Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a9d3156-f200-396f-b121-4a50c19d1742.roa
File: 0a9d3156-f200-396f-b121-4a50c19d1742.roa (raw, json)
Hash identifier: Rgtu3Uop2cM/OtsC5SCigxj5kGKwSRpYtpGpdRwDcxY=
Subject key identifier: 7B:0D:39:84:DA:67:4C:04:E4:D4:1D:EA:B4:15:D4:F6:85:7F:28:56
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858461969716F4516C2F732CF0D40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a9d3156-f200-396f-b121-4a50c19d1742.roa
Signing time: Tue 04 Jun 2024 13:00:34 +0000
ROA not before: Tue 04 Jun 2024 13:00:34 +0000
ROA not after: Mon 02 Sep 2024 13:00:34 +0000
asID: 31769
IP address blocks: 2001:470:133::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:19:69:71:6f:45:16:c2:f7:32:cf:0d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 4 13:00:34 2024 GMT
Not After : Sep 2 13:00:34 2024 GMT
Subject: CN=9361953a-c3d8-45d7-bb77-80d0bbaaa168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:1b:90:42:f0:a1:55:e5:f2:0e:ac:0a:af:
99:e5:7e:eb:0e:e6:64:14:b8:d1:47:b1:a2:13:f6:
71:9e:ef:16:06:4e:dd:e0:73:95:6a:f0:53:33:b3:
77:a7:54:5c:74:bc:9f:2d:26:28:3f:c7:99:9b:1d:
9c:83:e9:41:41:84:1d:7c:3d:2c:4e:28:21:de:6c:
8f:ff:1e:2e:49:b8:9d:ec:1b:08:e1:99:ae:24:ac:
9c:8e:1e:29:d7:0d:12:85:6a:b4:a8:db:46:8a:5d:
09:80:e5:14:92:ef:b3:cf:d1:d8:06:2c:68:70:eb:
62:b6:a8:62:24:e7:33:22:19:9e:de:bc:2d:07:ec:
46:b1:c9:9d:c1:48:7b:a9:df:9b:8d:08:1f:98:39:
00:c2:3f:0a:84:d4:90:e6:c7:fe:a0:1a:23:ab:25:
1a:ef:c3:3d:ba:e6:a2:bf:53:0e:cd:2c:ec:2f:84:
5d:3e:41:a8:d1:4e:8f:9a:f6:56:15:0d:97:eb:e1:
96:7a:00:36:61:5a:2f:e6:0d:1a:f2:f9:ae:17:c1:
c2:23:97:5a:d3:9c:71:a1:bd:5c:9a:4a:1c:d8:34:
70:db:9c:47:96:02:f2:27:74:69:61:15:36:f5:36:
54:6e:e2:6c:a7:d2:fd:de:27:a8:d4:d7:86:32:89:
f9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:39:84:DA:67:4C:04:E4:D4:1D:EA:B4:15:D4:F6:85:7F:28:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a9d3156-f200-396f-b121-4a50c19d1742.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:133::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:1a:fa:92:04:2d:86:60:fe:f8:00:9f:e4:7f:56:51:27:c0:
23:b6:4b:88:a3:d6:5f:8e:38:b8:be:5b:e4:21:9e:56:35:2c:
fb:34:47:d1:a4:f1:b9:24:87:f0:0b:28:0a:17:94:27:d0:8f:
ab:bc:48:17:68:5b:f0:93:c2:10:ff:96:a7:cd:e6:a9:95:a4:
76:e2:8b:81:be:95:51:60:db:f8:0d:42:29:ff:a3:99:15:be:
d9:2d:4a:45:2a:9d:f1:7e:9e:2b:a0:ab:3c:95:5d:e0:1a:a7:
5d:0a:b4:3c:55:c4:98:ee:25:20:79:b2:1f:92:bb:6b:2e:b4:
37:a2:c0:28:0d:11:08:85:05:3f:a6:d7:78:58:9f:6e:a3:51:
b3:d8:f5:3c:73:4e:0d:04:98:fd:33:ef:0b:0d:20:17:90:2f:
63:e6:3b:fc:76:06:a8:28:e7:e9:cc:e9:5a:4e:d3:c7:b8:86:
3e:75:f6:fb:80:31:2c:c4:f4:96:77:11:72:24:64:2a:f2:bd:
53:7b:62:ce:e2:cf:15:9b:c2:c6:1a:63:87:af:8b:3f:7f:d8:
38:2c:c7:10:b6:f4:c0:67:ed:22:f7:41:a5:0e:d4:9c:2a:7e:
8f:3e:6e:d2:18:89:8e:58:f8:f6:73:38:15:48:66:e8:96:2f:
43:aa:79:68
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYZaXFvRRbC9zLPDUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDYwNDEzMDAzNFoXDTI0MDkwMjEzMDAzNFowLzEtMCsGA1UEAxMk
OTM2MTk1M2EtYzNkOC00NWQ3LWJiNzctODBkMGJiYWFhMTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSEbkELwoVXl8g6sCq+Z5X7rDuZkFLjRR7Gi
E/Zxnu8WBk7d4HOVavBTM7N3p1RcdLyfLSYoP8eZmx2cg+lBQYQdfD0sTigh3myP
/x4uSbid7BsI4ZmuJKycjh4p1w0ShWq0qNtGil0JgOUUku+zz9HYBixocOtitqhi
JOczIhme3rwtB+xGscmdwUh7qd+bjQgfmDkAwj8KhNSQ5sf+oBojqyUa78M9uuai
v1MOzSzsL4RdPkGo0U6PmvZWFQ2X6+GWegA2YVov5g0a8vmuF8HCI5da05xxob1c
mkoc2DRw25xHlgLyJ3RpYRU29TZUbuJsp9L93ieo1NeGMon5XwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHsNOYTaZ0wE5NQd6rQV1PaFfyhWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGE5ZDMxNTYtZjIwMC0z
OTZmLWIxMjEtNGE1MGMxOWQxNzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEz
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABIa+pIELYZg/vgAn+R/VlEnwCO2S4ij1l+OOLi+W+QhnlY1LPs0
R9Gk8bkkh/ALKAoXlCfQj6u8SBdoW/CTwhD/lqfN5qmVpHbii4G+lVFg2/gNQin/
o5kVvtktSkUqnfF+niugqzyVXeAap10KtDxVxJjuJSB5sh+Su2sutDeiwCgNEQiF
BT+m13hYn26jUbPY9TxzTg0EmP0z7wsNIBeQL2PmO/x2Bqgo5+nM6VpO08e4hj51
9vuAMSzE9JZ3EXIkZCryvVN7Ys7izxWbwsYaY4eviz9/2DgsxxC29MBn7SL3QaUO
1Jwqfo8+btIYiY5Y+PZzOBVIZuiWL0OqeWg=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:54:59 2025 by rpki-client