Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f00239e-f784-3aee-b4b7-8b34e8aa41b5.roa
File: 0f00239e-f784-3aee-b4b7-8b34e8aa41b5.roa (raw, json)
Hash identifier: X4YWHnoYExvb2bQWSWDJbkJYcwfyP0OVmLDH90IXw5w=
Subject key identifier: E0:43:37:21:6D:E1:46:0C:36:7C:1F:F9:4E:5F:93:9E:67:D6:7F:B8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848696073311810475B1DAD66E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f00239e-f784-3aee-b4b7-8b34e8aa41b5.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1010:b0a0::/47 maxlen: 47
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:73:31:18:10:47:5b:1d:ad:66:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=e904f82b-9950-4eed-b0b9-59e12f935d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f3:b2:f5:e6:dc:85:64:cd:7b:7d:4a:4d:2b:
fc:c2:9e:5b:6f:fb:03:f7:44:67:b8:4e:c4:a2:28:
ea:ac:cc:e1:67:f6:75:bd:1d:31:73:dd:ac:e5:b5:
72:93:da:eb:e6:ed:96:bc:f8:e1:5b:45:3f:41:e1:
aa:db:c3:a0:d7:19:ac:52:5d:d3:91:24:84:72:77:
a9:4b:1c:c6:5f:95:b6:0a:89:03:ff:27:09:31:f7:
ac:d8:e9:4b:41:46:30:4b:fd:e0:e7:fa:c0:c3:13:
28:bb:71:fb:b2:c1:06:25:5a:4f:1f:9f:21:05:f4:
e6:b8:79:d4:57:86:5c:18:5b:d6:db:41:bb:dd:c7:
3f:ee:0f:a8:7f:c2:84:c2:c0:57:8c:a4:07:e7:0b:
85:64:74:b6:0e:4c:33:11:97:06:91:b7:73:76:6c:
a8:31:ac:4a:29:6a:50:b4:9f:fe:5b:ee:a6:82:8e:
c2:62:e9:02:13:bf:b5:33:f5:2c:de:c7:53:64:2d:
36:0e:98:63:5f:9d:b2:57:a8:f1:75:bd:ce:f5:a7:
60:38:ee:80:e7:4e:4e:32:0d:2b:02:9e:3b:b0:75:
ba:ee:11:7e:fe:8e:ec:8f:64:cb:30:df:ea:25:aa:
6b:35:63:23:da:65:74:60:18:92:4f:98:b5:a1:65:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:43:37:21:6D:E1:46:0C:36:7C:1F:F9:4E:5F:93:9E:67:D6:7F:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f00239e-f784-3aee-b4b7-8b34e8aa41b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1010:b0a0::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:b5:c9:25:ca:32:c3:05:b9:2b:15:51:d5:6b:83:e6:3e:5e:
09:87:d3:26:2f:39:0d:1d:4a:da:e5:6f:bd:3a:fa:38:79:2c:
e9:5f:5b:d1:58:8c:3f:11:8d:c5:31:8c:1f:f5:aa:5a:86:13:
61:01:84:fb:b2:ed:e2:57:62:49:39:13:01:78:8d:4a:20:ae:
63:f3:45:ad:88:7c:02:05:e4:51:de:16:d4:39:43:77:00:18:
b1:e4:3b:e5:a0:f1:d9:41:99:d4:64:1b:cd:72:7a:8b:c3:69:
45:ec:54:0b:9a:c7:2c:16:70:ef:46:ad:a0:56:b9:63:6e:b7:
00:16:3c:76:13:02:40:bf:37:4a:60:3b:3a:3d:fe:d4:2b:d1:
68:8c:a4:35:2a:0d:4d:2e:62:4f:42:35:6e:2e:57:15:fd:3c:
1b:f8:55:10:6e:5d:6b:29:5d:91:66:09:c2:c1:5c:d4:ea:37:
db:f3:dc:8a:93:20:41:b2:65:3a:41:d7:56:4c:71:29:4c:08:
86:e2:21:8b:e5:98:a3:9a:9a:5e:c5:7b:b3:88:1d:bf:25:37:
4e:ea:4c:76:c0:a3:20:56:6c:1b:1d:6d:cc:4f:18:e9:3b:8a:
90:79:f1:cb:ef:bc:46:15:8f:1a:60:0b:4d:ee:74:c7:41:7c:
79:91:82:9f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhpYHMxGBBHWx2tZuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk
ZTkwNGY4MmItOTk1MC00ZWVkLWIwYjktNTllMTJmOTM1ZDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifOy9ebchWTNe31KTSv8wp5bb/sD90RnuE7E
oijqrMzhZ/Z1vR0xc92s5bVyk9rr5u2WvPjhW0U/QeGq28Og1xmsUl3TkSSEcnep
SxzGX5W2CokD/ycJMfes2OlLQUYwS/3g5/rAwxMou3H7ssEGJVpPH58hBfTmuHnU
V4ZcGFvW20G73cc/7g+of8KEwsBXjKQH5wuFZHS2DkwzEZcGkbdzdmyoMaxKKWpQ
tJ/+W+6mgo7CYukCE7+1M/Us3sdTZC02DphjX52yV6jxdb3O9adgOO6A505OMg0r
Ap47sHW67hF+/o7sj2TLMN/qJaprNWMj2mV0YBiST5i1oWUn6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOBDNyFt4UYMNnwf+U5fk55n1n+4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGYwMDIzOWUtZjc4NC0z
YWVlLWI0YjctOGIzNGU4YWE0MWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQELCg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB21ySXKMsMFuSsVUdVrg+Y+XgmH0yYvOQ0dStrlb706+jh5LOlf
W9FYjD8RjcUxjB/1qlqGE2EBhPuy7eJXYkk5EwF4jUogrmPzRa2IfAIF5FHeFtQ5
Q3cAGLHkO+Wg8dlBmdRkG81yeovDaUXsVAuaxywWcO9GraBWuWNutwAWPHYTAkC/
N0pgOzo9/tQr0WiMpDUqDU0uYk9CNW4uVxX9PBv4VRBuXWspXZFmCcLBXNTqN9vz
3IqTIEGyZTpB11ZMcSlMCIbiIYvlmKOaml7Fe7OIHb8lN07qTHbAoyBWbBsdbcxP
GOk7ipB58cvvvEYVjxpgC03udMdBfHmRgp8=
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:44:50 2025 by rpki-client