Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/299dd99e-5f3c-372a-9961-a9a72de1a52f.roa
File: 299dd99e-5f3c-372a-9961-a9a72de1a52f.roa (raw, json)
Hash identifier: C6CsECir0ZeqdGDLIcUTtc3yyZGhs7DgIp4/vBqM5bo=
Subject key identifier: C9:8D:44:00:26:86:CE:81:D5:CC:27:17:D4:03:A5:9B:F1:34:36:70
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846D5E93D389F559A7624C26680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/299dd99e-5f3c-372a-9961-a9a72de1a52f.roa
Signing time: Sun 11 Aug 2024 01:30:08 +0000
ROA not before: Sun 11 Aug 2024 01:30:08 +0000
ROA not after: Sat 09 Nov 2024 02:30:08 +0000
asID: 18647
IP address blocks: 2001:470:354::/47 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:d5:e9:3d:38:9f:55:9a:76:24:c2:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 11 01:30:08 2024 GMT
Not After : Nov 9 02:30:08 2024 GMT
Subject: CN=76e31e96-0fb3-492b-a317-250090df6988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8a:04:dd:26:49:97:7a:d8:8c:f3:8c:83:48:
60:37:d2:de:a2:5b:64:5a:7b:6f:1f:13:6f:41:99:
a5:70:1b:14:3b:78:b9:b4:d4:72:8d:28:14:20:78:
2f:ce:9d:58:41:3e:04:56:4e:48:94:97:c5:5b:f4:
79:aa:a2:ed:00:ca:51:87:73:4f:bd:40:50:7f:e1:
25:25:c7:3e:3d:28:03:05:25:5b:7c:0b:d7:50:07:
ce:f9:70:74:c3:af:dc:69:25:cd:87:19:7f:64:2f:
8c:fe:ba:8f:be:1f:5f:8a:9f:0b:76:09:75:ec:8b:
75:cf:48:23:f5:ad:60:7f:ba:3e:a7:33:8b:74:04:
ec:e9:a9:6b:e1:f1:10:a0:9d:20:34:25:d6:27:5b:
01:86:05:2c:5f:46:b8:ed:7e:a7:ca:db:d6:0c:98:
18:a8:d1:59:d3:6f:e2:61:7a:cc:23:e0:06:db:39:
7b:fd:b0:2c:79:70:5f:ef:d4:ac:26:05:9f:31:68:
1b:90:37:af:38:c1:32:5a:d2:28:ef:ff:25:37:2a:
89:88:d3:22:f3:2c:5b:f7:df:be:44:b1:4e:ad:12:
2f:98:02:44:e4:6e:a5:dc:74:62:7f:33:8b:bf:cb:
4a:11:a8:9b:5e:83:48:26:6d:ee:90:57:7a:c0:8a:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8D:44:00:26:86:CE:81:D5:CC:27:17:D4:03:A5:9B:F1:34:36:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/299dd99e-5f3c-372a-9961-a9a72de1a52f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:354::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:42:b4:d2:31:38:aa:7c:68:a7:b5:ee:6a:9f:fa:4b:85:69:
1c:d7:60:79:8c:3b:4e:1d:90:de:02:fc:3c:89:4c:8a:a1:23:
98:27:5e:db:80:f4:91:52:71:9b:cd:2e:8f:4c:7c:2f:af:a0:
33:5a:d6:f6:9e:fa:ab:a6:2f:34:e6:ec:d3:c9:79:d8:26:af:
e0:4b:bf:17:54:37:4c:4e:fc:e8:23:15:0f:09:3b:ad:d9:dd:
27:02:23:e6:ee:0f:c5:01:a1:d9:e6:6d:ca:1a:2e:86:90:e8:
38:d3:bd:f1:3a:7c:5a:d5:21:a8:76:01:d6:a5:0f:e1:a5:09:
42:ed:a7:c0:48:dd:23:f6:dd:09:22:a0:59:8f:a3:33:6d:a7:
3c:0b:fc:f7:14:f4:f6:9f:21:e7:44:a7:dd:a9:89:9b:fe:8b:
3b:69:88:46:f7:4f:4c:de:d8:1c:d1:3a:36:1a:88:74:6d:7a:
99:f9:10:38:2e:71:96:6f:d2:af:96:38:fb:86:e6:0d:1c:82:
4c:4a:e5:e3:bf:2a:ce:8c:62:72:d5:b5:f7:74:0b:66:ed:0f:
46:10:3f:55:ac:82:f1:56:ac:8b:ae:bb:ac:d0:1b:85:4f:1c:
2d:42:89:0a:c7:28:4c:37:d2:e7:8f:c8:9b:d0:7e:56:ea:3f:
29:38:bc:25
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEbV6T04n1WadiTCZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDgxMTAxMzAwOFoXDTI0MTEwOTAyMzAwOFowLzEtMCsGA1UEAxMk
NzZlMzFlOTYtMGZiMy00OTJiLWEzMTctMjUwMDkwZGY2OTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmooE3SZJl3rYjPOMg0hgN9LeoltkWntvHxNv
QZmlcBsUO3i5tNRyjSgUIHgvzp1YQT4EVk5IlJfFW/R5qqLtAMpRh3NPvUBQf+El
Jcc+PSgDBSVbfAvXUAfO+XB0w6/caSXNhxl/ZC+M/rqPvh9fip8Ldgl17It1z0gj
9a1gf7o+pzOLdATs6alr4fEQoJ0gNCXWJ1sBhgUsX0a47X6nytvWDJgYqNFZ02/i
YXrMI+AG2zl7/bAseXBf79SsJgWfMWgbkDevOMEyWtIo7/8lNyqJiNMi8yxb99++
RLFOrRIvmAJE5G6l3HRifzOLv8tKEaibXoNIJm3ukFd6wIoUXwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMmNRAAmhs6B1cwnF9QDpZvxNDZwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjk5ZGQ5OWUtNWYzYy0z
NzJhLTk5NjEtYTlhNzJkZTFhNTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEEcANU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEtCtNIxOKp8aKe17mqf+kuFaRzXYHmMO04dkN4C/DyJTIqhI5gn
XtuA9JFScZvNLo9MfC+voDNa1vae+qumLzTm7NPJedgmr+BLvxdUN0xO/OgjFQ8J
O63Z3ScCI+buD8UBodnmbcoaLoaQ6DjTvfE6fFrVIah2AdalD+GlCULtp8BI3SP2
3QkioFmPozNtpzwL/PcU9PafIedEp92piZv+iztpiEb3T0ze2BzROjYaiHRtepn5
EDgucZZv0q+WOPuG5g0cgkxK5eO/Ks6MYnLVtfd0C2btD0YQP1WsgvFWrIuuu6zQ
G4VPHC1CiQrHKEw30uePyJvQflbqPyk4vCU=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:43:42 2025 by rpki-client