Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9f54322-7af4-33a9-a936-aed7a0b695a4.roa
File: b9f54322-7af4-33a9-a936-aed7a0b695a4.roa (raw, json)
Hash identifier: ezPXDhBwyNhITR469Q2yXwaEmvLV+fd5wx83e3ZSDCA=
Subject key identifier: 42:CB:81:0E:FF:44:FA:4C:9D:05:2E:F7:92:C1:B0:0B:99:B6:8C:B8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858480653948383F3BAF0BCBEA600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9f54322-7af4-33a9-a936-aed7a0b695a4.roa
Signing time: Thu 28 Nov 2024 02:30:08 +0000
ROA not before: Thu 28 Nov 2024 02:30:08 +0000
ROA not after: Wed 26 Feb 2025 02:30:08 +0000
asID: 7488
IP address blocks: 2001:470:3d8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:53:94:83:83:f3:ba:f0:bc:be:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 28 02:30:08 2024 GMT
Not After : Feb 26 02:30:08 2025 GMT
Subject: CN=ce5c71ae-92ef-4e4c-a551-fe1706419b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:05:6f:0f:9e:c5:bc:ca:2b:2e:bf:1f:26:
68:64:de:fc:6c:de:da:9e:9b:72:2b:8e:86:90:0d:
de:9d:4f:16:eb:2f:ae:24:16:4d:e2:57:b0:91:4a:
d9:0d:5c:ef:39:0c:fa:f9:00:bd:5b:aa:d3:82:a8:
71:7b:0d:78:6a:18:b6:d9:4a:b2:be:a7:bd:22:9b:
68:f1:20:cd:00:e9:1b:03:2b:62:07:5b:71:57:3c:
13:06:13:11:63:a6:6c:f1:f7:c9:20:9a:0c:00:37:
98:d6:9b:3c:e6:65:5e:97:da:35:08:fc:b6:c1:15:
b5:5c:27:65:b8:5c:17:90:21:de:53:95:4d:df:05:
f2:1f:80:6e:d6:3c:81:1c:b2:8d:be:72:7d:e8:1c:
de:3f:7e:8b:17:cd:38:0a:6d:50:9f:ef:d3:54:49:
10:06:0f:89:1f:16:c6:35:85:1e:9f:52:72:28:e8:
47:57:4c:eb:08:c4:96:fb:62:a9:3e:8f:c8:3a:30:
62:93:1e:3f:80:c8:f7:c1:c0:44:5e:dd:f3:c0:19:
fd:f7:27:7f:7b:68:ae:4a:b0:ed:c3:b0:f8:8e:a4:
86:06:1e:69:7e:05:a9:26:ae:3f:8f:a8:40:0b:18:
04:83:4b:91:4d:61:84:85:34:52:0a:d9:d7:2d:16:
48:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CB:81:0E:FF:44:FA:4C:9D:05:2E:F7:92:C1:B0:0B:99:B6:8C:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9f54322-7af4-33a9-a936-aed7a0b695a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3d8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:1f:66:90:a2:f6:60:0c:bb:53:89:a0:18:d3:89:57:ed:8c:
b5:e9:9b:58:fb:bc:cd:04:09:b4:9e:36:ea:dc:a2:f9:90:2d:
22:04:39:29:4d:bb:34:ab:0f:64:ee:a5:4b:69:be:25:38:dc:
2e:3c:40:2d:d9:b2:58:fa:c4:14:37:80:35:a3:ef:ca:41:62:
78:31:1e:d7:3d:ec:e2:56:93:84:a1:b8:7f:0e:7f:29:88:06:
88:d7:6e:5b:cc:84:c3:22:b8:ce:9a:29:21:ce:d5:2c:2c:a6:
b5:b8:38:ec:5a:89:c6:3b:dc:a4:02:66:f1:4f:ca:da:03:f2:
d5:e2:2a:fe:4e:b3:43:69:e6:97:1e:6c:ed:22:d6:ea:7c:fb:
f0:cd:50:5b:5f:46:92:9a:01:a7:17:de:46:76:e6:7e:08:9f:
b4:6d:58:16:43:01:8a:a1:35:7a:d8:5c:b4:51:57:27:96:90:
3f:41:cc:15:4e:03:32:16:b0:e3:de:c8:89:8b:33:fa:4c:dd:
9a:3e:30:00:83:14:b4:55:ed:69:d9:fe:68:53:16:a3:3d:d3:
83:3a:f2:25:0e:fd:10:23:be:ee:c7:4d:bf:5a:33:a6:ce:69:
03:73:cf:42:7e:b0:21:2e:67:59:c4:5f:80:c5:9f:87:89:61:
ef:0e:32:78
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgGU5SDg/O68Ly+pgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTEyODAyMzAwOFoXDTI1MDIyNjAyMzAwOFowLzEtMCsGA1UEAxMk
Y2U1YzcxYWUtOTJlZi00ZTRjLWE1NTEtZmUxNzA2NDE5Yjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0EFbw+exbzKKy6/HyZoZN78bN7anptyK46G
kA3enU8W6y+uJBZN4lewkUrZDVzvOQz6+QC9W6rTgqhxew14ahi22Uqyvqe9Ipto
8SDNAOkbAytiB1txVzwTBhMRY6Zs8ffJIJoMADeY1ps85mVel9o1CPy2wRW1XCdl
uFwXkCHeU5VN3wXyH4Bu1jyBHLKNvnJ96BzeP36LF804Cm1Qn+/TVEkQBg+JHxbG
NYUen1JyKOhHV0zrCMSW+2KpPo/IOjBikx4/gMj3wcBEXt3zwBn99yd/e2iuSrDt
w7D4jqSGBh5pfgWpJq4/j6hACxgEg0uRTWGEhTRSCtnXLRZIPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFELLgQ7/RPpMnQUu95LBsAuZtoy4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjlmNTQzMjItN2FmNC0z
M2E5LWE5MzYtYWVkN2EwYjY5NWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI8fZpCi9mAMu1OJoBjTiVftjLXpm1j7vM0ECbSeNurcovmQLSIE
OSlNuzSrD2TupUtpviU43C48QC3Zslj6xBQ3gDWj78pBYngxHtc97OJWk4ShuH8O
fymIBojXblvMhMMiuM6aKSHO1SwsprW4OOxaicY73KQCZvFPytoD8tXiKv5Os0Np
5pcebO0i1up8+/DNUFtfRpKaAacX3kZ25n4In7RtWBZDAYqhNXrYXLRRVyeWkD9B
zBVOAzIWsOPeyImLM/pM3Zo+MACDFLRV7WnZ/mhTFqM904M68iUO/RAjvu7HTb9a
M6bOaQNzz0J+sCEuZ1nEX4DFn4eJYe8OMng=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:28:38 2025 by rpki-client