Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/effb7561-5400-392d-8297-d59e3ea070dc.roa
File: effb7561-5400-392d-8297-d59e3ea070dc.roa (raw, json)
Hash identifier: iG9ldZVC/lcWfkATqNGdmcFL8AeiMC54WEQil8mrYzo=
Subject key identifier: 0C:C5:1A:C4:F8:62:2D:9E:96:84:2F:EC:33:84:B5:2E:A8:0B:7C:24
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845D933B837298178F0187C9680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/effb7561-5400-392d-8297-d59e3ea070dc.roa
Signing time: Sun 12 May 2024 13:00:34 +0000
ROA not before: Sun 12 May 2024 13:00:34 +0000
ROA not after: Sat 10 Aug 2024 13:00:34 +0000
asID: 394356
IP address blocks: 2001:470:e0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:d9:33:b8:37:29:81:78:f0:18:7c:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 12 13:00:34 2024 GMT
Not After : Aug 10 13:00:34 2024 GMT
Subject: CN=b4d7abc6-5667-4545-98af-63c395e15735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b3:7b:7f:b4:a2:6b:cd:4d:fa:3a:66:22:f1:
7b:dc:09:98:5a:60:e1:e2:5d:38:16:d6:98:14:b5:
83:90:6e:da:92:9b:c9:de:d4:f9:0e:50:eb:c6:b7:
e0:c3:d0:01:13:d8:34:95:59:bd:9c:3a:be:9d:1d:
fd:7e:88:52:50:67:5b:7b:55:20:1d:02:d9:e2:5a:
a1:33:ea:7c:d4:85:8a:c6:67:7c:be:45:b4:4a:a8:
5a:18:21:cd:23:03:77:b1:84:5a:1c:ee:f2:08:c3:
65:0f:2a:e0:59:6e:0c:2a:29:3e:0e:17:41:38:f1:
d3:4e:f5:f6:8c:ad:10:b7:8b:81:87:56:ab:45:dc:
af:4b:b3:26:30:a9:1a:6c:b9:8f:7c:0c:1f:fc:05:
d5:98:db:cf:26:65:fe:ea:7f:9d:19:d7:65:1a:eb:
ab:d5:f8:24:06:fe:11:41:39:34:4c:0a:02:21:1f:
23:f8:25:d2:0f:c8:31:b8:05:a1:1f:ca:5f:f7:e5:
56:63:85:9e:0a:d7:31:1e:47:f1:5a:78:0b:a9:9e:
b9:e3:37:cd:f2:f1:6b:c6:4f:3b:ff:b4:5f:43:9f:
e1:37:74:82:18:10:5f:2a:17:26:e8:0c:a0:b7:0a:
e6:c3:db:23:26:1a:90:06:c9:26:47:6b:15:54:03:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C5:1A:C4:F8:62:2D:9E:96:84:2F:EC:33:84:B5:2E:A8:0B:7C:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/effb7561-5400-392d-8297-d59e3ea070dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:e0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:e9:ed:fb:90:44:f4:ed:1e:cd:c7:80:21:4b:f5:65:31:92:
b8:b2:4d:a4:b3:ec:6d:62:a9:3c:c8:a5:60:fd:91:c8:1a:15:
29:4d:24:e6:d9:a3:99:44:e4:d1:6c:08:86:8d:e9:a4:80:b9:
cf:f6:2d:5c:eb:36:36:cb:78:35:37:65:73:f0:7d:65:8a:64:
d0:a9:96:5e:dc:0b:a4:3c:c3:20:79:9e:7c:bf:a5:b4:32:7f:
b9:72:4a:c9:6a:0c:28:8d:3d:35:9c:c3:54:ca:08:9b:31:61:
ff:33:16:24:51:0e:a9:65:0e:f8:19:9c:cf:92:5f:56:d0:d6:
96:09:b1:fe:29:10:70:d5:a0:d8:71:3f:c2:7a:b6:53:8a:f8:
6b:ce:eb:0b:55:a1:fb:08:d2:90:0e:68:b5:ea:fd:d9:4c:c4:
9e:90:8a:f9:35:60:33:9e:70:05:29:3a:60:e9:37:22:17:8d:
7d:96:08:7b:20:5b:4f:7d:f2:5c:7e:ee:d9:ee:f3:5e:cd:aa:
7d:99:a5:cd:6e:a1:63:4c:2b:07:e2:1d:77:39:94:c8:ed:77:
23:7b:c2:1e:25:e7:dc:f0:14:d9:df:0b:e9:d6:08:fd:00:47:
0d:0f:c5:99:14:28:29:59:63:b5:04:03:79:b4:5c:12:a1:64:
11:d1:ff:19
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXZM7g3KYF48Bh8loAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDUxMjEzMDAzNFoXDTI0MDgxMDEzMDAzNFowLzEtMCsGA1UEAxMk
YjRkN2FiYzYtNTY2Ny00NTQ1LTk4YWYtNjNjMzk1ZTE1NzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37N7f7Sia81N+jpmIvF73AmYWmDh4l04FtaY
FLWDkG7akpvJ3tT5DlDrxrfgw9ABE9g0lVm9nDq+nR39fohSUGdbe1UgHQLZ4lqh
M+p81IWKxmd8vkW0SqhaGCHNIwN3sYRaHO7yCMNlDyrgWW4MKik+DhdBOPHTTvX2
jK0Qt4uBh1arRdyvS7MmMKkabLmPfAwf/AXVmNvPJmX+6n+dGddlGuur1fgkBv4R
QTk0TAoCIR8j+CXSD8gxuAWhH8pf9+VWY4WeCtcxHkfxWngLqZ654zfN8vFrxk87
/7RfQ5/hN3SCGBBfKhcm6Aygtwrmw9sjJhqQBskmR2sVVAO7fwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAzFGsT4Yi2eloQv7DOEtS6oC3wkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWZmYjc1NjEtNTQwMC0z
OTJkLTgyOTctZDU5ZTNlYTA3MGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADnp7fuQRPTtHs3HgCFL9WUxkriyTaSz7G1iqTzIpWD9kcgaFSlN
JObZo5lE5NFsCIaN6aSAuc/2LVzrNjbLeDU3ZXPwfWWKZNCpll7cC6Q8wyB5nny/
pbQyf7lySslqDCiNPTWcw1TKCJsxYf8zFiRRDqllDvgZnM+SX1bQ1pYJsf4pEHDV
oNhxP8J6tlOK+GvO6wtVofsI0pAOaLXq/dlMxJ6Qivk1YDOecAUpOmDpNyIXjX2W
CHsgW0998lx+7tnu817Nqn2Zpc1uoWNMKwfiHXc5lMjtdyN7wh4l59zwFNnfC+nW
CP0ARw0PxZkUKClZY7UEA3m0XBKhZBHR/xk=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:26:16 2025 by rpki-client