Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff405bf2-5bd6-393b-851c-b9cedeb418dc.roa
File: ff405bf2-5bd6-393b-851c-b9cedeb418dc.roa (raw, json)
Hash identifier: tiWPGx0/XReCn6B4AMRDcSTiycFrioWvefkNcOWI+5s=
Subject key identifier: BE:34:08:8D:B0:DE:89:AD:AD:04:BC:0A:4F:E4:78:46:59:B2:FF:19
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858464A4462E3D275AAE269683880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff405bf2-5bd6-393b-851c-b9cedeb418dc.roa
Signing time: Sat 22 Jun 2024 01:00:24 +0000
ROA not before: Sat 22 Jun 2024 01:00:24 +0000
ROA not after: Fri 20 Sep 2024 01:00:24 +0000
asID: 132139
IP address blocks: 2001:470:2ce::/47 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:4a:44:62:e3:d2:75:aa:e2:69:68:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 22 01:00:24 2024 GMT
Not After : Sep 20 01:00:24 2024 GMT
Subject: CN=200aecc5-01c9-43b8-99ef-e3f41a0ab7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8f:c4:56:6f:c8:6a:65:ee:eb:18:aa:55:28:
69:79:91:09:23:6c:a9:09:a9:8a:7f:78:19:44:24:
02:3b:1d:1b:02:61:a7:23:1a:72:25:05:05:b5:ed:
77:95:14:d1:ff:aa:84:3f:0f:c9:ac:16:90:9b:ea:
bb:52:fb:88:fe:79:a8:9d:7d:af:28:35:1c:86:7a:
bd:48:37:01:80:53:86:9d:7b:b2:6d:59:93:ee:3f:
3e:dc:ce:95:3a:7b:90:a9:ab:93:32:54:28:74:72:
76:cc:73:28:9f:00:3b:ec:23:00:ce:80:68:3c:ab:
86:8c:98:2b:da:99:fa:47:fd:4e:99:fd:67:0e:e3:
ab:04:99:45:7f:67:3d:d1:f5:1b:ba:f4:8d:67:61:
72:5c:73:48:f7:5d:90:a8:a1:2c:fa:1b:6b:e1:f8:
43:fa:ce:ad:0a:bb:c5:44:83:d1:ef:ed:74:d3:83:
f2:fc:34:e7:cd:dc:77:e8:00:eb:e9:7e:5c:25:69:
4c:a8:5c:5d:ae:51:a2:07:54:36:96:02:85:70:8f:
83:7d:48:e3:80:1a:b5:db:68:8a:c7:70:54:58:c2:
72:fc:70:0f:a9:b6:15:e3:07:2c:12:4a:ad:97:bd:
4a:a6:df:a0:16:60:4a:98:c6:4a:49:59:cd:3f:84:
5c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:34:08:8D:B0:DE:89:AD:AD:04:BC:0A:4F:E4:78:46:59:B2:FF:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff405bf2-5bd6-393b-851c-b9cedeb418dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2ce::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:32:6a:8a:b0:6d:26:64:c1:ca:63:b9:03:f1:ad:15:75:ca:
d5:b6:7c:a6:40:00:03:bb:35:74:d5:59:87:03:a9:d4:f8:77:
c1:15:f8:64:d3:c2:dd:e6:e3:b5:76:36:3c:2b:da:60:b9:26:
12:fc:ea:1f:ed:d6:91:08:fd:e2:95:6b:16:38:b5:0a:91:61:
64:9a:b2:d3:cf:7c:3b:a3:04:d1:55:bf:59:67:47:a8:b3:a7:
57:50:71:75:e6:82:32:81:7c:c3:b8:6e:34:a4:32:ea:b4:af:
e8:67:fb:2b:3e:75:e9:11:25:cb:b0:03:7b:a0:10:84:13:75:
d5:b7:af:fb:79:92:2f:40:cd:19:6f:77:fa:4a:d3:7f:df:82:
e2:42:a9:84:84:3b:86:b5:a6:09:49:a0:48:52:44:1c:b5:8c:
ff:e1:1b:da:38:7e:5f:ad:16:0a:66:c0:e5:28:55:45:82:e7:
c7:40:65:7c:b7:bd:12:ea:9c:bf:18:7a:44:18:a6:eb:a9:a3:
68:86:20:03:08:8d:3a:d2:0e:9d:bf:23:4b:09:39:e9:3b:fb:
03:c3:d5:2d:31:ab:8e:74:52:81:11:41:1e:ef:5e:0a:b0:d2:
49:61:01:40:5a:d0:a4:d3:c8:8b:c8:f6:2e:0d:29:da:45:4c:
9b:81:db:cc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEZKRGLj0nWq4mloOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDYyMjAxMDAyNFoXDTI0MDkyMDAxMDAyNFowLzEtMCsGA1UEAxMk
MjAwYWVjYzUtMDFjOS00M2I4LTk5ZWYtZTNmNDFhMGFiN2M5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4/EVm/IamXu6xiqVShpeZEJI2ypCamKf3gZ
RCQCOx0bAmGnIxpyJQUFte13lRTR/6qEPw/JrBaQm+q7UvuI/nmonX2vKDUchnq9
SDcBgFOGnXuybVmT7j8+3M6VOnuQqauTMlQodHJ2zHMonwA77CMAzoBoPKuGjJgr
2pn6R/1Omf1nDuOrBJlFf2c90fUbuvSNZ2FyXHNI912QqKEs+htr4fhD+s6tCrvF
RIPR7+1004Py/DTnzdx36ADr6X5cJWlMqFxdrlGiB1Q2lgKFcI+DfUjjgBq122iK
x3BUWMJy/HAPqbYV4wcsEkqtl71Kpt+gFmBKmMZKSVnNP4Rc7QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL40CI2w3omtrQS8Ck/keEZZsv8ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmY0MDViZjItNWJkNi0z
OTNiLTg1MWMtYjljZWRlYjQxOGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEEcALO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALwyaoqwbSZkwcpjuQPxrRV1ytW2fKZAAAO7NXTVWYcDqdT4d8EV
+GTTwt3m47V2Njwr2mC5JhL86h/t1pEI/eKVaxY4tQqRYWSastPPfDujBNFVv1ln
R6izp1dQcXXmgjKBfMO4bjSkMuq0r+hn+ys+dekRJcuwA3ugEIQTddW3r/t5ki9A
zRlvd/pK03/fguJCqYSEO4a1pglJoEhSRBy1jP/hG9o4fl+tFgpmwOUoVUWC58dA
ZXy3vRLqnL8YekQYpuupo2iGIAMIjTrSDp2/I0sJOek7+wPD1S0xq450UoERQR7v
Xgqw0klhAUBa0KTTyIvI9i4NKdpFTJuB28w=
-----END CERTIFICATE-----
Generated at Thu Apr 17 15:34:30 2025 by rpki-client