Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2a72795d-b61a-33e3-bcfa-2709b49f26a1.roa
File: 2a72795d-b61a-33e3-bcfa-2709b49f26a1.roa (raw, json)
Hash identifier: u12SzqaD17wxzAggjzAMNDyD9QgbsaFFB1nffdk+hmg=
Subject key identifier: CD:BF:C4:98:58:A8:E6:8A:17:24:EC:B2:B5:A6:19:25:92:66:59:70
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845EF894245F204B76E5C9E0480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2a72795d-b61a-33e3-bcfa-2709b49f26a1.roa
Signing time: Mon 20 May 2024 13:00:35 +0000
ROA not before: Mon 20 May 2024 13:00:35 +0000
ROA not after: Sun 18 Aug 2024 13:00:35 +0000
asID: 23523
IP address blocks: 2001:470:240::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:ef:89:42:45:f2:04:b7:6e:5c:9e:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 20 13:00:35 2024 GMT
Not After : Aug 18 13:00:35 2024 GMT
Subject: CN=355daa1a-2264-48c9-8c2f-707dc4d8320b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:a6:8d:b8:af:43:14:ba:1a:2b:d2:d6:48:
7a:c3:0b:53:ac:13:67:3b:d8:9a:eb:e0:52:f2:16:
55:b5:6d:3d:07:fe:af:ce:4d:2e:2e:76:24:a7:35:
df:a8:c9:f2:eb:8c:0e:24:00:04:75:cd:30:c9:14:
4b:a1:5f:a1:47:3c:02:36:1a:16:0f:d8:21:0f:c1:
25:e7:b5:9f:0d:6d:a6:95:f3:7e:92:06:97:d0:77:
d6:56:b1:de:d0:91:39:c0:13:d3:57:50:a7:7f:e9:
52:47:4a:8d:3d:8d:20:be:b4:66:4c:45:81:26:24:
8f:40:82:b9:f2:17:1c:46:2b:12:f2:9d:c2:f2:43:
ea:89:7f:e5:ca:71:c4:fb:07:9d:67:9e:f2:e2:ba:
e7:5c:7d:7d:f2:89:c7:73:a5:30:3b:4c:9b:ba:27:
2e:d3:f1:69:45:3e:5e:b6:f1:2c:74:01:6d:4b:d3:
94:70:20:b1:7f:3f:b2:ba:02:80:22:09:99:45:46:
51:76:44:d5:e1:4d:cf:e8:00:3e:4a:bc:05:82:e6:
f4:05:52:42:91:9d:08:90:41:fa:b7:81:e6:5f:4c:
8d:6a:f8:db:14:e6:2c:80:d7:87:1d:df:33:8a:29:
22:f5:3e:8b:06:43:7d:f6:60:e0:79:1b:58:ab:c9:
ef:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BF:C4:98:58:A8:E6:8A:17:24:EC:B2:B5:A6:19:25:92:66:59:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2a72795d-b61a-33e3-bcfa-2709b49f26a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:240::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:3c:e0:c1:e6:fc:54:2e:15:61:cf:f7:50:bc:01:4b:f4:81:
2d:c8:ea:6b:c3:b3:37:b1:ee:31:ad:4d:43:82:c6:4a:db:0d:
f9:0a:13:62:0d:bb:db:d8:ef:25:ab:a9:ef:5e:7e:01:5f:bf:
25:34:27:9d:a4:13:91:7c:f6:4c:b9:a3:6a:55:ec:01:5b:ff:
05:ce:f7:b0:9d:d4:66:e4:1b:c8:b9:5f:05:61:99:0d:0c:a8:
3b:6b:2d:90:d1:e6:1b:3b:02:cf:d1:c5:ab:4c:52:d2:23:87:
73:c0:b2:07:3b:34:8f:cb:de:f3:a4:83:1e:f4:79:f3:6b:10:
ba:10:a3:16:2e:7e:af:25:7c:8a:54:72:4c:6c:3a:7d:a9:bf:
eb:25:c7:0c:d6:51:1d:57:44:0b:59:a1:c5:52:40:9c:f2:e5:
61:ff:2f:3c:c8:8b:53:7f:09:3a:74:11:f3:f7:7a:2d:9f:f8:
42:dd:cd:62:38:41:33:dc:df:19:86:fe:5f:03:a2:29:da:c6:
3d:5a:cb:03:6f:4b:cd:90:55:0f:fc:2c:30:1b:46:06:03:6c:
40:08:ee:5c:81:aa:89:94:24:de:08:37:66:75:e4:2d:04:3e:
e7:c0:cb:46:82:fb:c9:4b:e9:c9:23:2c:39:cd:fe:a9:ef:55:
13:5a:2e:e7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXviUJF8gS3blyeBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDUyMDEzMDAzNVoXDTI0MDgxODEzMDAzNVowLzEtMCsGA1UEAxMk
MzU1ZGFhMWEtMjI2NC00OGM5LThjMmYtNzA3ZGM0ZDgzMjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5OmjbivQxS6GivS1kh6wwtTrBNnO9ia6+BS
8hZVtW09B/6vzk0uLnYkpzXfqMny64wOJAAEdc0wyRRLoV+hRzwCNhoWD9ghD8El
57WfDW2mlfN+kgaX0HfWVrHe0JE5wBPTV1Cnf+lSR0qNPY0gvrRmTEWBJiSPQIK5
8hccRisS8p3C8kPqiX/lynHE+wedZ57y4rrnXH198onHc6UwO0ybuicu0/FpRT5e
tvEsdAFtS9OUcCCxfz+yugKAIgmZRUZRdkTV4U3P6AA+SrwFgub0BVJCkZ0IkEH6
t4HmX0yNavjbFOYsgNeHHd8ziiki9T6LBkN99mDgeRtYq8nvVwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM2/xJhYqOaKFyTssrWmGSWSZllwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmE3Mjc5NWQtYjYxYS0z
M2UzLWJjZmEtMjcwOWI0OWYyNmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMU84MHm/FQuFWHP91C8AUv0gS3I6mvDszex7jGtTUOCxkrbDfkK
E2INu9vY7yWrqe9efgFfvyU0J52kE5F89ky5o2pV7AFb/wXO97Cd1GbkG8i5XwVh
mQ0MqDtrLZDR5hs7As/RxatMUtIjh3PAsgc7NI/L3vOkgx70efNrELoQoxYufq8l
fIpUckxsOn2pv+slxwzWUR1XRAtZocVSQJzy5WH/LzzIi1N/CTp0EfP3ei2f+ELd
zWI4QTPc3xmG/l8Doinaxj1aywNvS82QVQ/8LDAbRgYDbEAI7lyBqomUJN4IN2Z1
5C0EPufAy0aC+8lL6ckjLDnN/qnvVRNaLuc=
-----END CERTIFICATE-----
Generated at Thu Mar 27 21:00:51 2025 by rpki-client