Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b61cb25b-5fa8-39b4-b69f-3058f0eae930.roa
File: b61cb25b-5fa8-39b4-b69f-3058f0eae930.roa (raw, json)
Hash identifier: 8SQbaCgIXaAE0hMKSyf+UwRBUXsQgA2LTB4RJ/ifbJE=
Subject key identifier: 2C:D6:70:42:98:07:DB:65:08:CA:EC:4E:11:49:C1:54:D5:A3:5E:B8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858473A5B78D959D4E291A6A16300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b61cb25b-5fa8-39b4-b69f-3058f0eae930.roa
Signing time: Mon 16 Sep 2024 01:00:29 +0000
ROA not before: Mon 16 Sep 2024 01:00:29 +0000
ROA not after: Sun 15 Dec 2024 02:00:29 +0000
asID: 265389
IP address blocks: 2001:470:31a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:3a:5b:78:d9:59:d4:e2:91:a6:a1:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 16 01:00:29 2024 GMT
Not After : Dec 15 02:00:29 2024 GMT
Subject: CN=d037196b-5216-40dd-b4a6-73b377686009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:29:77:3f:d1:70:4a:0a:76:73:df:03:df:
74:a7:38:ef:5e:13:7f:68:b3:da:f1:4c:ef:d3:3c:
15:db:1c:47:19:3a:b1:2c:40:c2:41:7e:33:e8:de:
4d:6e:bf:bf:7a:a0:ea:38:db:5c:00:3d:6d:dc:b3:
29:c5:d1:a3:4a:10:e0:88:e2:a3:c2:a4:95:a0:07:
1c:cf:9d:60:2f:2f:d7:eb:4e:20:15:73:df:6c:d3:
17:93:9d:db:f2:6f:2b:2c:64:d6:ba:d2:57:a4:b7:
4e:bc:ed:88:26:1b:a1:66:89:70:41:49:8c:97:b1:
ad:a6:8f:08:24:2e:cd:8a:0b:fd:fc:f2:92:65:d6:
02:a2:af:26:fa:bd:ca:62:d7:97:60:e8:c0:33:ba:
b4:27:f4:88:d3:fc:1b:97:1c:7e:e4:cf:ea:48:92:
d5:1a:11:58:66:f8:45:a3:a2:a4:00:bc:66:83:19:
a8:32:02:4d:53:25:1f:62:f6:81:0d:f9:42:e1:8f:
90:5c:39:9d:40:89:0e:d2:6d:1f:de:38:7a:36:e8:
dc:f7:3d:a8:3e:0f:78:2e:c6:ff:29:62:39:8a:68:
d0:34:50:72:a9:0a:dd:16:f4:cf:6b:cc:83:34:54:
56:92:6c:91:a3:f6:8f:a5:ed:82:54:68:a2:e7:ea:
02:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D6:70:42:98:07:DB:65:08:CA:EC:4E:11:49:C1:54:D5:A3:5E:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b61cb25b-5fa8-39b4-b69f-3058f0eae930.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:31a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:bb:33:87:65:fa:9d:ea:01:f1:cc:a9:b6:50:3c:ee:c4:47:
ba:51:32:40:c2:1d:53:9a:b8:63:4e:ef:56:ed:b2:1b:b6:d6:
ba:ba:ad:c0:aa:eb:0e:ca:05:f7:5e:5b:61:49:d5:82:2e:70:
87:05:58:0c:7e:0d:60:f6:57:89:b4:54:0b:6e:27:f8:79:49:
31:cd:40:67:bf:d2:7f:4a:56:10:67:ec:dd:8b:15:35:1c:68:
69:bd:89:78:e5:d7:78:34:fe:02:40:4f:96:83:b1:57:4a:79:
40:da:99:a2:db:b6:98:53:b8:f4:9f:6d:da:cf:7c:5f:2e:21:
77:d9:ed:57:8b:56:ee:30:e9:40:34:d7:03:8b:0a:b6:e5:0e:
0b:59:d7:9d:0a:65:b8:9d:1b:dc:f4:8c:1c:e1:14:2b:47:6a:
a1:67:54:8b:26:1b:75:b5:c2:74:c5:da:a1:e9:2d:1f:62:89:
9a:ad:75:0b:20:ff:64:be:dc:20:0a:41:1e:83:2c:ac:ba:86:
a2:c0:75:e0:e6:3d:d8:88:3a:aa:0d:af:b1:0d:be:e0:0d:9e:
e8:c7:74:8a:cc:c1:ee:5d:19:19:34:2a:42:8b:50:ad:92:63:
3c:1e:a6:ae:bf:81:d8:11:7c:f2:a1:d9:94:2e:3f:47:56:2f:
b4:0b:26:a1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W3jZWdTikaahYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
ZDAzNzE5NmItNTIxNi00MGRkLWI0YTYtNzNiMzc3Njg2MDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN0pdz/RcEoKdnPfA990pzjvXhN/aLPa8Uzv
0zwV2xxHGTqxLEDCQX4z6N5Nbr+/eqDqONtcAD1t3LMpxdGjShDgiOKjwqSVoAcc
z51gLy/X604gFXPfbNMXk53b8m8rLGTWutJXpLdOvO2IJhuhZolwQUmMl7Gtpo8I
JC7Nigv9/PKSZdYCoq8m+r3KYteXYOjAM7q0J/SI0/wblxx+5M/qSJLVGhFYZvhF
o6KkALxmgxmoMgJNUyUfYvaBDflC4Y+QXDmdQIkO0m0f3jh6Nujc9z2oPg94Lsb/
KWI5imjQNFByqQrdFvTPa8yDNFRWkmyRo/aPpe2CVGii5+oCtwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCzWcEKYB9tlCMrsThFJwVTVo164MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjYxY2IyNWItNWZhOC0z
OWI0LWI2OWYtMzA1OGYwZWFlOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHe7M4dl+p3qAfHMqbZQPO7ER7pRMkDCHVOauGNO71btshu21rq6
rcCq6w7KBfdeW2FJ1YIucIcFWAx+DWD2V4m0VAtuJ/h5STHNQGe/0n9KVhBn7N2L
FTUcaGm9iXjl13g0/gJAT5aDsVdKeUDamaLbtphTuPSfbdrPfF8uIXfZ7VeLVu4w
6UA01wOLCrblDgtZ150KZbidG9z0jBzhFCtHaqFnVIsmG3W1wnTF2qHpLR9iiZqt
dQsg/2S+3CAKQR6DLKy6hqLAdeDmPdiIOqoNr7ENvuANnujHdIrMwe5dGRk0KkKL
UK2SYzwepq6/gdgRfPKh2ZQuP0dWL7QLJqE=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:34:21 2025 by rpki-client