Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e025d5e-0739-3352-96e4-7fd067447be9.roa
File: 4e025d5e-0739-3352-96e4-7fd067447be9.roa (raw, json)
Hash identifier: 8dr+27Oxo4uZWyjcCHmqQI1x42Ax8l83higpujGrPGw=
Subject key identifier: 32:FE:6B:E4:25:C8:E2:DF:53:1F:75:11:F7:8B:85:CA:3D:64:48:4F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858462073238672D2C5C4969D8800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e025d5e-0739-3352-96e4-7fd067447be9.roa
Signing time: Fri 07 Jun 2024 01:30:52 +0000
ROA not before: Fri 07 Jun 2024 01:30:52 +0000
ROA not after: Thu 05 Sep 2024 01:30:52 +0000
asID: 200020
IP address blocks: 2001:470:112::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:20:73:23:86:72:d2:c5:c4:96:9d:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 7 01:30:52 2024 GMT
Not After : Sep 5 01:30:52 2024 GMT
Subject: CN=233bf0ec-97e0-4085-b42d-53dec5fc84c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:fd:11:0d:84:c2:d0:e0:14:10:5f:4f:3b:
6f:64:03:cd:15:ef:97:d7:04:24:41:2b:fd:02:cf:
fb:cc:b7:31:85:e1:8b:09:8a:1d:b8:93:e6:10:2f:
25:fb:53:ef:41:c8:50:0c:c8:b9:5b:93:c9:d8:47:
be:41:ed:ac:29:c9:78:c4:43:1f:f0:d1:9c:71:84:
af:1e:15:ef:81:a2:aa:95:2b:e7:93:6a:fd:68:02:
19:5a:7d:8d:b6:f0:8e:76:4a:05:7a:76:8c:bb:86:
f0:f3:b9:e9:74:61:4e:ad:cc:60:2a:0b:10:4c:0a:
43:c7:ae:e5:4c:b7:32:fe:82:13:26:f3:17:f5:07:
b8:d6:03:f0:ae:c5:d5:24:82:f3:30:0c:8c:92:29:
81:8e:6b:f4:e2:b5:cf:3b:52:75:ca:24:9f:7a:f5:
a8:d4:f1:01:68:33:f5:3d:c2:6c:1d:c4:24:fc:bd:
2b:51:2e:9e:3f:f8:7e:6f:db:c8:69:ab:1a:86:da:
d7:25:c4:f9:b2:24:54:93:49:a7:b8:c8:8f:49:50:
21:f8:26:30:c9:71:e2:fe:23:13:f9:cd:7f:7e:d1:
77:48:ca:5a:94:cd:02:61:db:2f:4a:cc:59:06:b9:
d5:7d:6a:fb:11:8e:57:fe:53:37:00:14:04:52:33:
c8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FE:6B:E4:25:C8:E2:DF:53:1F:75:11:F7:8B:85:CA:3D:64:48:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e025d5e-0739-3352-96e4-7fd067447be9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:112::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:4c:df:3b:08:6a:b1:6b:62:d2:10:df:95:12:57:15:d0:04:
dd:37:b4:4b:a5:3b:ec:58:36:eb:e3:d8:64:b7:b6:69:6b:6f:
0c:af:a5:a2:6f:47:b9:3a:a8:51:36:60:5c:85:8c:95:dd:35:
dc:13:95:4f:3e:2f:a5:c6:78:3e:df:e6:86:72:26:4f:15:7e:
8b:af:ba:9d:b8:1f:34:d0:af:5d:fb:01:79:96:95:4a:a1:1f:
81:1e:aa:b7:5d:ec:51:c1:f4:46:4d:9a:99:ae:e8:04:16:cb:
f4:ef:31:a4:fd:da:97:df:66:ce:ed:a9:3d:8a:7a:d6:79:bc:
4c:40:2a:f8:f7:81:77:e6:39:c0:2c:1b:c4:88:a6:0b:24:9d:
e8:21:df:fd:84:5d:70:5a:97:c9:2b:ff:aa:06:3a:4d:61:42:
ed:f8:1a:8d:07:6f:92:b5:07:92:de:3c:39:9a:1f:ae:6b:38:
af:10:8e:2a:29:c4:2c:51:99:0d:f9:60:5f:98:b1:15:1a:f7:
d7:4d:6a:43:b8:8b:29:ba:77:35:6f:fc:a6:1e:b4:9f:b0:7b:
b4:cf:1d:08:02:96:e3:53:16:85:7e:d4:27:26:dc:d2:87:61:
bc:7f:36:f5:a5:6b:96:1e:63:2e:ac:5f:81:e7:eb:67:0c:23:
bf:0a:d4:ed
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYgcyOGctLFxJadiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDYwNzAxMzA1MloXDTI0MDkwNTAxMzA1MlowLzEtMCsGA1UEAxMk
MjMzYmYwZWMtOTdlMC00MDg1LWI0MmQtNTNkZWM1ZmM4NGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiL9EQ2EwtDgFBBfTztvZAPNFe+X1wQkQSv9
As/7zLcxheGLCYoduJPmEC8l+1PvQchQDMi5W5PJ2Ee+Qe2sKcl4xEMf8NGccYSv
HhXvgaKqlSvnk2r9aAIZWn2NtvCOdkoFenaMu4bw87npdGFOrcxgKgsQTApDx67l
TLcy/oITJvMX9Qe41gPwrsXVJILzMAyMkimBjmv04rXPO1J1yiSfevWo1PEBaDP1
PcJsHcQk/L0rUS6eP/h+b9vIaasahtrXJcT5siRUk0mnuMiPSVAh+CYwyXHi/iMT
+c1/ftF3SMpalM0CYdsvSsxZBrnVfWr7EY5X/lM3ABQEUjPIyQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDL+a+QlyOLfUx91EfeLhco9ZEhPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGUwMjVkNWUtMDczOS0z
MzUyLTk2ZTQtN2ZkMDY3NDQ3YmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAES
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIxM3zsIarFrYtIQ35USVxXQBN03tEulO+xYNuvj2GS3tmlrbwyv
paJvR7k6qFE2YFyFjJXdNdwTlU8+L6XGeD7f5oZyJk8Vfouvup24HzTQr137AXmW
lUqhH4Eeqrdd7FHB9EZNmpmu6AQWy/TvMaT92pffZs7tqT2KetZ5vExAKvj3gXfm
OcAsG8SIpgsknegh3/2EXXBal8kr/6oGOk1hQu34Go0Hb5K1B5LePDmaH65rOK8Q
jiopxCxRmQ35YF+YsRUa99dNakO4iym6dzVv/KYetJ+we7TPHQgCluNTFoV+1Ccm
3NKHYbx/NvWla5YeYy6sX4Hn62cMI78K1O0=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:19:25 2025 by rpki-client