Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/515bc50b-20e5-33dd-a01f-12888f58762a.roa
File: 515bc50b-20e5-33dd-a01f-12888f58762a.roa (raw, json)
Hash identifier: PaIcaPHH96MJrUYaaaOFVu+j0naqNaw415tYHcI+gh8=
Subject key identifier: 06:26:06:BA:81:16:17:43:08:08:95:DB:45:3B:64:6B:D8:E7:E1:6D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285842A8AD70516C09CB7E9AE81900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/515bc50b-20e5-33dd-a01f-12888f58762a.roa
Signing time: Sun 23 Jul 2023 12:00:00 +0000
ROA not before: Sun 23 Jul 2023 12:00:00 +0000
ROA not after: Wed 24 Jan 2024 05:00:00 +0000
asID: 46475
IP address blocks: 2001:470:16c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:a8:ad:70:51:6c:09:cb:7e:9a:e8:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 23 12:00:00 2023 GMT
Not After : Jan 24 05:00:00 2024 GMT
Subject: CN=a6ab700e-1418-4aa3-9040-82a4d94a5d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:99:78:f3:96:38:fb:e3:58:97:15:a8:72:bd:
c2:8d:bd:de:c7:63:19:af:d3:7e:90:4d:12:00:4b:
97:4b:33:6a:d9:79:a1:40:35:ba:8b:79:76:ab:38:
bf:91:4a:dc:1e:e3:85:0c:78:f3:18:00:7f:b4:3e:
15:7d:cd:16:ec:c6:83:78:5d:82:8b:21:7a:bb:42:
a7:83:1a:23:80:88:81:a4:29:6a:db:d7:20:55:99:
79:27:bf:26:7d:67:35:be:7f:30:57:80:5e:cc:52:
35:bc:9e:64:29:b8:b9:a3:e6:ce:60:69:f4:13:a6:
30:88:09:29:5d:22:72:92:f4:7d:cd:a7:2b:81:cc:
72:be:0f:19:3a:4f:c7:77:6a:9f:2c:74:cc:4c:46:
46:34:7e:96:0d:7e:71:7c:f0:4b:83:55:4a:30:e6:
bc:d7:db:25:32:76:fd:d0:70:b1:34:a2:d0:98:46:
2c:4c:b0:69:9d:e9:bd:39:0e:2d:30:9b:ea:22:3b:
89:6d:60:01:af:d4:86:57:1e:85:03:dc:c8:19:0e:
10:9d:b3:31:8c:32:3e:20:e7:e5:52:a9:26:94:6e:
52:17:55:5d:82:26:2e:ee:1a:ba:75:00:4f:fb:3c:
88:3b:e9:ab:85:b9:3e:17:e9:5f:a0:28:8c:fb:bb:
1b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:26:06:BA:81:16:17:43:08:08:95:DB:45:3B:64:6B:D8:E7:E1:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/515bc50b-20e5-33dd-a01f-12888f58762a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:16c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:a1:b2:2c:24:ad:5a:6c:9f:a7:ea:fb:b7:ff:eb:78:f1:d7:
6a:73:58:f2:30:1e:7d:c4:18:df:63:79:17:e3:59:57:e5:27:
0b:a4:8f:0d:ad:f6:64:61:25:09:00:9e:20:8a:24:b6:1e:c5:
e6:2f:80:c3:dc:1f:64:02:bc:e4:5f:0e:3a:4c:ff:89:a9:ac:
25:de:e4:9e:3b:b8:ca:e5:dd:ee:7a:94:fb:53:56:6c:39:a4:
99:2f:72:ab:be:d1:3a:06:96:4b:c8:83:b6:8f:67:b3:3f:ff:
4e:9c:de:72:77:52:80:2d:1c:00:14:60:e7:1c:fb:43:0e:27:
2f:cc:ec:7c:7a:d7:5a:bd:05:bf:9e:e7:34:5d:f9:49:32:be:
89:65:1a:bd:ea:37:fc:ca:fe:a8:39:94:be:2c:4b:c4:07:a3:
c6:3c:c3:08:e3:d7:86:a5:cb:73:a2:85:bb:d7:f6:f3:5c:53:
d1:40:71:10:4d:71:59:a3:c0:36:e9:be:89:d7:30:43:6b:7c:
98:dc:f3:50:5a:88:c1:5f:ca:c0:ad:33:0a:e9:09:3c:e7:5e:
01:ea:aa:62:c2:51:bf:d4:c8:d5:79:94:42:bb:bd:07:7e:d4:
f6:70:ec:35:a8:e9:c2:76:4c:44:5c:e9:c1:85:bb:d1:bd:6c:
11:d3:4d:6e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEKorXBRbAnLfproGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDcyMzEyMDAwMFoXDTI0MDEyNDA1MDAwMFowLzEtMCsGA1UEAxMk
YTZhYjcwMGUtMTQxOC00YWEzLTkwNDAtODJhNGQ5NGE1ZDFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpl485Y4++NYlxWocr3Cjb3ex2MZr9N+kE0S
AEuXSzNq2XmhQDW6i3l2qzi/kUrcHuOFDHjzGAB/tD4Vfc0W7MaDeF2CiyF6u0Kn
gxojgIiBpClq29cgVZl5J78mfWc1vn8wV4BezFI1vJ5kKbi5o+bOYGn0E6YwiAkp
XSJykvR9zacrgcxyvg8ZOk/Hd2qfLHTMTEZGNH6WDX5xfPBLg1VKMOa819slMnb9
0HCxNKLQmEYsTLBpnem9OQ4tMJvqIjuJbWABr9SGVx6FA9zIGQ4QnbMxjDI+IOfl
UqkmlG5SF1VdgiYu7hq6dQBP+zyIO+mrhbk+F+lfoCiM+7sbPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAYmBrqBFhdDCAiV20U7ZGvY5+FtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTE1YmM1MGItMjBlNS0z
M2RkLWEwMWYtMTI4ODhmNTg3NjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGShsiwkrVpsn6fq+7f/63jx12pzWPIwHn3EGN9jeRfjWVflJwuk
jw2t9mRhJQkAniCKJLYexeYvgMPcH2QCvORfDjpM/4mprCXe5J47uMrl3e56lPtT
Vmw5pJkvcqu+0ToGlkvIg7aPZ7M//06c3nJ3UoAtHAAUYOcc+0MOJy/M7Hx611q9
Bb+e5zRd+UkyvollGr3qN/zK/qg5lL4sS8QHo8Y8wwjj14aly3OihbvX9vNcU9FA
cRBNcVmjwDbpvonXMENrfJjc81BaiMFfysCtMwrpCTznXgHqqmLCUb/UyNV5lEK7
vQd+1PZw7DWo6cJ2TERc6cGFu9G9bBHTTW4=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:29:58 2025 by rpki-client