Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c39a6417-40ac-3eaa-864d-c1deac30706b.roa
File: c39a6417-40ac-3eaa-864d-c1deac30706b.roa (raw, json)
Hash identifier: NnMkAvZaHZ8HGr/gw7D+qG8fAldKuFQpvOLhun4OWOw=
Subject key identifier: 40:D2:05:7F:72:90:10:5F:22:68:4A:31:4F:C0:10:57:34:9A:A9:72
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285844E51993DEF12351F6DF8DFE80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c39a6417-40ac-3eaa-864d-c1deac30706b.roa
Signing time: Thu 15 Feb 2024 02:30:47 +0000
ROA not before: Thu 15 Feb 2024 02:30:47 +0000
ROA not after: Wed 15 May 2024 01:30:47 +0000
asID: 41695
IP address blocks: 2001:470:230::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:e5:19:93:de:f1:23:51:f6:df:8d:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 15 02:30:47 2024 GMT
Not After : May 15 01:30:47 2024 GMT
Subject: CN=335dcf18-28a3-4d01-a4d8-15d6eb85100c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:de:39:b2:c9:66:4a:39:12:f8:4b:08:0b:a3:
9b:fc:e5:25:cc:6d:88:55:5c:53:30:b6:17:e8:28:
fe:96:0b:2d:84:5a:5f:7a:01:b0:23:c4:e2:4c:de:
29:27:61:1a:6b:14:07:20:f8:78:8d:8d:38:b1:81:
f7:c9:55:c2:7a:8d:e8:c5:f7:f9:41:cd:64:9c:a2:
9c:99:12:ee:ef:cb:df:83:02:cd:dc:40:0e:12:d7:
4a:f2:47:53:ec:6c:b5:e5:10:ed:70:9e:43:e9:30:
aa:2c:d7:98:1f:56:bc:b7:f3:48:02:40:d5:92:df:
75:1a:88:f7:3e:2c:e7:04:86:d0:c4:3d:11:9d:b9:
1a:46:91:e5:34:50:46:fb:93:aa:ac:25:fa:5f:68:
e1:85:26:11:70:a2:63:05:22:24:a5:42:60:15:e0:
cb:71:6d:28:97:29:8f:3d:9c:b3:bb:cc:67:36:f9:
d8:28:59:87:ab:65:c1:5d:b6:8f:43:74:d5:41:28:
d2:00:b5:7d:65:03:46:d3:ac:94:52:d0:b2:d3:7e:
c1:4e:4e:9c:b4:18:23:b3:a7:81:81:88:e5:48:bd:
fc:e7:70:1c:b8:90:93:bc:9d:10:b1:88:9c:b7:ec:
de:fa:15:35:93:ef:69:e9:9e:d4:46:64:1d:ee:a9:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D2:05:7F:72:90:10:5F:22:68:4A:31:4F:C0:10:57:34:9A:A9:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c39a6417-40ac-3eaa-864d-c1deac30706b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:230::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:d6:d9:90:d4:fb:2b:36:2b:25:9c:f8:49:e1:12:6c:56:9a:
92:5d:54:bb:95:9a:29:6d:7a:4a:87:3d:31:c8:aa:5f:96:dd:
94:ce:64:0d:e5:2c:b5:c9:e4:b1:9c:14:c4:06:07:66:64:5e:
15:7e:1c:0d:74:72:ab:d2:56:8c:97:db:26:83:9a:80:61:9f:
20:af:25:60:0d:f5:de:0c:bc:57:b2:cd:3a:5b:4f:5a:a6:d0:
ba:e5:56:b3:2e:00:e6:55:a3:0d:de:7b:fe:17:31:e5:8e:a7:
be:30:ff:a7:e4:3e:2c:96:6a:0c:a6:2e:d0:78:3d:8a:f7:3e:
cf:77:19:4c:a8:4e:a2:57:17:94:9a:95:2d:93:91:85:5c:ef:
b5:c3:0d:7e:72:ca:25:ed:68:3b:3e:99:eb:80:1a:57:4d:d4:
0b:e8:d7:98:cd:10:62:f2:14:59:05:e5:81:83:5e:98:91:86:
e5:ae:b7:4a:2c:bd:e5:62:9b:c2:70:2b:0b:75:86:aa:3b:0e:
10:36:8a:10:94:82:fc:bf:69:b8:61:7c:8c:8d:83:b5:0b:4a:
31:1e:30:80:10:93:0f:8e:88:f5:ed:46:4c:c2:55:3d:3e:18:
43:4b:42:c0:9d:a4:e7:c4:f7:bf:b9:78:ad:83:96:01:97:6f:
58:66:1b:a4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWETlGZPe8SNR9t+N/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDIxNTAyMzA0N1oXDTI0MDUxNTAxMzA0N1owLzEtMCsGA1UEAxMk
MzM1ZGNmMTgtMjhhMy00ZDAxLWE0ZDgtMTVkNmViODUxMDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid45sslmSjkS+EsIC6Ob/OUlzG2IVVxTMLYX
6Cj+lgsthFpfegGwI8TiTN4pJ2EaaxQHIPh4jY04sYH3yVXCeo3oxff5Qc1knKKc
mRLu78vfgwLN3EAOEtdK8kdT7Gy15RDtcJ5D6TCqLNeYH1a8t/NIAkDVkt91Goj3
PiznBIbQxD0RnbkaRpHlNFBG+5OqrCX6X2jhhSYRcKJjBSIkpUJgFeDLcW0olymP
PZyzu8xnNvnYKFmHq2XBXbaPQ3TVQSjSALV9ZQNG06yUUtCy037BTk6ctBgjs6eB
gYjlSL3853AcuJCTvJ0QsYict+ze+hU1k+9p6Z7URmQd7qnEBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEDSBX9ykBBfImhKMU/AEFc0mqlyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzM5YTY0MTctNDBhYy0z
ZWFhLTg2NGQtYzFkZWFjMzA3MDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAL7W2ZDU+ys2KyWc+EnhEmxWmpJdVLuVmiltekqHPTHIql+W3ZTO
ZA3lLLXJ5LGcFMQGB2ZkXhV+HA10cqvSVoyX2yaDmoBhnyCvJWAN9d4MvFeyzTpb
T1qm0LrlVrMuAOZVow3ee/4XMeWOp74w/6fkPiyWagymLtB4PYr3Ps93GUyoTqJX
F5SalS2TkYVc77XDDX5yyiXtaDs+meuAGldN1Avo15jNEGLyFFkF5YGDXpiRhuWu
t0osveVim8JwKwt1hqo7DhA2ihCUgvy/abhhfIyNg7ULSjEeMIAQkw+OiPXtRkzC
VT0+GENLQsCdpOfE97+5eK2DlgGXb1hmG6Q=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:43:26 2025 by rpki-client