Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7e5991f8-dcf9-3318-b3f2-7a84bdee034e.roa
File: 7e5991f8-dcf9-3318-b3f2-7a84bdee034e.roa (raw, json)
Hash identifier: zvoF0TiirkfWylIZJnoybYowUiQsjKExKJkAAl965NI=
Subject key identifier: E9:AC:73:3F:46:23:EC:64:65:E6:61:64:39:FC:C5:2E:23:B4:4A:F1
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583F648E7EF47913040D570F8740
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7e5991f8-dcf9-3318-b3f2-7a84bdee034e.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Tue 28 Mar 2023 04:00:00 +0000
asID: 53812
IP address blocks: 2001:470:14c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:64:8e:7e:f4:79:13:04:0d:57:0f:87:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Mar 28 04:00:00 2023 GMT
Subject: CN=b1e445ef-cc0c-4dc6-9d50-1561c0a3826d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:dc:96:22:f0:5c:0a:5e:25:d9:48:af:02:
d5:4d:fa:fd:7c:79:a1:38:67:19:c1:c3:04:3c:78:
f2:85:2b:c9:85:4d:d6:bb:7f:90:b9:d9:35:2d:a5:
53:ef:ee:e9:d9:49:b5:e2:6d:19:e6:ec:ba:79:63:
7d:97:c5:cb:95:cc:f5:42:89:a0:85:25:1f:a4:a9:
b9:de:cf:ec:c2:85:dc:fc:06:aa:67:39:4a:c1:f9:
62:14:9f:bd:ae:0b:1c:57:dc:a5:01:11:96:20:cd:
93:f1:50:c3:05:e0:eb:85:77:40:ad:46:1c:76:99:
f4:d7:ad:d2:5f:b0:1b:f1:80:8f:21:dc:f3:9c:de:
15:e0:09:54:ae:78:bf:78:13:78:9c:17:ca:93:06:
f7:16:40:1a:72:9c:14:39:0a:e6:f5:89:4f:3c:d7:
da:83:39:bc:ab:56:d0:ff:bd:24:78:a0:e2:e3:ee:
3f:08:37:69:b8:b1:6b:91:5a:e5:af:3f:fc:a7:45:
d5:30:9f:08:ce:e0:29:1e:da:8d:70:22:44:a9:e5:
a1:f8:c1:c1:e1:93:aa:aa:ae:0b:b7:88:c2:43:24:
fc:b3:62:09:54:8c:0e:e1:12:2e:0a:79:bf:57:bb:
3e:30:d9:86:28:12:8e:51:64:c0:0a:0f:77:f9:a0:
97:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AC:73:3F:46:23:EC:64:65:E6:61:64:39:FC:C5:2E:23:B4:4A:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7e5991f8-dcf9-3318-b3f2-7a84bdee034e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:14c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:41:6a:13:9e:ce:8e:93:2d:3c:2a:55:c6:4b:1f:08:52:56:
64:86:1d:19:f0:a2:e6:72:13:27:ce:6a:88:e4:b8:e2:17:a1:
67:ac:32:a6:53:c1:21:27:b4:08:e0:f8:9b:e0:5c:16:8c:ae:
22:21:03:96:f1:8e:45:c1:4e:ac:f9:54:2c:9a:d9:16:ab:5a:
cc:fc:d1:99:0d:3c:6f:31:0f:60:d8:15:77:fe:a6:b1:7d:53:
70:00:19:4b:d2:b8:3e:fd:e2:5e:bd:89:6f:8a:41:b8:bc:6f:
26:a5:47:38:d5:b3:c6:0b:a5:c4:96:de:1d:7f:76:3c:63:fe:
12:f9:99:23:37:d1:0e:41:86:71:fc:25:15:23:9c:cf:5c:a0:
59:05:b5:57:5a:84:45:b7:df:3e:1c:36:08:6b:2f:55:bc:05:
7a:a2:b2:50:c5:fe:97:5c:62:21:28:fd:8b:46:48:45:55:d1:
a9:5c:89:d7:a4:8d:35:46:b2:75:9c:69:bc:78:6b:18:88:78:
9f:b2:10:bf:78:82:70:fa:cd:3b:06:3a:7b:a4:54:46:e1:c5:
31:e3:15:51:b8:bc:7f:0f:e5:61:01:c6:eb:41:d4:06:5c:94:
bd:cc:cc:b5:92:24:a6:76:a6:4c:0a:aa:d9:f5:fe:e3:fa:50:
06:62:20:d2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD9kjn70eRMEDVcPh0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDkyNzEyMDAwMFoXDTIzMDMyODA0MDAwMFowLzEtMCsGA1UEAxMk
YjFlNDQ1ZWYtY2MwYy00ZGM2LTlkNTAtMTU2MWMwYTM4MjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJjcliLwXApeJdlIrwLVTfr9fHmhOGcZwcME
PHjyhSvJhU3Wu3+Qudk1LaVT7+7p2Um14m0Z5uy6eWN9l8XLlcz1QomghSUfpKm5
3s/swoXc/AaqZzlKwfliFJ+9rgscV9ylARGWIM2T8VDDBeDrhXdArUYcdpn0163S
X7Ab8YCPIdzznN4V4AlUrni/eBN4nBfKkwb3FkAacpwUOQrm9YlPPNfagzm8q1bQ
/70keKDi4+4/CDdpuLFrkVrlrz/8p0XVMJ8IzuApHtqNcCJEqeWh+MHB4ZOqqq4L
t4jCQyT8s2IJVIwO4RIuCnm/V7s+MNmGKBKOUWTACg93+aCXQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOmscz9GI+xkZeZhZDn8xS4jtErxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2U1OTkxZjgtZGNmOS0z
MzE4LWIzZjItN2E4NGJkZWUwMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIpBahOezo6TLTwqVcZLHwhSVmSGHRnwouZyEyfOaojkuOIXoWes
MqZTwSEntAjg+JvgXBaMriIhA5bxjkXBTqz5VCya2RarWsz80ZkNPG8xD2DYFXf+
prF9U3AAGUvSuD794l69iW+KQbi8byalRzjVs8YLpcSW3h1/djxj/hL5mSM30Q5B
hnH8JRUjnM9coFkFtVdahEW33z4cNghrL1W8BXqislDF/pdcYiEo/YtGSEVV0alc
idekjTVGsnWcabx4axiIeJ+yEL94gnD6zTsGOnukVEbhxTHjFVG4vH8P5WEBxutB
1AZclL3MzLWSJKZ2pkwKqtn1/uP6UAZiINI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:41:46 2025 by rpki-client