Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36da04a2-c891-31b6-95a3-5eb4415ee36e.roa
File: 36da04a2-c891-31b6-95a3-5eb4415ee36e.roa (raw, json)
Hash identifier: 6HYt2oNsxw7hNWWVls00W1OTCOi3MLeEqWxxlhrBFhw=
Subject key identifier: B1:A7:C0:13:7A:BC:8C:F4:16:8D:8B:81:AC:3D:FE:D8:C6:6C:D4:BE
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BFDA5DC1DAC599906215F7AFC
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36da04a2-c891-31b6-95a3-5eb4415ee36e.roa
Signing time: Sat 20 Nov 2021 05:00:00 +0000
ROA not before: Sat 20 Nov 2021 05:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 12041
IP address blocks: 2001:470:13b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fd:a5:dc:1d:ac:59:99:06:21:5f:7a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 20 05:00:00 2021 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=61442b28-8348-49bc-af81-2b4146106d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7c:4d:c1:8a:f0:6e:42:b8:8c:10:52:60:b3:
65:2c:6c:16:89:4c:3d:5d:1b:c0:46:47:b0:00:5e:
ce:17:2f:4b:a6:11:99:de:64:b3:8b:89:ac:b0:2f:
f3:ce:52:02:38:e0:dc:9d:3c:8a:f2:f9:b3:f1:c5:
b7:23:1d:f9:d9:ea:2a:f1:5b:af:4b:49:d6:8d:ae:
1d:33:80:a1:c4:c7:8e:7b:cc:9c:b8:0a:77:53:2d:
f0:f8:41:e6:2a:c1:39:99:9d:62:f9:60:d8:6f:27:
3f:f8:fc:73:49:25:1b:a4:8d:3a:16:86:9d:ce:df:
a9:89:b6:d5:ae:cd:10:ed:4b:37:2b:f1:a4:20:61:
a6:14:f6:2a:d3:24:9d:45:2b:cf:00:ab:43:a6:02:
f3:bb:25:64:b0:f0:5a:1a:30:d0:e5:1b:8a:d4:46:
30:f0:f6:8c:50:21:2f:2f:16:e0:22:fd:28:53:0b:
ff:c7:9d:5d:0b:2a:30:c5:db:e2:df:f3:ec:ad:c5:
86:d6:8a:8f:71:41:14:a0:a7:59:15:13:bf:8b:c4:
e7:50:e1:4f:ad:dc:2d:ef:a9:6b:10:15:a8:55:b2:
67:bf:20:25:3f:32:01:4c:ce:b5:11:85:1e:70:97:
13:f4:87:d1:92:ed:30:f1:07:fe:61:74:5c:df:14:
d5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:C0:13:7A:BC:8C:F4:16:8D:8B:81:AC:3D:FE:D8:C6:6C:D4:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36da04a2-c891-31b6-95a3-5eb4415ee36e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:13b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:b7:07:60:c8:34:06:a0:0e:a9:8d:a0:e1:ea:e5:08:e8:1e:
9b:1a:10:27:ba:a2:6d:d3:08:cd:e1:0c:82:d4:42:97:b2:e4:
cd:94:cd:8e:35:2e:f6:dc:83:f3:04:e7:cc:c0:93:86:76:a4:
88:ef:ea:03:8e:9a:e3:23:d3:e2:5a:53:07:f3:f2:7d:c5:4b:
11:11:78:11:29:a0:c3:e3:e4:e6:1b:d8:9e:63:cc:5d:fe:31:
eb:21:58:81:ab:76:d2:34:95:47:07:eb:6a:77:fe:5e:7b:38:
5d:af:67:83:f9:62:97:e6:ef:99:c0:d8:62:7e:a8:0e:42:dd:
8a:6f:a7:0f:e6:0b:7a:3f:55:b5:de:be:16:96:c4:06:f1:c5:
a7:3b:1c:c8:1e:46:dc:ca:71:7e:d8:0f:a4:43:44:ba:04:04:
1f:59:bb:8d:6c:56:7d:3d:3a:c5:c8:ab:4c:37:1e:f5:b6:db:
59:f2:f5:73:ad:53:e9:cb:8a:ae:98:f6:45:57:26:e9:8e:1f:
9a:a2:67:f3:98:aa:96:4c:f0:81:53:f2:fd:99:7f:31:b5:79:
9e:4e:89:a5:b7:cb:2a:b1:6c:a0:e5:48:83:f6:cb:e6:35:cb:
0c:4d:56:13:08:c1:ab:1f:04:00:6d:8a:e7:fd:38:33:06:0d:
43:64:ed:9d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDv9pdwdrFmZBiFfevwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIxMTEyMDA1MDAwMFoXDTIyMDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
NjE0NDJiMjgtODM0OC00OWJjLWFmODEtMmI0MTQ2MTA2ZDM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3xNwYrwbkK4jBBSYLNlLGwWiUw9XRvARkew
AF7OFy9LphGZ3mSzi4mssC/zzlICOODcnTyK8vmz8cW3Ix352eoq8VuvS0nWja4d
M4ChxMeOe8ycuAp3Uy3w+EHmKsE5mZ1i+WDYbyc/+PxzSSUbpI06Foadzt+pibbV
rs0Q7Us3K/GkIGGmFPYq0ySdRSvPAKtDpgLzuyVksPBaGjDQ5RuK1EYw8PaMUCEv
LxbgIv0oUwv/x51dCyowxdvi3/PsrcWG1oqPcUEUoKdZFRO/i8TnUOFPrdwt76lr
EBWoVbJnvyAlPzIBTM61EYUecJcT9IfRku0w8Qf+YXRc3xTVswIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLGnwBN6vIz0Fo2Lgaw9/tjGbNS+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzZkYTA0YTItYzg5MS0z
MWI2LTk1YTMtNWViNDQxNWVlMzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAE7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACC3B2DINAagDqmNoOHq5QjoHpsaECe6om3TCM3hDILUQpey5M2U
zY41Lvbcg/ME58zAk4Z2pIjv6gOOmuMj0+JaUwfz8n3FSxEReBEpoMPj5OYb2J5j
zF3+MeshWIGrdtI0lUcH62p3/l57OF2vZ4P5Ypfm75nA2GJ+qA5C3Ypvpw/mC3o/
VbXevhaWxAbxxac7HMgeRtzKcX7YD6RDRLoEBB9Zu41sVn09OsXIq0w3HvW221ny
9XOtU+nLiq6Y9kVXJumOH5qiZ/OYqpZM8IFT8v2ZfzG1eZ5OiaW3yyqxbKDlSIP2
y+Y1ywxNVhMIwasfBABtiuf9ODMGDUNk7Z0=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:24:52 2025 by rpki-client