Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb96ae83-67b0-3586-85b7-fea2f100d320.roa
File: cb96ae83-67b0-3586-85b7-fea2f100d320.roa (raw, json)
Hash identifier: yWgpUE8zN2faq+4gk5xZCdlWRxhhdvICdXKaBfUa4ww=
Subject key identifier: 25:E5:AA:CA:91:8D:8B:F7:BC:CE:CA:94:2A:57:23:30:9D:1D:A4:DE
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A73C6A1D4AE93748740A380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb96ae83-67b0-3586-85b7-fea2f100d320.roa
Signing time: Thu 27 Jun 2024 20:09:02 +0000
ROA not before: Thu 27 Jun 2024 20:09:02 +0000
ROA not after: Wed 25 Sep 2024 20:09:02 +0000
asID: 395605
IP address blocks: 2001:470:f5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:73:c6:a1:d4:ae:93:74:87:40:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:09:02 2024 GMT
Not After : Sep 25 20:09:02 2024 GMT
Subject: CN=4b82d088-a06f-4c91-b094-c0d6f64acc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:14:42:11:8f:aa:0e:67:f6:54:39:ee:81:09:
94:e7:43:03:8d:56:5d:7e:1a:ff:76:16:5f:1f:8f:
2d:f8:75:81:64:1e:35:a1:5f:cf:1e:0a:2e:85:72:
e2:08:75:fe:1e:2b:b0:20:4d:45:e4:82:8a:44:47:
5a:0b:be:75:ff:4a:aa:7e:50:c4:33:39:fc:6a:3f:
e6:80:eb:a4:37:17:a3:4b:7d:02:6e:ad:9f:1b:07:
e7:61:25:42:c9:d3:b2:f3:0f:c2:b3:60:45:e8:08:
69:89:80:26:b5:f5:ed:8f:05:c1:7b:b1:44:10:03:
e8:c3:5b:69:44:e4:d5:77:70:5c:35:50:c0:6b:05:
92:b9:09:56:2b:41:1a:ce:a9:63:89:37:cf:91:85:
88:fb:0c:63:0c:f8:7b:88:59:35:47:d3:5a:57:64:
9c:c3:e8:65:87:e8:08:46:4e:05:f7:99:fc:c0:3b:
3a:e7:04:e0:8f:24:01:2b:eb:aa:53:d1:20:64:94:
41:3d:61:cb:7c:9a:fe:7d:8c:d8:74:29:2b:54:e7:
28:d7:3b:db:0b:57:36:6d:72:fa:34:af:87:ea:c5:
aa:22:0c:a4:74:62:1a:c0:f8:14:56:a7:5f:78:e2:
47:df:ba:af:3c:b7:00:2a:68:17:6f:9a:2d:27:5b:
a5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E5:AA:CA:91:8D:8B:F7:BC:CE:CA:94:2A:57:23:30:9D:1D:A4:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb96ae83-67b0-3586-85b7-fea2f100d320.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:f5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:70:fa:cd:1e:ad:80:8f:26:c9:55:4b:2a:c1:0a:39:50:7c:
71:53:5b:ec:25:93:e6:4b:18:c3:c1:a0:a0:f0:a4:c4:c2:55:
44:65:f0:a3:e8:f3:77:df:02:e5:90:f3:8e:b1:0c:d7:49:aa:
8f:e2:40:2d:cd:28:63:ad:d9:16:6f:eb:22:d7:42:2b:58:6a:
34:f1:4f:33:ff:89:7b:69:18:1c:41:c6:2b:f9:92:34:8e:63:
ce:db:8f:16:a5:6f:39:fe:6e:04:20:0f:18:f7:f7:30:62:14:
99:50:e0:87:46:26:e3:ae:75:c5:a7:e5:b7:d5:3d:01:8b:0f:
ea:46:4b:8f:e6:21:d8:8d:c8:4b:dd:57:32:0f:7e:dc:0f:2d:
65:ba:19:5c:29:4d:17:ff:ba:c6:d7:d6:62:bc:39:49:b9:4c:
86:87:e6:01:85:2b:71:0e:2c:a5:7d:af:80:be:62:36:95:f4:
c5:4e:ca:5b:1f:ff:3a:ff:12:31:d6:5e:d7:17:14:1e:27:df:
72:ec:3b:1d:6d:18:8a:a3:c0:76:aa:d0:b9:5a:57:59:a7:c2:
c7:b5:61:05:1a:e7:af:41:3a:a2:d3:ee:56:66:21:26:62:ac:
56:91:86:1b:12:2e:77:c4:53:ed:be:aa:8f:1e:f3:8e:12:78:
a4:28:76:15
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEZac8ah1K6TdIdAo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDYyNzIwMDkwMloXDTI0MDkyNTIwMDkwMlowLzEtMCsGA1UEAxMk
NGI4MmQwODgtYTA2Zi00YzkxLWIwOTQtYzBkNmY2NGFjYzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxRCEY+qDmf2VDnugQmU50MDjVZdfhr/dhZf
H48t+HWBZB41oV/PHgouhXLiCHX+HiuwIE1F5IKKREdaC751/0qqflDEMzn8aj/m
gOukNxejS30Cbq2fGwfnYSVCydOy8w/Cs2BF6AhpiYAmtfXtjwXBe7FEEAPow1tp
ROTVd3BcNVDAawWSuQlWK0EazqljiTfPkYWI+wxjDPh7iFk1R9NaV2Scw+hlh+gI
Rk4F95n8wDs65wTgjyQBK+uqU9EgZJRBPWHLfJr+fYzYdCkrVOco1zvbC1c2bXL6
NK+H6sWqIgykdGIawPgUVqdfeOJH37qvPLcAKmgXb5otJ1uliwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCXlqsqRjYv3vM7KlCpXIzCdHaTeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2I5NmFlODMtNjdiMC0z
NTg2LTg1YjctZmVhMmYxMDBkMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAD1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJRw+s0erYCPJslVSyrBCjlQfHFTW+wlk+ZLGMPBoKDwpMTCVURl
8KPo83ffAuWQ846xDNdJqo/iQC3NKGOt2RZv6yLXQitYajTxTzP/iXtpGBxBxiv5
kjSOY87bjxalbzn+bgQgDxj39zBiFJlQ4IdGJuOudcWn5bfVPQGLD+pGS4/mIdiN
yEvdVzIPftwPLWW6GVwpTRf/usbX1mK8OUm5TIaH5gGFK3EOLKV9r4C+YjaV9MVO
ylsf/zr/EjHWXtcXFB4n33LsOx1tGIqjwHaq0LlaV1mnwse1YQUa569BOqLT7lZm
ISZirFaRhhsSLnfEU+2+qo8e844SeKQodhU=
-----END CERTIFICATE-----
Generated at Fri Mar 14 13:06:30 2025 by rpki-client