:06:5d:00:65:91:e9:2f:01:a0:a4:10:bf:7a:86:92:b3:
a2:83:c2:92:28:94:3b:9a:f3:c5:dd:f0:3f:b7:d8:de:af:51:
6b:35:36:01:c2:9a:6b:75:53:39:86:4e:91:3e:05:3d:95:14:
99:cc:88:4e:09:a4:4d:79:57:04:1b:e9:f8:0a:b4:a1:1d:e8:
22:fb:03:58:8b:a9:97:14:2d:f9:48:44:a3:03:bd:f4:e5:68:
b2:e4:df:e9:fd:b6:ce:d1:7d:1c:39:c7:85:f2:be:9d:3f:f8:
a2:a7:48:d7:80:66:df:24:f7:35:f8:a6:71:fd:3c:33:44:b6:
54:84:e3:bc:2b:40:51:ca:7b:90:7b:90:fe:ca:b8:f6:98:e2:
73:6c:71:5f:7a:ac:8e:f0:fb:3a:f1:ec:c2:35:0a:58:0a:3e:
82:56:b0:dc:d3:5b:a1:60:77:90:74:61:30:07:32:ae:04:5d:
39:50:77:17:ab:90:c3:b7:66:de:a0:c3:9a:33:e1:60:a6:b3:
0d:a1:ae:13:5b:f3:ae:e7:b0:2c:f1:c3:e1:df:15:04:53:54:
71:11:2f:35:ef:b6:c4:ac:f9:c3:5b:23:7a:dc:44:a1:5d:cc:
2f:9f:66:9d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET+KtLkt4PBIuknVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDIyNDAyMDAyNloXDTI0MDUyNDAxMDAyNlowLzEtMCsGA1UEAxMk
OWQ1OWM3YWEtY2Q2Ny00NjUxLThjMTItM2Q1NmRhMTNjM2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS2EJn6tRQKtEvJgwt6vEhemw/WmrTJ7AUdJ
3mB3hHeup9if4fRbn69rdLOjE9tv/lAtWnFpy/wthSdwwkiUzNk3STH3gzf5gTnf
6jSIINs9Nbe28mUQGN1gdo/brbyicHlQyBo1LflaeIH7tHJrbqX2Ce9nQUN7ICT1
yIJfRkMwH+6kDYuEQwRiUmOTdWgn1NGy8YaUbsBiI9rY0CLi1gvYzU3Nb44TMKlX
MtCM84X3JgNdQaSdiB4fpCYj2N/VFh54dTz9+Bxd90kusQpSoFSmi8w+TynF0uIi
i9gz1cXvIdpiqqqHzBRpnt4FIRPZl1joSvTMsVcv/pThbSkWjQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP9Zqeaka4cZZ2TxM2LeKfZ0jez7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGFmYzE5YmUtODM5Zi0z
ZDNmLWJmYmQtNjNjZDgwZjZlMzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBA///5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIAtdr1BR9qjBfKod2yyNBZ3b7d/Bl0AZZHpLwGgpBC/eoaSs6KD
wpIolDua88Xd8D+32N6vUWs1NgHCmmt1UzmGTpE+BT2VFJnMiE4JpE15VwQb6fgK
tKEd6CL7A1iLqZcULflIRKMDvfTlaLLk3+n9ts7RfRw5x4Xyvp0/+KKnSNeAZt8k
9zX4pnH9PDNEtlSE47wrQFHKe5B7kP7KuPaY4nNscV96rI7w+zrx7MI1ClgKPoJW
sNzTW6Fgd5B0YTAHMq4EXTlQdxerkMO3Zt6gw5oz4WCmsw2hrhNb867nsCzxw+Hf
FQRTVHERLzXvtsSs+cNbI3rcRKFdzC+fZp0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:25 2024 by rpki-client on console-ams.rpki-client.org