Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41665f20-5ea3-335e-a3a5-0c4424cff5d9.roa
File: 41665f20-5ea3-335e-a3a5-0c4424cff5d9.roa (raw, json)
Hash identifier: sxkEXUcvJQhNsRGKlqT5RHFsoh8IkVxDY9pXPYQ8TKU=
Subject key identifier: 55:BE:06:D9:9F:5C:63:0C:38:38:20:41:1D:8A:79:7B:B3:30:3F:52
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846EF096238A0B293986F083FD0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41665f20-5ea3-335e-a3a5-0c4424cff5d9.roa
Signing time: Tue 20 Aug 2024 01:30:07 +0000
ROA not before: Tue 20 Aug 2024 01:30:07 +0000
ROA not after: Mon 18 Nov 2024 02:30:07 +0000
asID: 10988
IP address blocks: 2001:470:368::/47 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:ef:09:62:38:a0:b2:93:98:6f:08:3f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 20 01:30:07 2024 GMT
Not After : Nov 18 02:30:07 2024 GMT
Subject: CN=318b113b-2064-4870-8719-9dc6c63db7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:fd:99:25:51:b6:ac:be:9a:d6:b4:34:ba:
b9:53:f1:9c:3d:c4:20:d0:c7:0b:19:68:5d:87:81:
1c:50:1e:e2:ae:fc:60:22:5e:dd:93:6d:8c:10:9b:
8e:11:de:d5:66:2f:92:41:c3:de:18:07:f5:13:28:
20:c2:d2:c3:32:1d:3d:05:fb:7d:ee:5c:58:7d:24:
52:e4:38:a7:76:54:c6:71:b8:a5:71:e0:ac:fa:9f:
e1:c4:79:12:8b:e8:90:ed:c9:f5:34:02:40:68:2d:
00:ee:0c:00:f6:40:f5:59:f6:29:38:61:a5:15:c9:
9a:77:7a:fd:1e:ed:12:f1:fc:58:04:76:46:3f:9e:
5e:3e:21:9b:6a:0d:d5:00:40:0d:46:5c:d5:c2:39:
26:5b:f4:18:72:86:07:ff:a6:74:fc:6b:02:79:9b:
ae:48:1c:71:88:e2:e5:e1:06:f6:ad:36:9f:0a:3a:
d1:59:a3:a3:81:f8:5a:42:77:ab:56:0e:21:67:6f:
b4:04:db:a6:0f:63:09:d9:a6:f3:4a:d0:f6:4e:52:
e1:25:54:e5:f4:75:8a:86:6a:c1:f2:e9:f7:d9:53:
d2:7f:cb:3d:83:7d:71:f4:9c:51:18:b4:8f:a5:28:
80:7a:e5:97:28:67:e4:c3:73:59:85:2f:68:2b:e1:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BE:06:D9:9F:5C:63:0C:38:38:20:41:1D:8A:79:7B:B3:30:3F:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41665f20-5ea3-335e-a3a5-0c4424cff5d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:368::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:40:2e:5f:e9:1b:d1:05:c4:c3:98:dc:03:56:4f:71:50:32:
33:1d:20:a2:e2:3e:7a:db:b4:09:c9:e6:90:00:ac:82:c6:39:
44:a5:64:91:c5:b8:cf:f3:20:1e:79:ce:60:7c:f1:87:db:36:
99:42:5d:d1:6f:38:eb:e6:05:36:d3:52:cb:61:07:cf:f0:74:
e4:38:53:f5:97:50:57:3a:3c:f1:9c:9e:4e:7d:49:6b:41:7f:
95:00:6e:70:d9:ba:e5:ed:a1:ca:ce:14:d2:42:f1:56:43:f2:
8d:71:b0:54:5a:72:8b:51:df:cf:9c:72:3b:5f:f2:fa:1f:a8:
d9:26:04:1a:28:19:b5:1f:c0:3f:7b:dc:4f:a4:22:66:43:ef:
9d:7d:6a:9f:ce:ac:52:d5:c1:79:06:2e:cc:1a:e8:8c:f3:f1:
dc:d0:f9:4f:d2:6c:34:ee:00:17:27:11:00:6b:94:2b:ae:ab:
dc:bd:0e:48:37:1b:49:bf:0f:82:43:ff:fa:9b:06:1f:8a:66:
5d:88:80:ec:65:71:20:6a:44:a0:bb:69:25:f9:72:f1:16:e7:
22:88:d0:6a:91:46:13:f4:f8:d2:b0:73:47:93:8c:d6:31:b0:
ad:a1:95:44:e3:2e:e0:2f:15:f6:85:6b:a0:2a:b1:24:aa:0b:
2a:da:a1:27
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEbvCWI4oLKTmG8IP9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDgyMDAxMzAwN1oXDTI0MTExODAyMzAwN1owLzEtMCsGA1UEAxMk
MzE4YjExM2ItMjA2NC00ODcwLTg3MTktOWRjNmM2M2RiN2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswP9mSVRtqy+mta0NLq5U/GcPcQg0McLGWhd
h4EcUB7irvxgIl7dk22MEJuOEd7VZi+SQcPeGAf1EyggwtLDMh09Bft97lxYfSRS
5DindlTGcbilceCs+p/hxHkSi+iQ7cn1NAJAaC0A7gwA9kD1WfYpOGGlFcmad3r9
Hu0S8fxYBHZGP55ePiGbag3VAEANRlzVwjkmW/QYcoYH/6Z0/GsCeZuuSBxxiOLl
4Qb2rTafCjrRWaOjgfhaQnerVg4hZ2+0BNumD2MJ2abzStD2TlLhJVTl9HWKhmrB
8un32VPSf8s9g31x9JxRGLSPpSiAeuWXKGfkw3NZhS9oK+Hm4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFW+BtmfXGMMODggQR2KeXuzMD9SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDE2NjVmMjAtNWVhMy0z
MzVlLWEzYTUtMGM0NDI0Y2ZmNWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEEcANo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADVALl/pG9EFxMOY3ANWT3FQMjMdIKLiPnrbtAnJ5pAArILGOUSl
ZJHFuM/zIB55zmB88YfbNplCXdFvOOvmBTbTUsthB8/wdOQ4U/WXUFc6PPGcnk59
SWtBf5UAbnDZuuXtocrOFNJC8VZD8o1xsFRacotR38+ccjtf8vofqNkmBBooGbUf
wD973E+kImZD7519ap/OrFLVwXkGLswa6Izz8dzQ+U/SbDTuABcnEQBrlCuuq9y9
Dkg3G0m/D4JD//qbBh+KZl2IgOxlcSBqRKC7aSX5cvEW5yKI0GqRRhP0+NKwc0eT
jNYxsK2hlUTjLuAvFfaFa6AqsSSqCyraoSc=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:18:55 2025 by rpki-client