Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa82f97-aa82-3df0-ae11-71b9a7f25673.roa
File: 3fa82f97-aa82-3df0-ae11-71b9a7f25673.roa (raw, json)
Hash identifier: 9z7RVxjMxGRujwyjgKKZVGrhZokEY2WIdIzW0dJ58IU=
Subject key identifier: 0B:D5:76:40:08:1A:6A:0C:95:78:E7:4E:F2:2F:61:EA:C7:4B:92:7C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB7AAC08DDB9263700B770
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa82f97-aa82-3df0-ae11-71b9a7f25673.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1000:9e00::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:7a:ac:08:dd:b9:26:37:00:b7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=3d4ccc3f-28e7-4711-84ac-c898a9cd0d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a5:bd:02:96:6f:1a:d4:96:55:f4:35:c9:e3:
b4:c1:8c:fe:39:c8:9a:a6:68:3e:17:0e:7b:a8:2a:
0a:b3:6f:7b:b7:14:17:b9:1c:66:d5:88:ee:04:dd:
59:33:0e:16:fd:6d:53:7c:d3:62:6b:aa:c1:19:26:
96:8a:f0:89:78:6b:0f:80:5d:9c:4e:27:f8:11:34:
68:3f:ba:e1:a1:65:0f:41:ad:e1:3f:9b:24:7d:f1:
3a:f2:31:40:6a:1a:53:5d:4b:6a:aa:50:fc:a8:4b:
5a:d8:4b:3b:26:aa:6a:9a:71:2d:9d:99:bd:3d:77:
f6:f8:0e:6e:a1:2e:9f:6b:fe:1b:47:0f:61:78:1b:
e4:37:ca:70:98:9b:53:78:c6:27:86:e0:ac:98:4a:
81:54:e3:53:95:02:8e:93:84:3e:c7:9d:5c:c0:bf:
72:04:ce:43:85:27:f1:58:90:e5:b7:36:56:cd:a5:
73:9c:e6:b9:b6:c1:4d:23:96:02:d6:71:9b:8b:7e:
9e:3b:18:5d:fb:fd:25:61:93:a7:37:a8:32:6f:05:
b9:52:1a:3d:28:1a:26:54:1b:31:f7:89:50:d1:59:
3b:db:05:9a:61:ef:6c:be:c5:d3:4e:f9:e9:9a:df:
27:d8:d6:ea:62:8c:07:b5:53:79:89:72:1b:92:14:
dc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D5:76:40:08:1A:6A:0C:95:78:E7:4E:F2:2F:61:EA:C7:4B:92:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa82f97-aa82-3df0-ae11-71b9a7f25673.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1000:9e00::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:a9:20:51:91:71:ef:fa:14:75:df:5b:a1:91:8f:88:52:2f:
03:c9:7b:7f:01:e8:ce:a5:b6:d3:f9:b8:ca:53:a2:27:4b:43:
e2:6e:1b:d3:09:f9:2b:78:2d:c8:e7:fc:54:8d:9c:0d:35:aa:
c5:00:ab:59:f3:a6:ce:b0:35:5b:29:7e:6f:b1:e8:99:2b:50:
b5:24:97:14:2b:30:a8:b2:0e:5d:5f:08:c1:1b:e4:26:16:c4:
61:c9:f2:b7:90:49:58:b7:3c:0a:4a:92:13:ba:75:08:71:dc:
6c:14:c4:53:dc:d8:02:d8:7d:16:79:4d:d9:06:64:51:bd:db:
94:3d:cc:13:8d:b1:65:62:a9:7c:39:aa:34:b1:ab:32:15:d9:
07:e6:eb:d3:5e:84:72:56:d6:39:a2:6f:d3:86:45:3d:8d:10:
d6:d0:ee:79:67:73:83:b6:d9:51:d5:05:cb:df:f7:28:16:05:
b2:51:6f:bf:22:87:a1:f6:12:e4:ce:a0:14:44:65:9a:72:ee:
a1:41:92:71:2a:48:d2:6a:12:ac:b7:0b:1d:a7:00:90:ed:dc:
f6:3d:dc:fb:62:f1:27:cc:86:fc:83:6f:1d:7f:00:ab:6c:a3:
82:6e:b1:31:30:f1:a4:6b:c4:e6:5a:b8:91:f1:2a:6d:96:dd:
e6:b9:cb:80
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh863qsCN25JjcAt3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
M2Q0Y2NjM2YtMjhlNy00NzExLTg0YWMtYzg5OGE5Y2QwZDU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKW9ApZvGtSWVfQ1yeO0wYz+Ociapmg+Fw57
qCoKs297txQXuRxm1YjuBN1ZMw4W/W1TfNNia6rBGSaWivCJeGsPgF2cTif4ETRo
P7rhoWUPQa3hP5skffE68jFAahpTXUtqqlD8qEta2Es7JqpqmnEtnZm9PXf2+A5u
oS6fa/4bRw9heBvkN8pwmJtTeMYnhuCsmEqBVONTlQKOk4Q+x51cwL9yBM5DhSfx
WJDltzZWzaVznOa5tsFNI5YC1nGbi36eOxhd+/0lYZOnN6gybwW5Uho9KBomVBsx
94lQ0Vk72wWaYe9svsXTTvnpmt8n2NbqYowHtVN5iXIbkhTcRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAvVdkAIGmoMlXjnTvIvYerHS5J8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2ZhODJmOTctYWE4Mi0z
ZGYwLWFlMTEtNzFiOWE3ZjI1NjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQAJ4A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB6pIFGRce/6FHXfW6GRj4hSLwPJe38B6M6lttP5uMpToidLQ+Ju
G9MJ+St4Lcjn/FSNnA01qsUAq1nzps6wNVspfm+x6JkrULUklxQrMKiyDl1fCMEb
5CYWxGHJ8reQSVi3PApKkhO6dQhx3GwUxFPc2ALYfRZ5TdkGZFG925Q9zBONsWVi
qXw5qjSxqzIV2Qfm69NehHJW1jmib9OGRT2NENbQ7nlnc4O22VHVBcvf9ygWBbJR
b78ih6H2EuTOoBREZZpy7qFBknEqSNJqEqy3Cx2nAJDt3PY93Pti8SfMhvyDbx1/
AKtso4JusTEw8aRrxOZauJHxKm2W3ea5y4A=
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:00:29 2025 by rpki-client