Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02a6a4ab-ca94-3f3d-bee2-f05f693a4719.roa
File: 02a6a4ab-ca94-3f3d-bee2-f05f693a4719.roa (raw, json)
Hash identifier: oEG7kNPZjpxzlwAX/n9awxqHSQOaWNV7ck0C6P68cM8=
Subject key identifier: 54:86:FC:2B:5C:F1:08:F5:55:3A:B0:FB:1E:1A:62:3A:EE:9B:BF:0E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50C8B30B33589719B00C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02a6a4ab-ca94-3f3d-bee2-f05f693a4719.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 395605
IP address blocks: 2001:470:1e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:c8:b3:0b:33:58:97:19:b0:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=fc949707-1bcc-4c19-bafb-2f8d93b1b365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:bb:a7:21:20:dd:ae:7e:3e:e1:5a:d4:4f:
da:ba:90:37:12:28:ca:f9:61:6a:28:eb:cd:af:96:
3c:2f:48:1b:5f:5a:7b:68:5f:30:41:c4:70:de:10:
9b:2e:11:c2:82:e3:20:d6:35:63:27:4a:74:79:b3:
75:7e:26:bf:9e:81:5a:d4:2f:2f:a5:91:80:82:32:
9a:b5:91:2b:3f:ab:2b:09:47:c2:3d:f4:36:b4:83:
5e:24:f1:b7:9f:b5:aa:82:01:77:51:63:c7:72:cf:
95:c9:26:04:53:58:e2:e2:6c:da:da:d7:b9:c5:83:
bf:95:af:13:4c:dc:4a:44:68:00:c0:e4:60:e7:d8:
91:9d:20:10:3e:a5:80:cf:bb:5c:ba:a9:4a:d7:2e:
c6:32:7e:8e:f6:bc:93:bb:44:c4:de:93:af:33:0a:
63:eb:b3:2b:fe:86:e0:ae:ed:bb:00:ea:f0:a1:8b:
86:f3:1d:86:d8:8f:b1:94:34:c8:c4:64:20:9e:15:
58:e8:7e:8b:57:ad:3f:02:5f:43:35:76:ad:7f:a4:
bf:3f:4c:40:f0:14:2d:40:a8:cf:17:01:1b:a9:1f:
86:0b:52:be:ca:fb:b8:d5:1f:94:0c:f1:b1:5a:52:
b8:c2:20:4e:77:26:7f:eb:ed:10:f9:0f:f2:97:18:
06:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:86:FC:2B:5C:F1:08:F5:55:3A:B0:FB:1E:1A:62:3A:EE:9B:BF:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02a6a4ab-ca94-3f3d-bee2-f05f693a4719.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:b8:2f:1c:92:ed:f0:19:73:01:dc:dc:d7:c8:2d:c8:15:2d:
ee:3d:37:bc:90:e5:a4:e2:ad:77:ab:ae:72:8f:a1:e6:7b:94:
c5:92:9e:52:5e:0f:62:a8:f3:16:f2:55:ce:4a:bf:3e:ba:ba:
2f:b7:67:17:7c:fc:e3:9f:d6:4e:ad:97:f9:b6:1c:64:02:75:
05:c5:e1:ba:6d:74:66:06:a2:4f:f1:fd:0a:bd:99:7e:07:55:
09:da:76:ef:51:55:6b:54:10:f3:7d:64:84:bb:2e:21:fb:a3:
4d:c2:d1:22:a6:13:02:3f:df:8f:11:dd:62:03:3c:c9:a5:a8:
e5:0a:cb:86:a7:e0:12:ca:a3:9c:aa:a9:50:7e:17:65:ab:28:
4e:58:c7:1a:be:ab:3b:e9:00:c0:2d:1c:bc:ff:8d:8d:8c:d1:
92:3c:c7:93:bc:c1:75:28:87:98:92:0b:f3:5e:9d:79:85:24:
85:60:62:76:58:11:84:cd:52:4c:d1:62:43:50:3e:cd:65:29:
1c:27:d2:47:1f:bd:73:57:2c:c3:2c:ec:8c:19:2f:75:6f:ec:
9d:36:b4:56:70:2d:59:b3:b8:10:2c:dd:30:6b:bc:f5:7a:ca:
e7:79:f3:fc:ee:ca:86:d0:79:3b:a1:0b:84:66:0f:a5:38:a7:
df:0e:a0:6a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEFKUMizCzNYlxmwDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZmM5NDk3MDctMWJjYy00YzE5LWJhZmItMmY4ZDkzYjFiMzY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiu7pyEg3a5+PuFa1E/aupA3EijK+WFqKOvN
r5Y8L0gbX1p7aF8wQcRw3hCbLhHCguMg1jVjJ0p0ebN1fia/noFa1C8vpZGAgjKa
tZErP6srCUfCPfQ2tINeJPG3n7WqggF3UWPHcs+VySYEU1ji4mza2te5xYO/la8T
TNxKRGgAwORg59iRnSAQPqWAz7tcuqlK1y7GMn6O9ryTu0TE3pOvMwpj67Mr/obg
ru27AOrwoYuG8x2G2I+xlDTIxGQgnhVY6H6LV60/Al9DNXatf6S/P0xA8BQtQKjP
FwEbqR+GC1K+yvu41R+UDPGxWlK4wiBOdyZ/6+0Q+Q/ylxgG2wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFSG/Ctc8Qj1VTqw+x4aYjrum78OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDJhNmE0YWItY2E5NC0z
ZjNkLWJlZTItZjA1ZjY5M2E0NzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAe
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKW4LxyS7fAZcwHc3NfILcgVLe49N7yQ5aTirXerrnKPoeZ7lMWS
nlJeD2Ko8xbyVc5Kvz66ui+3Zxd8/OOf1k6tl/m2HGQCdQXF4bptdGYGok/x/Qq9
mX4HVQnadu9RVWtUEPN9ZIS7LiH7o03C0SKmEwI/348R3WIDPMmlqOUKy4an4BLK
o5yqqVB+F2WrKE5Yxxq+qzvpAMAtHLz/jY2M0ZI8x5O8wXUoh5iSC/NenXmFJIVg
YnZYEYTNUkzRYkNQPs1lKRwn0kcfvXNXLMMs7IwZL3Vv7J02tFZwLVmzuBAs3TBr
vPV6yud58/zuyobQeTuhC4RmD6U4p98OoGo=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:29:54 2025 by rpki-client