Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86e7eebc-9057-325a-8505-dae843290efc.roa
File: 86e7eebc-9057-325a-8505-dae843290efc.roa (raw, json)
Hash identifier: hd9lOai3rlTbLNF5V4B4UTXgQyEtO8huYDCRJPatoRk=
Subject key identifier: 6E:87:2E:80:45:AB:4E:A9:35:10:1E:D9:4E:7A:74:46:42:E2:3C:1C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285842CFC30385D4EA586A9F0BD600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86e7eebc-9057-325a-8505-dae843290efc.roa
Signing time: Sun 06 Aug 2023 12:00:00 +0000
ROA not before: Sun 06 Aug 2023 12:00:00 +0000
ROA not after: Wed 07 Feb 2024 05:00:00 +0000
asID: 33763
IP address blocks: 2001:470:178::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:cf:c3:03:85:d4:ea:58:6a:9f:0b:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 6 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2024 GMT
Subject: CN=584c35a0-7c93-4ae9-8f4e-21d301761b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:25:76:8c:d7:71:5f:5f:7f:45:c8:67:cf:
40:df:a4:a2:22:c7:7e:b9:ac:55:8a:98:09:87:1e:
81:59:7a:87:8f:c5:65:29:a4:bf:a8:cf:c3:8a:ac:
c0:ba:cd:dc:08:9a:e7:0c:8d:91:48:56:df:bf:9e:
05:36:63:d2:4a:5b:6e:d1:ff:24:76:ea:7c:00:97:
56:a7:68:63:d5:95:82:22:fa:68:7c:7b:72:54:5c:
b2:06:04:71:98:7c:9d:f9:3c:a8:50:a2:18:1b:43:
91:75:d8:4d:e7:ff:97:13:86:80:2c:86:ca:43:18:
11:9f:cc:db:a5:3a:ec:e9:c5:90:f6:d7:83:bf:b8:
43:d2:c4:35:3b:25:6c:9c:0b:f8:2b:f3:33:c9:94:
7a:f7:d5:b6:4f:85:b6:e1:94:df:58:7c:bf:e8:6d:
4e:0a:e3:1f:66:8d:f7:29:2b:f7:eb:c6:f1:5c:cc:
18:d4:ef:fa:b2:3d:64:a1:54:4a:4d:64:55:a5:d4:
21:8f:4b:8a:a4:1a:a8:e5:e5:ea:0e:7e:3d:3a:76:
3c:5d:3c:d8:6f:e0:e4:3c:0a:b4:3c:48:db:e7:f4:
f5:8e:8f:8f:bc:e3:17:04:90:a5:54:af:55:ef:53:
7d:37:0f:52:64:f9:05:ab:d4:f9:dd:b6:6f:6d:b2:
a3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:87:2E:80:45:AB:4E:A9:35:10:1E:D9:4E:7A:74:46:42:E2:3C:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86e7eebc-9057-325a-8505-dae843290efc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:178::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:58:cc:0c:5e:d5:44:06:6f:8c:ff:c8:67:dc:da:d5:56:83:
c9:3e:2c:50:bd:7d:8c:26:ad:c9:7b:e0:82:e0:f2:fa:08:dc:
cf:16:19:bc:33:cd:82:5e:68:db:4a:8a:44:ad:4d:c8:e0:44:
11:15:3d:8e:4e:e9:3f:85:4e:a1:59:5e:61:0e:51:3f:22:14:
26:54:e1:06:81:8b:98:c4:db:a4:13:79:b5:37:5e:96:31:e7:
94:78:70:ed:76:95:65:93:3f:20:a5:fa:ea:8c:cc:38:82:f2:
da:5c:bb:9a:36:a0:85:e3:aa:10:07:c5:22:ad:83:9a:87:9d:
55:d4:a8:2a:36:b5:4a:2d:74:14:b7:71:7b:f9:88:42:ee:f3:
5d:14:36:12:53:09:a9:ff:90:f4:64:a4:d9:b7:a7:0a:7d:d0:
6f:f8:c2:dd:b8:fd:fb:b9:01:08:05:40:90:77:8a:93:ef:02:
90:49:98:3a:5a:06:a5:d1:ec:c1:4a:6d:f5:97:ff:6e:46:24:
34:4c:1c:9b:cd:7e:aa:1c:c5:97:85:5b:b5:24:d9:d4:20:c4:
6c:0d:46:47:b7:b6:7b:01:99:d9:40:bd:09:bc:a0:43:23:f9:
ae:5a:f6:af:55:fa:db:9c:33:0f:f2:fa:12:87:4b:cd:4a:06:
0b:0b:d6:72
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWELPwwOF1OpYap8L1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDgwNjEyMDAwMFoXDTI0MDIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
NTg0YzM1YTAtN2M5My00YWU5LThmNGUtMjFkMzAxNzYxYjk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0oldozXcV9ff0XIZ89A36SiIsd+uaxVipgJ
hx6BWXqHj8VlKaS/qM/DiqzAus3cCJrnDI2RSFbfv54FNmPSSltu0f8kdup8AJdW
p2hj1ZWCIvpofHtyVFyyBgRxmHyd+TyoUKIYG0ORddhN5/+XE4aALIbKQxgRn8zb
pTrs6cWQ9teDv7hD0sQ1OyVsnAv4K/MzyZR699W2T4W24ZTfWHy/6G1OCuMfZo33
KSv368bxXMwY1O/6sj1koVRKTWRVpdQhj0uKpBqo5eXqDn49OnY8XTzYb+DkPAq0
PEjb5/T1jo+PvOMXBJClVK9V71N9Nw9SZPkFq9T53bZvbbKjuwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG6HLoBFq06pNRAe2U56dEZC4jwcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODZlN2VlYmMtOTA1Ny0z
MjVhLTg1MDUtZGFlODQzMjkwZWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAF4
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFVYzAxe1UQGb4z/yGfc2tVWg8k+LFC9fYwmrcl74ILg8voI3M8W
GbwzzYJeaNtKikStTcjgRBEVPY5O6T+FTqFZXmEOUT8iFCZU4QaBi5jE26QTebU3
XpYx55R4cO12lWWTPyCl+uqMzDiC8tpcu5o2oIXjqhAHxSKtg5qHnVXUqCo2tUot
dBS3cXv5iELu810UNhJTCan/kPRkpNm3pwp90G/4wt24/fu5AQgFQJB3ipPvApBJ
mDpaBqXR7MFKbfWX/25GJDRMHJvNfqocxZeFW7Uk2dQgxGwNRke3tnsBmdlAvQm8
oEMj+a5a9q9V+tucMw/y+hKHS81KBgsL1nI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:54:42 2025 by rpki-client