Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/49722753-ef24-3c7f-a8f4-7f98bc37a2b6.roa
File: 49722753-ef24-3c7f-a8f4-7f98bc37a2b6.roa (raw, json)
Hash identifier: GR4TX5kd3/K6smlpXcutkwXE466WoPEQqB2YSjcP0aU=
Subject key identifier: 39:41:FF:69:3C:09:21:1C:B7:16:8E:C8:7D:F3:F7:74:38:C0:A4:48
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584631334D31A82D46402EB5A160
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/49722753-ef24-3c7f-a8f4-7f98bc37a2b6.roa
Signing time: Thu 13 Jun 2024 01:30:59 +0000
ROA not before: Thu 13 Jun 2024 01:30:59 +0000
ROA not after: Wed 11 Sep 2024 01:30:59 +0000
asID: 329386
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:31:33:4d:31:a8:2d:46:40:2e:b5:a1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 13 01:30:59 2024 GMT
Not After : Sep 11 01:30:59 2024 GMT
Subject: CN=10b45f17-773f-4e31-b3ba-c12997b69a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b0:15:67:ca:a6:31:ae:4d:0f:76:02:b3:b5:
eb:78:93:e4:53:6f:7f:46:57:28:6f:9e:5a:1b:20:
83:af:c8:07:f1:33:b3:97:77:ec:da:0e:a0:4b:8e:
43:78:58:40:d1:78:f1:09:39:e3:15:8b:fb:ea:8f:
41:4f:e5:e7:6f:c9:67:f1:2d:ef:af:94:5e:da:e8:
ec:aa:41:c9:fe:f1:eb:98:de:66:e3:cf:f8:cc:47:
5c:ab:9e:2c:e8:de:cc:0e:46:e5:09:0c:0b:85:83:
48:0b:a4:d4:fa:57:75:d5:ff:1e:c3:17:c9:c9:55:
e3:d1:94:8f:9d:40:eb:9f:9f:47:df:72:1f:5f:49:
14:84:1b:0f:a5:2b:42:87:34:1b:42:88:4f:04:e0:
90:e5:a2:0b:ef:64:3b:09:29:f0:47:d2:37:92:35:
a2:59:15:c2:fe:d5:e7:79:49:ed:11:37:ee:f5:8f:
60:81:5f:7d:67:e4:37:04:60:c4:36:a5:91:eb:23:
d9:9f:bc:e7:16:91:3c:13:d2:6c:27:d8:09:54:e3:
cf:0e:c2:76:be:5e:10:3d:70:c7:5e:d6:5b:00:6d:
98:8f:2c:80:75:ff:be:53:39:a3:73:76:5f:43:31:
a8:bd:1a:a2:30:22:57:ff:de:9f:8f:21:bd:9c:b3:
d8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:41:FF:69:3C:09:21:1C:B7:16:8E:C8:7D:F3:F7:74:38:C0:A4:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/49722753-ef24-3c7f-a8f4-7f98bc37a2b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:d2:e5:cc:6a:66:d2:ee:34:34:ba:1b:57:b7:4d:34:87:6c:
84:a0:9a:bd:9a:3a:4a:9c:d7:e8:26:6e:9d:96:ae:a8:7f:9b:
a0:c7:05:d4:16:ce:75:d6:d1:6e:21:76:27:5a:02:14:5d:65:
46:fe:63:78:c4:78:f2:86:19:6a:68:1c:4e:33:2f:27:1e:1a:
ee:4a:36:b0:38:99:2c:c2:9b:bb:fa:2c:50:f9:b1:2c:b3:53:
9e:65:a3:81:84:60:2b:2c:16:0b:72:df:51:37:b4:b4:f8:f9:
a2:e2:ad:ae:1c:45:ba:d0:66:5b:10:88:c9:9e:4b:13:a4:d7:
4f:02:7d:45:12:cc:cf:c1:1f:64:6c:7e:de:6c:0d:9a:a0:f1:
d5:d9:37:56:22:b1:7a:b9:9a:3a:0a:dd:5d:d3:97:a2:1c:bf:
a4:52:de:ad:c1:0f:50:16:24:fd:e8:c6:eb:6c:57:8f:14:49:
36:4d:4d:34:b0:fc:92:39:f1:8a:30:52:29:41:fd:3e:7c:b8:
14:ee:ec:9f:21:82:d9:70:db:56:a0:e9:cb:fb:82:7e:a6:1f:
f2:cd:b8:f8:55:c4:6b:d6:af:10:c2:7d:1b:f6:32:33:1b:98:
14:7f:62:5f:c5:73:2c:b6:47:d3:ab:f7:21:ea:db:2a:8e:6d:
c5:40:c5:0f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYxM00xqC1GQC61oWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDYxMzAxMzA1OVoXDTI0MDkxMTAxMzA1OVowLzEtMCsGA1UEAxMk
MTBiNDVmMTctNzczZi00ZTMxLWIzYmEtYzEyOTk3YjY5YTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirAVZ8qmMa5ND3YCs7XreJPkU29/Rlcob55a
GyCDr8gH8TOzl3fs2g6gS45DeFhA0XjxCTnjFYv76o9BT+Xnb8ln8S3vr5Re2ujs
qkHJ/vHrmN5m48/4zEdcq54s6N7MDkblCQwLhYNIC6TU+ld11f8ewxfJyVXj0ZSP
nUDrn59H33IfX0kUhBsPpStChzQbQohPBOCQ5aIL72Q7CSnwR9I3kjWiWRXC/tXn
eUntETfu9Y9ggV99Z+Q3BGDENqWR6yPZn7znFpE8E9JsJ9gJVOPPDsJ2vl4QPXDH
XtZbAG2YjyyAdf++Uzmjc3ZfQzGovRqiMCJX/96fjyG9nLPY4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDlB/2k8CSEctxaOyH3z93Q4wKRIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDk3MjI3NTMtZWYyNC0z
YzdmLWE4ZjQtN2Y5OGJjMzdhMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHr
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALTS5cxqZtLuNDS6G1e3TTSHbISgmr2aOkqc1+gmbp2Wrqh/m6DH
BdQWznXW0W4hdidaAhRdZUb+Y3jEePKGGWpoHE4zLyceGu5KNrA4mSzCm7v6LFD5
sSyzU55lo4GEYCssFgty31E3tLT4+aLira4cRbrQZlsQiMmeSxOk108CfUUSzM/B
H2Rsft5sDZqg8dXZN1YisXq5mjoK3V3Tl6Icv6RS3q3BD1AWJP3oxutsV48USTZN
TTSw/JI58YowUilB/T58uBTu7J8hgtlw21ag6cv7gn6mH/LNuPhVxGvWrxDCfRv2
MjMbmBR/Yl/Fcyy2R9Or9yHq2yqObcVAxQ8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:23:12 2025 by rpki-client