Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/529b533f-0d9d-323b-bea2-a4a235dca175.roa
File: 529b533f-0d9d-323b-bea2-a4a235dca175.roa (raw, json)
Hash identifier: LTs54P+sSzbToefW+9UEiDis1j1dSjwFizClKVp8TXg=
Subject key identifier: DD:20:2C:18:98:93:95:BE:69:87:B2:1C:CE:3C:AB:F1:EF:EC:54:89
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858429D82B8889D3F8B78A31CEB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/529b533f-0d9d-323b-bea2-a4a235dca175.roa
Signing time: Wed 19 Jul 2023 12:00:00 +0000
ROA not before: Wed 19 Jul 2023 12:00:00 +0000
ROA not after: Sat 20 Jan 2024 05:00:00 +0000
asID: 56554
IP address blocks: 2001:470:166::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:9d:82:b8:88:9d:3f:8b:78:a3:1c:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 19 12:00:00 2023 GMT
Not After : Jan 20 05:00:00 2024 GMT
Subject: CN=35452339-8c94-439f-8d26-eac18386d191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ab:3a:78:13:47:37:c5:b1:bb:4d:51:fe:17:
6a:cb:67:38:36:26:eb:89:5b:2f:2e:08:40:11:3b:
da:4e:04:ce:be:48:63:82:41:f7:64:f4:e4:e4:5a:
6e:85:77:da:eb:27:d3:92:83:82:25:ed:37:13:e3:
e7:e2:ab:6c:da:8f:4a:97:c3:16:bf:07:4b:81:35:
eb:08:6f:ea:74:4e:7e:d2:31:52:97:2e:a8:bd:9f:
63:5b:d8:30:f4:c0:d2:d5:38:27:f4:33:39:f0:8b:
e0:f8:cc:9a:22:90:75:d3:07:d7:0b:5a:f1:ff:b9:
a8:26:16:e8:4e:8a:50:49:e8:e0:e2:61:6e:be:06:
99:5b:cc:89:4d:81:aa:28:70:51:d1:42:06:cd:14:
28:c8:a1:11:c6:04:c5:bd:92:c3:7d:e8:3a:62:18:
be:6c:f3:3e:8a:72:ce:3c:e6:f6:f8:37:6e:f5:99:
3e:fe:4e:69:f0:23:37:fc:fa:77:a9:f7:db:5a:a5:
99:cb:cd:85:e3:72:5a:49:c6:89:20:98:1e:4f:3c:
05:51:9b:d3:1b:dd:f0:6e:cf:84:08:3f:cf:fa:48:
e9:4c:26:5b:e3:53:49:61:f9:94:44:9a:43:ea:1f:
f8:6f:4c:ea:31:a3:5a:9e:0e:7d:50:ca:b6:76:9e:
3e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:2C:18:98:93:95:BE:69:87:B2:1C:CE:3C:AB:F1:EF:EC:54:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/529b533f-0d9d-323b-bea2-a4a235dca175.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:166::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:1b:40:e3:a7:f8:a7:89:ae:79:b9:25:d1:89:6f:d2:ca:4b:
b0:60:0e:6b:a8:18:c3:c2:75:c3:3a:72:24:93:2a:39:8d:5b:
cb:d2:5b:74:93:eb:08:aa:5a:14:53:b9:3b:44:fa:f4:fa:5d:
8f:18:6b:7c:3e:2b:0e:37:b7:26:bc:0e:46:97:d9:da:7d:31:
59:e2:16:e8:7a:25:db:a7:1f:8a:e1:65:4c:2c:20:67:08:a8:
bd:98:3b:4a:f7:6b:09:de:1f:e9:ab:95:ba:77:8a:b8:dc:62:
f0:f7:24:a1:31:41:9a:52:52:fd:c5:b2:7f:e4:05:74:a4:55:
54:0a:d7:2c:21:2c:0f:2f:68:10:fa:bb:8b:08:a2:aa:8c:6e:
2c:34:8c:1c:63:b4:63:cd:f3:b4:b9:4a:7e:b1:aa:d9:79:63:
3e:fc:81:99:3f:89:d9:0b:31:7b:07:95:74:43:6c:5c:a3:c5:
86:30:30:ad:05:cd:b3:ac:ae:ce:59:da:04:ec:57:41:48:39:
cc:30:bc:d4:0d:00:5f:e9:4a:67:b2:98:17:78:59:14:bb:b3:
13:4c:ed:14:12:06:2a:87:bf:3a:f9:ea:43:dd:03:9a:e4:a2:
d5:c7:42:90:45:b9:ab:56:88:99:bb:d2:26:09:b5:25:40:38:
a0:c3:02:70
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEKdgriInT+LeKMc6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDcxOTEyMDAwMFoXDTI0MDEyMDA1MDAwMFowLzEtMCsGA1UEAxMk
MzU0NTIzMzktOGM5NC00MzlmLThkMjYtZWFjMTgzODZkMTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKs6eBNHN8Wxu01R/hdqy2c4NibriVsvLghA
ETvaTgTOvkhjgkH3ZPTk5FpuhXfa6yfTkoOCJe03E+Pn4qts2o9Kl8MWvwdLgTXr
CG/qdE5+0jFSly6ovZ9jW9gw9MDS1Tgn9DM58Ivg+MyaIpB10wfXC1rx/7moJhbo
TopQSejg4mFuvgaZW8yJTYGqKHBR0UIGzRQoyKERxgTFvZLDfeg6Yhi+bPM+inLO
POb2+Ddu9Zk+/k5p8CM3/Pp3qffbWqWZy82F43JaScaJIJgeTzwFUZvTG93wbs+E
CD/P+kjpTCZb41NJYfmURJpD6h/4b0zqMaNang59UMq2dp4+NwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN0gLBiYk5W+aYeyHM48q/Hv7FSJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTI5YjUzM2YtMGQ5ZC0z
MjNiLWJlYTItYTRhMjM1ZGNhMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFm
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKsbQOOn+KeJrnm5JdGJb9LKS7BgDmuoGMPCdcM6ciSTKjmNW8vS
W3ST6wiqWhRTuTtE+vT6XY8Ya3w+Kw43tya8DkaX2dp9MVniFuh6JdunH4rhZUws
IGcIqL2YO0r3awneH+mrlbp3irjcYvD3JKExQZpSUv3Fsn/kBXSkVVQK1ywhLA8v
aBD6u4sIoqqMbiw0jBxjtGPN87S5Sn6xqtl5Yz78gZk/idkLMXsHlXRDbFyjxYYw
MK0FzbOsrs5Z2gTsV0FIOcwwvNQNAF/pSmeymBd4WRS7sxNM7RQSBiqHvzr56kPd
A5rkotXHQpBFuatWiJm70iYJtSVAOKDDAnA=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:18:57 2025 by rpki-client