Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3e47b8e-260f-3f36-8ba8-78be8f158454.roa
File: d3e47b8e-260f-3f36-8ba8-78be8f158454.roa (raw, json)
Hash identifier: Kg1BUu2NoPWQWl7uX9i8NaskV5V4IpPwHhjJTbHxJFw=
Subject key identifier: D3:34:B1:55:55:38:A9:DC:20:A2:64:DA:8B:11:29:1D:5B:13:DB:50
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A51152E11B1B5E0358C3000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3e47b8e-260f-3f36-8ba8-78be8f158454.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 36124
IP address blocks: 2001:470:34::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:15:2e:11:b1:b5:e0:35:8c:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=d76c40ea-d8be-41ba-8e0e-1edace39bcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fd:59:20:09:df:d3:11:aa:93:fb:d5:18:6f:
00:84:07:73:7a:36:67:12:11:c3:ba:20:da:c8:ea:
4e:fb:4e:ee:8a:29:4d:81:5b:f4:89:e5:48:80:53:
ae:85:61:8f:49:88:fd:06:f9:a9:f8:d8:4a:74:f8:
85:a4:55:32:fe:84:a9:8b:65:e0:0d:13:be:f4:72:
9d:d9:b1:20:df:a5:88:de:0f:3e:05:b1:e4:cf:d0:
6e:92:ec:fa:b7:87:30:b6:6c:94:5c:fc:83:2b:19:
8f:d1:c5:c1:b8:79:57:ad:e3:18:ca:e2:d9:4b:2e:
63:54:5c:55:08:02:7d:8e:5b:72:32:6c:9c:b7:c5:
1b:89:e1:27:39:ea:29:b3:0b:ac:1c:93:b8:d0:b3:
de:4b:c6:39:c6:8d:aa:e2:50:98:0e:e2:9c:17:2d:
f2:ce:55:b5:a4:5b:b2:4a:29:8a:b8:4b:bb:2e:bb:
3e:ed:1e:6d:04:57:67:d0:39:46:36:a3:1b:d3:3a:
e8:d9:be:e5:2b:9b:20:57:6f:7f:f0:af:d9:99:f0:
eb:70:87:a9:60:c8:09:6a:1f:a6:41:7d:d6:6e:2c:
70:dc:cd:2b:95:97:40:60:2f:90:ca:ae:72:43:4e:
98:72:c3:19:37:0c:eb:7e:69:b3:ac:79:91:1e:f3:
77:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:34:B1:55:55:38:A9:DC:20:A2:64:DA:8B:11:29:1D:5B:13:DB:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3e47b8e-260f-3f36-8ba8-78be8f158454.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:34::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:9f:39:29:af:01:00:34:cb:46:26:bb:93:c0:e7:5b:9c:35:
07:bb:14:7f:32:2a:20:9a:a8:70:88:cc:9e:86:82:fa:a6:4e:
ba:a4:a6:25:f6:dd:3b:e2:e6:6c:6e:dc:92:12:ec:5f:d8:4b:
c9:4d:78:77:ca:a4:ce:88:c7:bd:0f:bb:0d:dc:65:a6:79:29:
b7:98:e7:3a:04:f9:85:e5:c3:0c:68:c1:97:b3:41:1c:1f:3c:
58:38:b2:54:97:6c:02:b8:06:3a:4f:07:64:15:92:c9:79:cc:
b8:aa:69:cb:e9:ee:06:04:e8:a3:c1:38:11:7c:12:dc:bc:fb:
3c:e7:79:73:95:58:92:89:19:53:14:c6:dc:0a:bb:43:5c:22:
c7:79:63:32:7d:f1:c3:df:e3:32:c4:c2:ba:a6:06:aa:24:ff:
f9:e9:cd:42:24:f0:ea:7e:fb:66:e6:cf:8d:80:82:79:06:9d:
1b:49:54:e5:29:ad:f6:2a:07:06:8b:ac:ad:12:eb:44:40:9d:
9d:81:d3:4d:03:37:e8:fc:af:9c:53:94:57:ec:89:7a:05:25:
3e:8a:90:59:8c:21:91:7c:f7:30:a6:e7:27:a4:2a:1e:1c:6f:
28:1b:81:86:fc:60:ae:7a:56:6c:5e:01:e9:5b:6c:d1:29:de:
dc:96:c5:b1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEFKURUuEbG14DWMMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDc2YzQwZWEtZDhiZS00MWJhLThlMGUtMWVkYWNlMzliY2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/1ZIAnf0xGqk/vVGG8AhAdzejZnEhHDuiDa
yOpO+07uiilNgVv0ieVIgFOuhWGPSYj9Bvmp+NhKdPiFpFUy/oSpi2XgDRO+9HKd
2bEg36WI3g8+BbHkz9Bukuz6t4cwtmyUXPyDKxmP0cXBuHlXreMYyuLZSy5jVFxV
CAJ9jltyMmyct8UbieEnOeopswusHJO40LPeS8Y5xo2q4lCYDuKcFy3yzlW1pFuy
SimKuEu7Lrs+7R5tBFdn0DlGNqMb0zro2b7lK5sgV29/8K/ZmfDrcIepYMgJah+m
QX3Wbixw3M0rlZdAYC+Qyq5yQ06YcsMZNwzrfmmzrHmRHvN3AwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNM0sVVVOKncIKJk2osRKR1bE9tQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDNlNDdiOGUtMjYwZi0z
ZjM2LThiYTgtNzhiZThmMTU4NDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAA0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEafOSmvAQA0y0Ymu5PA51ucNQe7FH8yKiCaqHCIzJ6GgvqmTrqk
piX23Tvi5mxu3JIS7F/YS8lNeHfKpM6Ix70Puw3cZaZ5KbeY5zoE+YXlwwxowZez
QRwfPFg4slSXbAK4BjpPB2QVksl5zLiqacvp7gYE6KPBOBF8Ety8+zzneXOVWJKJ
GVMUxtwKu0NcIsd5YzJ98cPf4zLEwrqmBqok//npzUIk8Op++2bmz42AgnkGnRtJ
VOUprfYqBwaLrK0S60RAnZ2B000DN+j8r5xTlFfsiXoFJT6KkFmMIZF89zCm5yek
Kh4cbygbgYb8YK56VmxeAelbbNEp3tyWxbE=
-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:05 2023 by rpki-client on console-fra.rpki-client.org