Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/2a6dc8da-2d2e-3129-b29d-99b47f17a171.roa
File: 2a6dc8da-2d2e-3129-b29d-99b47f17a171.roa (raw, json)
Hash identifier: 6H3VXZZPCttwRMqm1FnixO/GEk6rs/zTw00NV2ngOmQ=
Subject key identifier: 2D:63:6B:56:15:5E:74:7C:A4:2D:40:C3:C6:70:5E:FF:4C:2C:BF:C2
Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial: 010D0C9F4328583A5D7C6432BB119DD9832020E0
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/2a6dc8da-2d2e-3129-b29d-99b47f17a171.roa
Signing time: Thu 24 Jun 2021 04:00:00 +0000
ROA not before: Thu 24 Jun 2021 04:00:00 +0000
ROA not after: Fri 24 Jun 2022 04:00:00 +0000
asID: 36692
IP address blocks: 2620:0:cce::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:5d:7c:64:32:bb:11:9d:d9:83:20:20:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Validity
Not Before: Jun 24 04:00:00 2021 GMT
Not After : Jun 24 04:00:00 2022 GMT
Subject: CN=40437052-1fdb-489d-9330-70da00b918d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:67:fd:f7:f5:cf:dc:30:eb:d9:60:6e:f5:38:
13:e2:c2:fa:d1:8f:15:21:09:73:5e:ee:e4:30:6e:
40:90:7b:a4:37:3d:23:51:e8:5a:d5:cd:e9:c8:0a:
b7:ab:47:cf:7e:10:71:28:5c:50:30:d1:4d:ac:0b:
43:d8:05:34:fc:fa:51:cd:27:55:09:4f:f3:fd:e8:
9d:31:73:9f:e8:d0:f6:2c:22:72:90:63:00:d0:cd:
16:3c:9d:ee:df:d6:ff:44:16:b1:95:87:56:86:cf:
4c:2b:2c:b2:75:98:4f:36:de:32:5b:a3:7f:7c:c4:
ea:c2:48:96:a8:8b:b1:67:ac:17:42:01:d7:33:77:
12:19:ee:0f:7c:8a:35:44:9b:a8:5d:4c:ef:a1:b1:
1d:73:a3:26:e4:26:50:6b:bf:38:f4:9b:69:b9:b1:
68:43:50:97:4b:ca:50:98:8a:69:74:56:d5:42:3d:
f4:4b:2e:cd:b6:c6:78:06:34:4c:6c:4a:28:02:24:
3b:96:ac:f5:47:e0:f5:52:8e:54:09:77:c5:54:76:
04:2f:94:c3:4d:2c:1f:59:ba:de:15:2d:ef:6d:ce:
6d:ff:62:cb:80:c9:30:79:60:f1:7d:d7:82:7b:82:
f6:f7:aa:aa:2c:55:f6:50:b4:c3:3d:ca:fd:fa:e7:
2d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:63:6B:56:15:5E:74:7C:A4:2D:40:C3:C6:70:5E:FF:4C:2C:BF:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/2a6dc8da-2d2e-3129-b29d-99b47f17a171.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
X509v3 Authority Key Identifier:
keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:cce::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:3c:b4:58:68:47:42:81:91:dd:13:25:45:71:4a:f4:fc:c6:
e4:82:e3:79:44:10:a9:06:75:88:2a:ab:a0:24:4c:44:55:c7:
c9:8f:02:2d:ab:47:16:84:cf:77:81:41:b2:d5:20:68:56:f6:
6b:ed:2d:88:af:71:89:1e:ce:2d:54:08:5b:3d:d8:39:4d:40:
8b:08:71:3e:2a:54:10:69:db:48:a7:bb:c6:e8:2e:ef:3c:ee:
45:12:11:ad:93:e1:dd:1a:9f:67:e3:8b:c2:f4:79:da:e0:cb:
e2:cb:42:2e:db:f9:16:51:b0:4b:5d:82:7b:ae:79:24:65:99:
04:6e:1e:84:fa:71:7f:7e:0d:14:ac:46:39:11:3a:a3:09:0c:
7f:d7:14:37:f4:73:00:1e:cc:ac:8e:b2:f8:b1:12:3e:c9:28:
fe:c8:d2:84:bb:ea:e8:bc:c6:0d:04:27:fe:4b:c9:64:73:aa:
da:39:24:a8:1d:08:2a:e8:89:22:d2:02:d6:ae:22:ec:02:22:
79:7f:63:7a:6c:27:c4:37:d7:50:af:ec:b7:53:00:df:dc:8b:
36:36:b0:26:12:1a:58:3c:93:22:57:ac:75:f4:be:7b:8c:00:
e9:ba:9f:b4:14:64:96:43:86:3f:b8:49:02:c3:0e:d0:4b:f1:
9d:83:aa:6b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDpdfGQyuxGd2YMgIOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk
ZWZjMB4XDTIxMDYyNDA0MDAwMFoXDTIyMDYyNDA0MDAwMFowLzEtMCsGA1UEAxMk
NDA0MzcwNTItMWZkYi00ODlkLTkzMzAtNzBkYTAwYjkxOGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimf99/XP3DDr2WBu9TgT4sL60Y8VIQlzXu7k
MG5AkHukNz0jUeha1c3pyAq3q0fPfhBxKFxQMNFNrAtD2AU0/PpRzSdVCU/z/eid
MXOf6ND2LCJykGMA0M0WPJ3u39b/RBaxlYdWhs9MKyyydZhPNt4yW6N/fMTqwkiW
qIuxZ6wXQgHXM3cSGe4PfIo1RJuoXUzvobEdc6Mm5CZQa7849JtpubFoQ1CXS8pQ
mIppdFbVQj30Sy7NtsZ4BjRMbEooAiQ7lqz1R+D1Uo5UCXfFVHYEL5TDTSwfWbre
FS3vbc5t/2LLgMkweWDxfdeCe4L296qqLFX2ULTDPcr9+uctFwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC1ja1YVXnR8pC1Aw8ZwXv9MLL/CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj
YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvMmE2ZGM4ZGEtMmQyZS0z
MTI5LWIyOWQtOTliNDdmMTdhMTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm
MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi
ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw
NjJiYmRlZmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAzO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADQ8tFhoR0KBkd0TJUVxSvT8xuSC43lEEKkGdYgqq6AkTERVx8mP
Ai2rRxaEz3eBQbLVIGhW9mvtLYivcYkezi1UCFs92DlNQIsIcT4qVBBp20inu8bo
Lu887kUSEa2T4d0an2fji8L0edrgy+LLQi7b+RZRsEtdgnuueSRlmQRuHoT6cX9+
DRSsRjkROqMJDH/XFDf0cwAezKyOsvixEj7JKP7I0oS76ui8xg0EJ/5LyWRzqto5
JKgdCCroiSLSAtauIuwCInl/Y3psJ8Q311Cv7LdTAN/cizY2sCYSGlg8kyJXrHX0
vnuMAOm6n7QUZJZDhj+4SQLDDtBL8Z2Dqms=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:40 2024 by rpki-client on console-ams.rpki-client.org