Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56947fde-5574-38be-8a84-f163f3024b44.roa
File: 56947fde-5574-38be-8a84-f163f3024b44.roa (raw, json)
Hash identifier: I0R2u3OnF3/YwwXCrxWHPZgiIYcWUR/qTl3PiKE9kuI=
Subject key identifier: 48:07:B6:DB:A9:EA:30:7B:6D:81:9E:7C:EE:7D:85:CD:53:3C:F9:45
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858473A5B6C254678C84AE8DB4780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56947fde-5574-38be-8a84-f163f3024b44.roa
Signing time: Mon 16 Sep 2024 01:00:29 +0000
ROA not before: Mon 16 Sep 2024 01:00:29 +0000
ROA not after: Sun 15 Dec 2024 02:00:29 +0000
asID: 137329
IP address blocks: 2001:470:230::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:3a:5b:6c:25:46:78:c8:4a:e8:db:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 16 01:00:29 2024 GMT
Not After : Dec 15 02:00:29 2024 GMT
Subject: CN=696c2d2c-a249-4528-8239-2268239869fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4e:ac:5a:c5:40:01:08:6c:39:1c:90:a1:05:
a5:e6:e8:48:a6:1d:b1:1b:42:4d:06:43:c9:52:c9:
b4:ba:8d:71:81:53:cb:8b:aa:0e:42:f3:29:29:ed:
5f:71:8c:29:5b:73:3b:05:86:85:5f:82:9a:9e:44:
9f:bb:bc:1c:53:d1:fb:c7:49:38:35:e7:32:d5:80:
18:ea:90:20:df:7c:c8:b4:09:38:16:c5:03:5c:35:
fc:08:0f:d4:56:50:03:cf:77:89:8f:1a:08:6b:c3:
84:17:d3:35:ca:2f:71:47:b3:d9:62:de:59:89:31:
80:43:b4:9e:aa:c3:8b:48:f6:5f:89:c6:67:b8:ba:
38:26:8b:ac:fa:5b:cc:4c:cd:d5:fc:da:fe:08:33:
90:ac:87:ef:f4:48:bb:45:9d:52:0e:ad:4c:3b:38:
40:79:b7:95:79:b5:6f:43:7b:20:72:c1:a9:8c:8f:
9d:c2:7b:c6:f8:50:e5:56:c9:4e:48:64:51:cd:38:
69:3a:8e:85:4b:26:74:b9:1d:09:85:6f:f8:43:4f:
49:96:9a:8c:7b:00:32:23:f6:9b:04:9e:2a:02:85:
5c:0b:19:b4:cc:7d:3e:77:84:62:3a:13:7a:2e:7d:
0d:76:b5:21:1e:a0:6b:70:78:e7:d1:5e:4c:9a:01:
4d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:07:B6:DB:A9:EA:30:7B:6D:81:9E:7C:EE:7D:85:CD:53:3C:F9:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56947fde-5574-38be-8a84-f163f3024b44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:230::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:d1:6d:8c:2a:c2:3d:45:e5:82:6b:8b:46:a4:e7:fb:b9:e2:
30:7c:c7:3a:9e:6e:3e:4c:31:fe:a3:08:71:9b:c6:e7:88:b1:
25:7f:8f:39:20:1f:42:03:ed:bd:78:70:d3:d8:2d:78:0a:54:
af:26:17:04:16:6d:72:ce:52:39:ca:54:84:90:75:9d:d4:51:
f4:73:45:70:df:85:47:a2:c5:e5:72:d7:8c:57:2d:01:23:65:
bc:21:c1:19:6c:b2:ff:f9:4f:2f:f5:05:8b:a6:a9:78:fc:44:
16:05:b2:6e:31:53:26:1e:eb:76:79:cf:0e:f3:b8:f5:91:7f:
fb:38:1d:0e:f3:4e:87:20:51:ef:cc:b3:af:6f:78:e6:d1:24:
11:4b:07:71:d0:35:15:69:ad:a7:66:04:06:f9:33:65:5e:f4:
6c:68:e1:60:9d:fd:01:bf:60:a5:82:0d:a7:02:30:cc:75:3e:
94:9e:87:ff:ea:7a:c2:6b:39:ee:26:f6:ae:a0:cc:9a:48:3e:
b4:96:fe:a0:86:8a:63:6e:09:48:e8:c1:3f:46:73:32:72:50:
84:c7:2c:2c:7d:9f:66:93:f8:c5:e8:f5:14:0c:44:e7:85:94:
cc:59:de:08:36:c5:e1:79:d1:7a:ef:b8:f3:cd:c1:2e:d2:c7:
b8:c5:07:21
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W2wlRnjISujbR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
Njk2YzJkMmMtYTI0OS00NTI4LTgyMzktMjI2ODIzOTg2OWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE6sWsVAAQhsORyQoQWl5uhIph2xG0JNBkPJ
Usm0uo1xgVPLi6oOQvMpKe1fcYwpW3M7BYaFX4KankSfu7wcU9H7x0k4Necy1YAY
6pAg33zItAk4FsUDXDX8CA/UVlADz3eJjxoIa8OEF9M1yi9xR7PZYt5ZiTGAQ7Se
qsOLSPZficZnuLo4Jous+lvMTM3V/Nr+CDOQrIfv9Ei7RZ1SDq1MOzhAebeVebVv
Q3sgcsGpjI+dwnvG+FDlVslOSGRRzThpOo6FSyZ0uR0JhW/4Q09JlpqMewAyI/ab
BJ4qAoVcCxm0zH0+d4RiOhN6Ln0NdrUhHqBrcHjn0V5MmgFN+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEgHttup6jB7bYGefO59hc1TPPlFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTY5NDdmZGUtNTU3NC0z
OGJlLThhODQtZjE2M2YzMDI0YjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD/RbYwqwj1F5YJri0ak5/u54jB8xzqebj5MMf6jCHGbxueIsSV/
jzkgH0ID7b14cNPYLXgKVK8mFwQWbXLOUjnKVISQdZ3UUfRzRXDfhUeixeVy14xX
LQEjZbwhwRlssv/5Ty/1BYumqXj8RBYFsm4xUyYe63Z5zw7zuPWRf/s4HQ7zTocg
Ue/Ms69veObRJBFLB3HQNRVpradmBAb5M2Ve9Gxo4WCd/QG/YKWCDacCMMx1PpSe
h//qesJrOe4m9q6gzJpIPrSW/qCGimNuCUjowT9GczJyUITHLCx9n2aT+MXo9RQM
ROeFlMxZ3gg2xeF50XrvuPPNwS7Sx7jFByE=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:46:23 2025 by rpki-client