Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/877bc21a-dfb0-3678-9ce8-00a4ab99ec61.roa
File: 877bc21a-dfb0-3678-9ce8-00a4ab99ec61.roa (raw, json)
Hash identifier: Gjh09pz7S3V2iD1rSPPx8fVDf3CIoyJayaS8vKbO03U=
Subject key identifier: 8B:F1:D6:F6:10:33:97:4C:CE:3F:97:2A:AA:44:19:C2:43:01:C6:01
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A774ADB47EB44F47FA8AAC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/877bc21a-dfb0-3678-9ce8-00a4ab99ec61.roa
Signing time: Thu 27 Jun 2024 20:16:07 +0000
ROA not before: Thu 27 Jun 2024 20:16:07 +0000
ROA not after: Wed 25 Sep 2024 20:16:07 +0000
asID: 200020
IP address blocks: 2001:470:230::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:77:4a:db:47:eb:44:f4:7f:a8:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:16:07 2024 GMT
Not After : Sep 25 20:16:07 2024 GMT
Subject: CN=3db0d887-1d76-4741-90a7-741e686b4b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:bb:f1:5a:03:2a:8e:55:75:6d:c4:7e:d5:
d5:71:f2:c1:d7:21:17:de:32:b2:a4:88:f4:8c:7f:
cb:41:27:b6:8d:78:60:5b:e8:34:fa:0e:51:28:74:
3a:55:f9:2d:f5:eb:b4:62:36:f3:13:76:a3:41:92:
20:b6:f4:d9:16:57:59:e4:00:dc:83:b8:4e:7b:1b:
92:31:9a:0f:3a:13:cb:52:e0:9c:83:9c:5c:c1:c0:
eb:f2:b4:71:54:bb:0b:27:62:f7:5d:c0:89:ac:7d:
8a:f0:ec:12:82:49:7b:69:4a:c1:ea:7f:47:90:46:
06:67:08:80:59:41:e2:02:2f:4a:57:41:9f:cd:d7:
ae:36:57:fc:bc:eb:ea:82:60:c7:26:0c:49:62:52:
7d:8c:34:93:90:43:a4:2d:b2:03:c3:57:1d:99:aa:
cd:1b:6a:c7:0b:d0:6e:f2:4f:b9:61:f8:c8:22:a8:
41:84:66:96:a1:82:6a:39:71:2e:ba:ad:2c:1f:af:
99:c5:0d:ce:88:a6:15:b5:f6:e3:42:02:bb:c2:20:
a8:71:e1:58:95:44:71:bd:3d:22:a9:af:58:cd:f5:
0c:38:82:dc:28:4e:00:1b:6e:12:56:0d:d8:10:a2:
44:8d:92:48:5d:a7:57:2b:ae:94:fc:a3:05:a7:6c:
0a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F1:D6:F6:10:33:97:4C:CE:3F:97:2A:AA:44:19:C2:43:01:C6:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/877bc21a-dfb0-3678-9ce8-00a4ab99ec61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:230::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:cf:ca:82:8b:78:6d:81:38:92:ef:ae:d3:3d:fb:3e:52:89:
03:67:c5:9c:95:cd:25:37:03:37:10:e7:9f:83:c3:2d:3c:0e:
9d:0f:d1:b0:d9:66:89:66:83:7a:f4:86:7c:40:b1:d1:34:ff:
a8:ba:f3:d7:a6:bf:89:8a:d9:1e:07:5c:f2:be:ed:61:a7:48:
2e:93:f2:f2:5d:59:eb:7e:33:eb:1a:e1:a8:a2:19:af:44:34:
93:4f:25:83:97:a6:3c:e3:cf:f7:f0:70:8d:ea:99:39:f2:c8:
c3:ef:4e:89:c2:22:aa:0c:90:92:5c:d9:ab:f9:a1:d9:39:48:
22:66:be:38:9d:39:4c:36:99:23:ca:c0:67:02:36:c5:d0:5c:
ab:76:37:c5:0c:5d:ba:8e:68:25:9d:a2:f8:a5:b0:c0:ee:89:
42:77:6f:8e:dc:05:4f:f0:a7:93:ac:4d:d8:e4:50:87:e2:86:
ef:48:c7:bf:c8:cf:cd:66:10:38:b0:fc:b9:97:f5:3e:da:ba:
06:07:79:15:3b:b8:8f:1d:f5:e6:20:ac:d0:2b:0c:f2:67:12:
03:64:40:73:71:b9:e4:fb:77:70:78:fc:89:f0:63:e3:6d:28:
e5:77:ed:51:2a:4e:f2:cc:02:91:0a:96:2f:90:21:80:ed:57:
08:c8:ea:18
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEZad0rbR+tE9H+oqsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDYyNzIwMTYwN1oXDTI0MDkyNTIwMTYwN1owLzEtMCsGA1UEAxMk
M2RiMGQ4ODctMWQ3Ni00NzQxLTkwYTctNzQxZTY4NmI0YjMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1678VoDKo5VdW3EftXVcfLB1yEX3jKypIj0
jH/LQSe2jXhgW+g0+g5RKHQ6Vfkt9eu0YjbzE3ajQZIgtvTZFldZ5ADcg7hOexuS
MZoPOhPLUuCcg5xcwcDr8rRxVLsLJ2L3XcCJrH2K8OwSgkl7aUrB6n9HkEYGZwiA
WUHiAi9KV0GfzdeuNlf8vOvqgmDHJgxJYlJ9jDSTkEOkLbIDw1cdmarNG2rHC9Bu
8k+5YfjIIqhBhGaWoYJqOXEuuq0sH6+ZxQ3OiKYVtfbjQgK7wiCoceFYlURxvT0i
qa9YzfUMOILcKE4AG24SVg3YEKJEjZJIXadXK66U/KMFp2wKPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIvx1vYQM5dMzj+XKqpEGcJDAcYBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODc3YmMyMWEtZGZiMC0z
Njc4LTljZTgtMDBhNGFiOTllYzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD3PyoKLeG2BOJLvrtM9+z5SiQNnxZyVzSU3AzcQ55+Dwy08Dp0P
0bDZZolmg3r0hnxAsdE0/6i689emv4mK2R4HXPK+7WGnSC6T8vJdWet+M+sa4aii
Ga9ENJNPJYOXpjzjz/fwcI3qmTnyyMPvTonCIqoMkJJc2av5odk5SCJmvjidOUw2
mSPKwGcCNsXQXKt2N8UMXbqOaCWdovilsMDuiUJ3b47cBU/wp5OsTdjkUIfihu9I
x7/Iz81mEDiw/LmX9T7augYHeRU7uI8d9eYgrNArDPJnEgNkQHNxueT7d3B4/Inw
Y+NtKOV37VEqTvLMApEKli+QIYDtVwjI6hg=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:29:40 2025 by rpki-client