Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8dc0230b-7e12-30be-9973-409aedc66355.roa
File: 8dc0230b-7e12-30be-9973-409aedc66355.roa (raw, json)
Hash identifier: vJi/d68dQ7lsIzTU5b66JlYuZbevEtRq6Gr4wtUlc88=
Subject key identifier: 40:C4:87:AA:0D:49:6F:9F:6C:EC:9C:56:BF:DB:A7:78:89:D9:B7:2F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A75785C0D6148872F267F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8dc0230b-7e12-30be-9973-409aedc66355.roa
Signing time: Thu 27 Jun 2024 20:12:27 +0000
ROA not before: Thu 27 Jun 2024 20:12:27 +0000
ROA not after: Wed 25 Sep 2024 20:12:27 +0000
asID: 150727
IP address blocks: 2001:470:1c6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:75:78:5c:0d:61:48:87:2f:26:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:12:27 2024 GMT
Not After : Sep 25 20:12:27 2024 GMT
Subject: CN=4db45564-d528-47a1-b249-ff510271c58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f4:98:d8:99:43:eb:0d:80:16:b9:3e:6b:56:
3c:c5:a0:dd:ec:48:ac:4a:da:b1:75:22:af:b3:82:
ac:ba:bc:09:e9:81:a4:f1:7e:08:f4:4b:80:de:c5:
63:b2:86:ce:73:8e:d2:0b:b0:cf:3d:7b:08:23:1f:
e5:7e:b6:be:4a:6b:fc:f3:ee:8c:71:1b:d5:68:ba:
0d:d1:f1:cc:6b:b3:ad:53:4b:4d:8b:80:11:bf:42:
e2:78:17:0b:38:2b:0f:71:bf:48:3f:b7:de:b4:b8:
3b:13:a5:da:24:64:b8:ea:69:18:17:4e:03:b5:ce:
f8:fb:7c:d7:eb:f1:00:b5:4e:d5:38:58:a0:c5:d8:
1a:86:a3:34:5a:a9:0d:58:2d:df:79:96:34:ad:07:
20:fb:b3:9f:ba:d3:02:8a:ee:8f:05:ce:ee:e5:81:
85:a7:d5:f3:07:43:94:e2:46:40:4d:c0:6f:0b:81:
5d:da:bf:b5:40:8b:95:4f:52:fd:01:15:76:2e:8a:
87:19:8d:2d:33:33:02:9b:66:ca:19:f0:2e:9f:fd:
c1:ff:1c:cf:0a:a5:c1:cd:70:74:1c:cb:c5:1c:6c:
73:94:46:bf:d8:05:00:dd:bc:9f:af:38:2f:ac:18:
ab:db:7f:31:c1:76:e6:7c:7b:63:22:41:18:c0:41:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C4:87:AA:0D:49:6F:9F:6C:EC:9C:56:BF:DB:A7:78:89:D9:B7:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8dc0230b-7e12-30be-9973-409aedc66355.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1c6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:0d:0e:20:69:bb:6e:c3:b1:a3:b5:f2:49:0a:0f:50:93:ca:
be:ff:87:58:94:c5:dd:f0:ee:82:b9:e3:af:19:30:6b:17:3a:
fd:9a:26:32:e5:b2:6d:14:9c:8b:ca:93:59:2b:c4:69:08:43:
b6:bc:c7:93:61:6a:e6:40:cb:69:f9:3d:d9:ae:c7:ff:3e:23:
5d:2b:8a:b0:90:19:e9:98:cf:7d:ed:33:cf:5c:66:f8:ce:7a:
e5:39:22:0a:67:2a:49:0e:82:ff:22:bb:bc:4f:d2:86:1f:40:
fd:fe:f0:2a:3d:35:4f:3e:7e:15:99:8e:60:f9:a4:e1:52:4e:
d8:da:ae:28:a2:8c:7e:2d:f2:f8:c3:b8:56:f6:d8:b6:57:1b:
60:a8:20:14:86:14:7b:59:4e:ea:e4:8a:05:f1:fb:d7:7e:74:
c0:93:fd:0d:4e:cc:74:95:81:42:c7:05:96:db:3e:f6:fe:f8:
b6:92:67:e2:8d:2a:90:27:20:85:bd:fb:4f:a6:25:b7:a0:22:
8d:fc:87:80:ee:cc:13:70:dc:35:e6:ec:e1:71:99:c9:3e:ce:
8b:09:60:61:58:27:ef:76:1a:fb:0e:73:bb:6a:7c:b4:90:59:
34:17:92:90:46:88:8a:d5:c4:92:de:8b:45:5b:2d:c8:cd:06:
a7:63:96:b8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEZadXhcDWFIhy8mf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDYyNzIwMTIyN1oXDTI0MDkyNTIwMTIyN1owLzEtMCsGA1UEAxMk
NGRiNDU1NjQtZDUyOC00N2ExLWIyNDktZmY1MTAyNzFjNThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvSY2JlD6w2AFrk+a1Y8xaDd7EisStqxdSKv
s4KsurwJ6YGk8X4I9EuA3sVjsobOc47SC7DPPXsIIx/lfra+Smv88+6McRvVaLoN
0fHMa7OtU0tNi4ARv0LieBcLOCsPcb9IP7fetLg7E6XaJGS46mkYF04Dtc74+3zX
6/EAtU7VOFigxdgahqM0WqkNWC3feZY0rQcg+7OfutMCiu6PBc7u5YGFp9XzB0OU
4kZATcBvC4Fd2r+1QIuVT1L9ARV2LoqHGY0tMzMCm2bKGfAun/3B/xzPCqXBzXB0
HMvFHGxzlEa/2AUA3byfrzgvrBir238xwXbmfHtjIkEYwEH5GwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEDEh6oNSW+fbOycVr/bp3iJ2bcvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGRjMDIzMGItN2UxMi0z
MGJlLTk5NzMtNDA5YWVkYzY2MzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAkNDiBpu27DsaO18kkKD1CTyr7/h1iUxd3w7oK5468ZMGsXOv2a
JjLlsm0UnIvKk1krxGkIQ7a8x5NhauZAy2n5Pdmux/8+I10rirCQGemYz33tM89c
ZvjOeuU5IgpnKkkOgv8iu7xP0oYfQP3+8Co9NU8+fhWZjmD5pOFSTtjariiijH4t
8vjDuFb22LZXG2CoIBSGFHtZTurkigXx+9d+dMCT/Q1OzHSVgULHBZbbPvb++LaS
Z+KNKpAnIIW9+0+mJbegIo38h4DuzBNw3DXm7OFxmck+zosJYGFYJ+92GvsOc7tq
fLSQWTQXkpBGiIrVxJLei0VbLcjNBqdjlrg=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:29:54 2025 by rpki-client