Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5302df4-1a07-3077-bac6-da9ca0d4f147.roa
File: c5302df4-1a07-3077-bac6-da9ca0d4f147.roa (raw, json)
Hash identifier: iOIBmroEBFYmKCFfQh9rXzRKNTTm/9yUmPEaV3n6OF4=
Subject key identifier: 2C:8C:E4:FB:62:65:97:95:C7:4B:2A:B3:73:44:CC:3E:99:87:3B:A9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285842D5587312D77D4252F8972900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5302df4-1a07-3077-bac6-da9ca0d4f147.roa
Signing time: Tue 08 Aug 2023 12:00:00 +0000
ROA not before: Tue 08 Aug 2023 12:00:00 +0000
ROA not after: Fri 09 Feb 2024 05:00:00 +0000
asID: 198690
IP address blocks: 2001:470:17c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d5:58:73:12:d7:7d:42:52:f8:97:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 8 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2024 GMT
Subject: CN=1c2ccc1b-e77d-4003-9009-2d30f4496064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a2:7e:13:35:48:2e:2a:64:9e:e4:53:eb:91:
e8:a1:b5:dc:3c:79:e1:ad:cd:44:3f:71:9f:ba:7a:
b4:77:4c:37:dd:19:72:85:11:43:6c:87:67:5f:5b:
37:c9:e4:2f:15:61:3e:59:e4:1d:6c:96:77:6f:87:
82:51:b5:7c:00:87:7f:79:8b:9e:27:29:b2:55:d3:
cc:da:03:75:bb:cf:6e:d5:03:65:54:f7:9b:e0:15:
09:e6:40:b4:61:6b:f7:74:4c:ed:9b:df:3a:e4:51:
d6:a7:97:97:8f:2d:19:6d:1b:39:2f:45:78:c8:e7:
23:c3:a2:2c:bd:f5:ff:a8:f5:97:b7:47:cb:ed:b1:
f0:8b:f5:68:42:c4:e6:e1:69:7b:7b:39:f9:7b:fb:
90:44:fd:63:b4:7a:7b:53:50:2d:db:c3:d3:b3:c7:
85:2f:55:4b:c0:4d:34:1b:bc:15:91:18:13:43:e9:
48:26:cc:a8:d0:d3:8e:c6:ac:16:66:f0:87:10:bd:
9a:ea:51:f1:62:16:06:1c:82:cb:75:12:c9:df:34:
c6:6f:31:5a:16:d0:e6:2a:7a:83:42:e7:3b:52:a0:
ba:9a:15:f8:32:c0:80:d1:45:cf:96:59:04:8e:e2:
87:0e:d6:98:43:1a:85:b5:43:2b:74:5c:c3:32:2c:
30:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8C:E4:FB:62:65:97:95:C7:4B:2A:B3:73:44:CC:3E:99:87:3B:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5302df4-1a07-3077-bac6-da9ca0d4f147.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:17c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:56:84:2b:2a:eb:24:36:ab:c8:f7:da:d3:17:b8:b4:03:56:
72:c0:d6:14:55:d3:37:20:97:fe:5f:2b:92:35:50:2e:12:d7:
60:a4:7e:c4:39:4c:ae:15:fe:e7:31:f0:48:80:63:05:6d:a0:
09:fd:43:ed:03:b5:d1:10:4d:9e:62:e6:d4:64:23:01:b3:03:
04:e8:90:fb:23:f4:e6:d1:9e:2d:25:dd:47:df:d7:3f:04:06:
8b:6f:61:85:14:54:e3:ec:c3:ef:1d:ce:6c:fe:03:39:b3:2f:
a8:1e:c1:9f:94:f8:21:92:bd:df:13:bf:8a:a9:33:47:7b:91:
07:43:fb:61:55:6f:6f:20:9b:71:cb:22:8f:a0:3b:ce:06:63:
c8:27:f4:9c:cf:1a:df:77:d7:0d:cc:fe:c6:1d:41:be:6c:5e:
63:31:c5:98:bf:04:40:8d:d7:88:e7:8f:d2:29:e5:26:c3:93:
cf:91:ca:c1:37:6a:b3:2b:09:57:fc:f3:89:62:43:8a:e0:cb:
d2:30:70:14:7b:27:d6:a6:86:00:c0:23:3e:2b:8c:22:4d:ed:
f3:3f:67:c8:19:15:98:07:b8:4b:14:0a:fa:42:87:1f:08:78:
fb:73:64:15:b3:ad:66:fd:07:1b:c3:7c:58:a8:ad:d4:59:88:
56:ca:80:ef
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWELVWHMS131CUviXKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDgwODEyMDAwMFoXDTI0MDIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
MWMyY2NjMWItZTc3ZC00MDAzLTkwMDktMmQzMGY0NDk2MDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqJ+EzVILipknuRT65HoobXcPHnhrc1EP3Gf
unq0d0w33RlyhRFDbIdnX1s3yeQvFWE+WeQdbJZ3b4eCUbV8AId/eYueJymyVdPM
2gN1u89u1QNlVPeb4BUJ5kC0YWv3dEztm9865FHWp5eXjy0ZbRs5L0V4yOcjw6Is
vfX/qPWXt0fL7bHwi/VoQsTm4Wl7ezn5e/uQRP1jtHp7U1At28PTs8eFL1VLwE00
G7wVkRgTQ+lIJsyo0NOOxqwWZvCHEL2a6lHxYhYGHILLdRLJ3zTGbzFaFtDmKnqD
Quc7UqC6mhX4MsCA0UXPllkEjuKHDtaYQxqFtUMrdFzDMiww4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCyM5PtiZZeVx0sqs3NEzD6ZhzupMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzUzMDJkZjQtMWEwNy0z
MDc3LWJhYzYtZGE5Y2EwZDRmMTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAF8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALFWhCsq6yQ2q8j32tMXuLQDVnLA1hRV0zcgl/5fK5I1UC4S12Ck
fsQ5TK4V/ucx8EiAYwVtoAn9Q+0DtdEQTZ5i5tRkIwGzAwTokPsj9ObRni0l3Uff
1z8EBotvYYUUVOPsw+8dzmz+AzmzL6gewZ+U+CGSvd8Tv4qpM0d7kQdD+2FVb28g
m3HLIo+gO84GY8gn9JzPGt931w3M/sYdQb5sXmMxxZi/BECN14jnj9Ip5SbDk8+R
ysE3arMrCVf884liQ4rgy9IwcBR7J9amhgDAIz4rjCJN7fM/Z8gZFZgHuEsUCvpC
hx8IePtzZBWzrWb9BxvDfFiordRZiFbKgO8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:23:16 2025 by rpki-client