Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d7c2f30-4b81-3690-8182-ffe9351ea2d1.roa
File: 6d7c2f30-4b81-3690-8182-ffe9351ea2d1.roa (raw, json)
Hash identifier: i3lbLgISbaYJDNwwatGhWeJQCjSiwdiK+3GIrGQPkYI=
Subject key identifier: D1:9C:26:35:C1:92:16:A8:E2:6F:F4:2C:03:0E:70:CC:A0:84:6B:2D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BFDA6C1298080A2F584541580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d7c2f30-4b81-3690-8182-ffe9351ea2d1.roa
Signing time: Sat 20 Nov 2021 05:00:00 +0000
ROA not before: Sat 20 Nov 2021 05:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 396841
IP address blocks: 2001:470:d9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fd:a6:c1:29:80:80:a2:f5:84:54:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 20 05:00:00 2021 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=02a774cc-2acf-47f1-be73-5760f301ed1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1a:a9:bf:06:d4:13:b0:17:97:9d:08:be:a5:
db:2b:dc:c2:df:15:f3:74:07:ca:62:94:b3:f5:ca:
2a:43:6f:71:ed:24:89:e2:0e:ff:6c:28:99:7e:52:
d0:8e:30:e7:c9:4a:b0:3e:e1:fe:db:ea:1b:9f:d1:
a6:e8:41:e2:c4:57:18:05:5e:88:50:5d:bc:14:f8:
87:07:25:d9:a0:ff:84:44:09:46:81:2d:9e:2a:b9:
c7:74:0a:ea:97:62:c9:d6:d4:0e:96:eb:2a:dd:c0:
53:d8:4a:8f:b5:3a:ee:1f:9f:ea:e3:9a:d1:7c:d6:
92:5d:91:4b:90:74:85:0c:19:31:09:0d:3b:43:b4:
29:27:f9:68:8b:0c:d9:95:7a:35:82:fd:28:0a:7a:
f3:74:ec:f2:6a:5e:80:c2:af:0c:10:48:58:b5:57:
96:f8:84:98:81:dc:f4:ed:b4:25:93:79:30:8d:0f:
66:69:36:ff:40:25:c2:df:fc:a8:30:cb:88:7b:0b:
e9:2c:fc:26:b4:69:11:47:94:9d:00:ca:ac:f5:8c:
32:a5:3a:9f:78:bf:1a:75:27:dd:02:17:d0:f4:00:
b3:d6:bb:45:c4:9b:a7:6e:4c:eb:34:07:96:73:d1:
98:e6:42:a1:c9:91:27:96:b7:12:2a:79:c6:24:e7:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9C:26:35:C1:92:16:A8:E2:6F:F4:2C:03:0E:70:CC:A0:84:6B:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d7c2f30-4b81-3690-8182-ffe9351ea2d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:d9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:ee:7f:3e:6e:9c:26:6b:de:0e:03:70:4d:d3:3a:29:38:7e:
cf:39:65:3a:43:50:c3:f0:18:d5:a4:05:b8:c8:11:a4:f6:8f:
f1:57:2f:54:9d:86:f7:7e:30:48:dd:da:9c:de:57:fd:d8:ee:
b8:11:b9:50:e0:48:6a:76:cb:d2:90:9b:2b:55:d9:5f:6d:ca:
10:92:4a:e1:cf:f6:c0:9a:37:2a:e2:62:a4:f6:19:d5:7c:88:
c0:d2:2a:db:96:db:d5:29:26:3d:c6:3b:9f:5b:a1:4c:e2:b8:
bb:e3:06:d8:ad:0c:1e:7e:09:06:4e:6e:d1:87:5f:25:72:08:
5c:78:e4:bd:a1:a9:3e:f2:a1:13:12:07:7d:2e:a6:7e:af:49:
52:2d:d6:f4:77:07:d5:dc:00:0a:9b:c8:49:e6:0c:e9:7b:6a:
b9:b5:90:be:fc:12:93:09:41:ba:c7:4b:79:2b:c8:c0:ed:f8:
6a:04:72:61:55:77:cb:75:1a:6d:81:da:bb:17:90:6c:92:9e:
81:91:ef:c2:a3:04:4c:9d:a2:91:66:c9:84:2a:3e:1b:22:56:
1f:11:e0:cb:bf:15:d2:d2:ad:e1:1a:2f:59:e6:da:ad:9d:34:
ab:cd:20:89:36:5a:c3:c4:4b:60:3c:d0:c2:e4:6e:de:9d:a7:
44:fb:25:c5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDv9psEpgICi9YRUFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIxMTEyMDA1MDAwMFoXDTIyMDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
MDJhNzc0Y2MtMmFjZi00N2YxLWJlNzMtNTc2MGYzMDFlZDFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxqpvwbUE7AXl50IvqXbK9zC3xXzdAfKYpSz
9coqQ29x7SSJ4g7/bCiZflLQjjDnyUqwPuH+2+obn9Gm6EHixFcYBV6IUF28FPiH
ByXZoP+ERAlGgS2eKrnHdArql2LJ1tQOlusq3cBT2EqPtTruH5/q45rRfNaSXZFL
kHSFDBkxCQ07Q7QpJ/loiwzZlXo1gv0oCnrzdOzyal6Awq8MEEhYtVeW+ISYgdz0
7bQlk3kwjQ9maTb/QCXC3/yoMMuIewvpLPwmtGkRR5SdAMqs9YwypTqfeL8adSfd
AhfQ9ACz1rtFxJunbkzrNAeWc9GY5kKhyZEnlrcSKnnGJOekawIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNGcJjXBkhao4m/0LAMOcMyghGstMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNmQ3YzJmMzAtNGI4MS0z
NjkwLTgxODItZmZlOTM1MWVhMmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADZ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJbufz5unCZr3g4DcE3TOik4fs85ZTpDUMPwGNWkBbjIEaT2j/FX
L1Sdhvd+MEjd2pzeV/3Y7rgRuVDgSGp2y9KQmytV2V9tyhCSSuHP9sCaNyriYqT2
GdV8iMDSKtuW29UpJj3GO59boUziuLvjBtitDB5+CQZObtGHXyVyCFx45L2hqT7y
oRMSB30upn6vSVIt1vR3B9XcAAqbyEnmDOl7arm1kL78EpMJQbrHS3kryMDt+GoE
cmFVd8t1Gm2B2rsXkGySnoGR78KjBEydopFmyYQqPhsiVh8R4Mu/FdLSreEaL1nm
2q2dNKvNIIk2WsPES2A80MLkbt6dp0T7JcU=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:38:46 2025 by rpki-client