Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d3c831f-34f9-36ab-a7e3-677ef5948a1d.roa
File: 2d3c831f-34f9-36ab-a7e3-677ef5948a1d.roa (raw, json)
Hash identifier: VreOmr4JfkCQz2XT89402IzMxPv5Oa9eNRWQTG7JqxU=
Subject key identifier: 69:A4:88:81:0A:99:CA:18:F0:5B:B8:42:1D:2B:97:CF:F4:DC:2F:97
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858460B742173BE10ABA0F2A509E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d3c831f-34f9-36ab-a7e3-677ef5948a1d.roa
Signing time: Thu 30 May 2024 13:00:34 +0000
ROA not before: Thu 30 May 2024 13:00:34 +0000
ROA not after: Wed 28 Aug 2024 13:00:34 +0000
asID: 46373
IP address blocks: 2001:470:1ca::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:0b:74:21:73:be:10:ab:a0:f2:a5:09:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 30 13:00:34 2024 GMT
Not After : Aug 28 13:00:34 2024 GMT
Subject: CN=58fb7a3d-4f75-4694-9084-664b7634e069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0a:97:92:95:9a:c4:28:cf:60:be:86:2c:c1:
90:b5:69:b3:b1:b5:11:c6:f5:0c:15:74:e7:c1:ec:
49:df:78:e6:61:34:d2:ee:2c:de:46:55:fe:cc:63:
b1:69:9b:0a:e7:01:2b:ca:ce:3d:37:dc:0f:dc:b3:
e6:8b:0a:a1:50:8a:e9:45:ac:44:a6:a0:39:c4:8a:
ee:02:13:79:af:a1:f9:fc:5f:a9:27:87:d2:d1:d7:
9b:54:c8:c0:b7:64:bf:cc:b8:e2:24:30:a6:e4:d6:
4b:09:dc:99:e0:d3:98:9a:25:8e:ca:a7:24:56:f3:
5c:e2:5f:13:99:6f:78:57:bd:8f:a5:2e:a9:6b:68:
1b:0e:d2:31:86:f1:58:2c:71:99:aa:19:e5:f4:4d:
a2:39:3f:63:2d:46:fc:6e:ec:ca:a8:fb:03:2e:57:
69:ee:f7:a2:23:2e:63:98:85:9f:5f:e2:9c:3f:43:
f5:92:b3:dc:f2:7c:39:b8:9f:f6:82:c6:05:72:8d:
89:40:62:15:24:b5:ff:49:27:db:59:92:6b:cd:f4:
4e:69:8f:fd:1e:01:6d:35:85:42:7c:eb:38:2c:d2:
1a:51:4e:e3:ed:53:d6:7b:de:8d:df:b0:82:b9:a6:
08:9e:63:e1:fe:37:c9:3a:c0:d2:b5:47:83:67:46:
90:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A4:88:81:0A:99:CA:18:F0:5B:B8:42:1D:2B:97:CF:F4:DC:2F:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d3c831f-34f9-36ab-a7e3-677ef5948a1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1ca::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:34:32:ba:21:f1:3c:0a:7f:1f:9b:f2:00:a2:58:8a:02:98:
49:8e:0b:2b:ac:e3:35:dc:e8:fa:2d:c0:9a:c3:fd:72:9d:85:
43:81:ac:73:92:a1:f1:ab:8c:a4:6e:59:c3:ab:d3:45:f2:ba:
04:c6:b5:04:6e:e3:d3:43:d5:9f:8e:43:f8:ee:2f:7f:f8:2f:
95:ba:2c:2e:5d:de:9d:a2:84:ab:4d:48:db:8a:76:09:55:54:
5a:60:83:e7:2c:df:08:d7:cb:a8:e4:14:9f:e2:ab:ac:8b:a5:
b0:e9:ee:d9:34:58:9c:17:ba:b9:d2:a2:7a:54:72:52:e7:b7:
92:07:fd:43:0b:4d:d6:65:8a:13:39:c1:6b:b3:a1:55:5a:69:
74:8f:b1:d9:d7:88:4a:6d:08:d2:7c:a4:a5:5f:51:cb:7f:61:
9f:94:3c:a9:92:9b:cf:ec:43:5c:86:40:34:ac:9d:99:a7:89:
2a:58:be:c4:4e:6a:d4:63:cd:f4:75:95:cb:f4:d9:a3:e0:fa:
38:e8:70:71:6f:df:7b:a5:99:3b:6a:62:5c:3a:87:f7:fb:67:
d3:de:35:37:46:c4:cb:81:36:a0:0e:64:23:b8:08:33:c2:cb:
ca:03:18:85:ec:ce:84:40:cc:96:0e:03:32:99:78:07:7f:5b:
09:e0:2c:19
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYLdCFzvhCroPKlCeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDUzMDEzMDAzNFoXDTI0MDgyODEzMDAzNFowLzEtMCsGA1UEAxMk
NThmYjdhM2QtNGY3NS00Njk0LTkwODQtNjY0Yjc2MzRlMDY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAqXkpWaxCjPYL6GLMGQtWmzsbURxvUMFXTn
wexJ33jmYTTS7izeRlX+zGOxaZsK5wErys49N9wP3LPmiwqhUIrpRaxEpqA5xIru
AhN5r6H5/F+pJ4fS0debVMjAt2S/zLjiJDCm5NZLCdyZ4NOYmiWOyqckVvNc4l8T
mW94V72PpS6pa2gbDtIxhvFYLHGZqhnl9E2iOT9jLUb8buzKqPsDLldp7veiIy5j
mIWfX+KcP0P1krPc8nw5uJ/2gsYFco2JQGIVJLX/SSfbWZJrzfROaY/9HgFtNYVC
fOs4LNIaUU7j7VPWe96N37CCuaYInmPh/jfJOsDStUeDZ0aQnwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGmkiIEKmcoY8Fu4Qh0rl8/03C+XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmQzYzgzMWYtMzRmOS0z
NmFiLWE3ZTMtNjc3ZWY1OTQ4YTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKI0Mroh8TwKfx+b8gCiWIoCmEmOCyus4zXc6PotwJrD/XKdhUOB
rHOSofGrjKRuWcOr00XyugTGtQRu49ND1Z+OQ/juL3/4L5W6LC5d3p2ihKtNSNuK
dglVVFpgg+cs3wjXy6jkFJ/iq6yLpbDp7tk0WJwXurnSonpUclLnt5IH/UMLTdZl
ihM5wWuzoVVaaXSPsdnXiEptCNJ8pKVfUct/YZ+UPKmSm8/sQ1yGQDSsnZmniSpY
vsROatRjzfR1lcv02aPg+jjocHFv33ulmTtqYlw6h/f7Z9PeNTdGxMuBNqAOZCO4
CDPCy8oDGIXszoRAzJYOAzKZeAd/WwngLBk=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:22:04 2025 by rpki-client