Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c52f6bc6-06d3-3a35-a380-0bd5bfd23eb0.roa
File: c52f6bc6-06d3-3a35-a380-0bd5bfd23eb0.roa (raw, json)
Hash identifier: NgUJpMh5WwPCPAoAGg498q3HLKFa7Gl9Axc2nn3AM9s=
Subject key identifier: 2B:11:AA:34:ED:51:72:E4:1F:FC:89:36:4D:12:EA:29:DD:0C:3E:36
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858476F74E697F4FDF25F2C03CA00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c52f6bc6-06d3-3a35-a380-0bd5bfd23eb0.roa
Signing time: Sat 05 Oct 2024 01:30:13 +0000
ROA not before: Sat 05 Oct 2024 01:30:13 +0000
ROA not after: Fri 03 Jan 2025 02:30:13 +0000
asID: 204020
IP address blocks: 2001:470:3a1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:6f:74:e6:97:f4:fd:f2:5f:2c:03:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 5 01:30:13 2024 GMT
Not After : Jan 3 02:30:13 2025 GMT
Subject: CN=56ccbdb6-917b-49a5-9df5-6efceebe681a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:aa:0b:02:de:35:e9:21:3d:f7:a8:8f:b3:0f:
4c:a6:be:27:56:dc:03:24:b7:c5:10:70:cf:6f:85:
14:3a:0b:dd:cd:98:73:b3:3d:6e:8b:b0:6f:4d:15:
83:f6:b4:a0:4a:64:0b:f6:5d:39:10:0c:c0:27:ed:
39:be:2c:d9:5f:93:f4:04:f5:e5:79:ab:0b:66:b2:
bc:c4:ef:e8:e8:27:0e:2d:5e:2d:8f:8b:3e:fe:65:
e8:6a:0f:96:de:3b:5e:d4:3b:2c:32:be:00:42:8e:
58:cd:68:33:10:bc:ae:e2:41:9f:26:c5:68:d4:09:
d5:f8:11:1b:06:77:dd:f8:34:35:74:a9:e0:e2:d6:
37:33:3b:30:c8:3e:1e:1f:2e:3a:b2:dc:af:ba:99:
83:2c:51:29:21:32:3e:82:46:c4:e1:9c:18:21:25:
f1:05:4f:d7:7d:4c:96:9f:81:cf:93:4a:91:50:77:
eb:75:6a:c5:e3:c3:3b:d0:c1:29:19:5e:b1:e7:01:
6d:79:ea:bf:7d:ab:36:76:a2:b0:e1:5a:1c:80:1d:
2d:9a:77:f5:f4:63:dd:50:93:5f:cd:66:6d:84:2c:
9b:92:08:04:97:f8:55:95:22:6e:4f:c2:b4:4f:2b:
ed:fc:ec:79:3b:7f:21:37:2b:fc:42:03:a8:15:a8:
5b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:11:AA:34:ED:51:72:E4:1F:FC:89:36:4D:12:EA:29:DD:0C:3E:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c52f6bc6-06d3-3a35-a380-0bd5bfd23eb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:db:de:eb:08:63:b4:aa:80:3b:75:bf:e2:39:8b:b7:eb:3d:
a3:48:ee:2a:3e:74:e2:99:11:45:28:15:94:76:7b:eb:f4:8d:
a1:1c:71:d4:5e:e6:15:a0:9a:b3:ec:ef:d4:02:60:39:55:da:
5a:b1:6d:c9:c8:37:bf:3f:90:f4:51:c9:6c:a1:56:3d:63:9d:
98:5d:e4:a2:2a:55:47:1c:90:82:50:45:28:b7:e7:8c:a6:62:
42:39:04:63:03:18:f6:41:fb:e1:21:24:c3:9b:5c:2a:62:c8:
96:5a:59:cd:6d:a5:e4:65:7a:4d:2e:1c:30:e7:c9:c5:71:16:
61:e4:fc:eb:65:8d:5d:42:db:e9:41:44:51:97:69:35:ff:d2:
de:d6:d3:62:4b:ee:81:c3:aa:0b:b8:e6:a4:26:a1:82:c4:35:
3f:86:be:23:84:cf:31:f5:c8:66:2a:3d:4a:94:6e:ff:cb:8d:
be:8a:95:2f:ea:63:f8:77:85:4b:11:a1:75:f3:6e:8a:b1:60:
d0:7c:c8:dd:58:c5:52:59:bf:17:70:d5:91:c8:a1:54:4a:df:
8b:57:cc:e1:fb:7d:73:0b:05:db:65:0b:48:af:cb:4b:43:c1:
cd:02:40:85:60:4b:c8:8e:f9:6d:2e:15:db:31:28:b1:03:41:
f8:f3:b5:e2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdvdOaX9P3yXywDygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTAwNTAxMzAxM1oXDTI1MDEwMzAyMzAxM1owLzEtMCsGA1UEAxMk
NTZjY2JkYjYtOTE3Yi00OWE1LTlkZjUtNmVmY2VlYmU2ODFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqoLAt416SE996iPsw9Mpr4nVtwDJLfFEHDP
b4UUOgvdzZhzsz1ui7BvTRWD9rSgSmQL9l05EAzAJ+05vizZX5P0BPXleasLZrK8
xO/o6CcOLV4tj4s+/mXoag+W3jte1DssMr4AQo5YzWgzELyu4kGfJsVo1AnV+BEb
Bnfd+DQ1dKng4tY3MzswyD4eHy46styvupmDLFEpITI+gkbE4ZwYISXxBU/XfUyW
n4HPk0qRUHfrdWrF48M70MEpGV6x5wFteeq/fas2dqKw4VocgB0tmnf19GPdUJNf
zWZthCybkggEl/hVlSJuT8K0Tyvt/Ox5O38hNyv8QgOoFahb9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCsRqjTtUXLkH/yJNk0S6indDD42MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzUyZjZiYzYtMDZkMy0z
YTM1LWEzODAtMGJkNWJmZDIzZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKbb3usIY7SqgDt1v+I5i7frPaNI7io+dOKZEUUoFZR2e+v0jaEc
cdRe5hWgmrPs79QCYDlV2lqxbcnIN78/kPRRyWyhVj1jnZhd5KIqVUcckIJQRSi3
54ymYkI5BGMDGPZB++EhJMObXCpiyJZaWc1tpeRlek0uHDDnycVxFmHk/OtljV1C
2+lBRFGXaTX/0t7W02JL7oHDqgu45qQmoYLENT+GviOEzzH1yGYqPUqUbv/Ljb6K
lS/qY/h3hUsRoXXzboqxYNB8yN1YxVJZvxdw1ZHIoVRK34tXzOH7fXMLBdtlC0iv
y0tDwc0CQIVgS8iO+W0uFdsxKLEDQfjzteI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:35:47 2025 by rpki-client