Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff84193e-4fb0-32a6-bc5b-04187d2099d1.roa
File: ff84193e-4fb0-32a6-bc5b-04187d2099d1.roa (raw, json)
Hash identifier: Cged4kWZ8Lp7k+UmMTNLJ0GsfqfIkOOW2blOhhxt2Fk=
Subject key identifier: 77:89:F5:D4:21:6E:3E:9A:47:EB:1E:4C:7E:29:7C:AE:52:66:03:42
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858473A5B749C90C0D534BC9D7920
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff84193e-4fb0-32a6-bc5b-04187d2099d1.roa
Signing time: Mon 16 Sep 2024 01:00:29 +0000
ROA not before: Mon 16 Sep 2024 01:00:29 +0000
ROA not after: Sun 15 Dec 2024 02:00:29 +0000
asID: 48347
IP address blocks: 2001:470:2ef::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:3a:5b:74:9c:90:c0:d5:34:bc:9d:79:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 16 01:00:29 2024 GMT
Not After : Dec 15 02:00:29 2024 GMT
Subject: CN=f706ce29-7c66-43b7-b901-ec5a9bfe31c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:f4:ed:ed:6d:aa:d9:62:ac:3e:bc:f0:77:
51:b7:0c:e4:87:35:77:b6:94:1e:82:d3:b8:89:6b:
b5:05:0f:08:90:b8:fe:ea:21:12:05:0f:82:5a:74:
e5:25:e0:5d:51:de:1a:5e:81:1a:6f:f5:d4:92:b2:
02:00:d0:87:bf:f3:06:92:68:24:5e:16:cb:62:53:
87:4a:f9:03:50:9b:8f:1a:24:b8:e5:a9:7f:f6:e2:
e1:53:43:4b:0e:c6:8a:6d:16:39:c3:d3:d9:8e:fb:
a3:9a:68:07:e4:cf:4f:11:b7:7c:07:63:c2:f8:f4:
a5:3b:74:21:c1:67:b8:3e:79:21:e5:1c:d8:21:7a:
48:64:4f:0a:4e:2e:ff:3e:2f:61:0f:9b:bf:ed:dc:
a1:cd:9b:7f:d6:23:b1:a4:1d:60:d5:4f:71:9d:4e:
43:64:82:04:12:5c:4e:dd:09:bf:3b:1f:2c:48:14:
1e:0f:8f:2e:b3:cc:61:8d:c2:8d:28:a3:9f:8e:d9:
16:76:9f:69:33:71:cc:06:6d:07:26:93:3a:64:80:
bb:b9:d7:35:0f:82:0c:e3:c8:88:af:37:bd:6e:23:
52:3a:84:c8:c7:cf:bc:51:f1:5c:66:cb:bc:f0:e1:
ce:f4:0f:88:0c:14:28:42:7d:ff:d4:39:2c:9c:ef:
73:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:89:F5:D4:21:6E:3E:9A:47:EB:1E:4C:7E:29:7C:AE:52:66:03:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff84193e-4fb0-32a6-bc5b-04187d2099d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2ef::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:02:1d:0d:65:e0:a5:26:74:3d:8c:c0:92:3f:24:18:b2:ce:
ab:30:51:d2:b8:80:23:ea:d0:c9:c7:65:f1:61:3e:b6:30:f4:
ef:5d:bb:78:8d:e8:ca:64:f6:76:49:3a:36:e7:f7:bd:9c:80:
0f:f2:88:4b:b7:65:ff:0a:7d:14:60:2f:70:27:0c:22:09:c4:
93:33:8d:65:6c:3e:92:f9:5b:80:a1:a6:dc:94:7d:ff:96:f1:
9e:84:c2:89:ae:d9:63:f6:56:a9:27:82:4a:6b:1a:42:87:54:
1c:91:5f:ad:c3:01:a8:d1:97:4a:38:3e:2e:d6:b1:76:ff:75:
c2:96:78:80:3c:18:4c:36:85:94:7b:03:ce:33:6c:f8:ee:0f:
f4:09:78:9a:22:d2:a3:5d:df:6e:c8:96:55:2f:18:10:1d:32:
0b:a0:15:83:8f:eb:ec:b7:e8:88:d8:04:fa:26:6a:62:59:49:
b2:80:a5:2c:14:26:2e:65:41:2c:3e:77:f9:fc:78:1e:9b:fe:
6d:55:33:31:30:a1:fa:c2:5d:3e:8d:0e:3b:10:8b:de:96:77:
87:a8:17:46:35:90:44:1f:56:9b:92:00:a8:62:66:de:06:72:
a4:27:66:65:f2:10:9a:3a:23:54:06:a5:c5:de:78:7c:32:2c:
9e:99:8e:b5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W3SckMDVNLydeSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
ZjcwNmNlMjktN2M2Ni00M2I3LWI5MDEtZWM1YTliZmUzMWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweT07e1tqtlirD688HdRtwzkhzV3tpQegtO4
iWu1BQ8IkLj+6iESBQ+CWnTlJeBdUd4aXoEab/XUkrICANCHv/MGkmgkXhbLYlOH
SvkDUJuPGiS45al/9uLhU0NLDsaKbRY5w9PZjvujmmgH5M9PEbd8B2PC+PSlO3Qh
wWe4Pnkh5RzYIXpIZE8KTi7/Pi9hD5u/7dyhzZt/1iOxpB1g1U9xnU5DZIIEElxO
3Qm/Ox8sSBQeD48us8xhjcKNKKOfjtkWdp9pM3HMBm0HJpM6ZIC7udc1D4IM48iI
rze9biNSOoTIx8+8UfFcZsu88OHO9A+IDBQoQn3/1DksnO9zOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHeJ9dQhbj6aR+seTH4pfK5SZgNCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmY4NDE5M2UtNGZiMC0z
MmE2LWJjNWItMDQxODdkMjA5OWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALv
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACkCHQ1l4KUmdD2MwJI/JBiyzqswUdK4gCPq0MnHZfFhPrYw9O9d
u3iN6Mpk9nZJOjbn972cgA/yiEu3Zf8KfRRgL3AnDCIJxJMzjWVsPpL5W4ChptyU
ff+W8Z6Ewomu2WP2VqkngkprGkKHVByRX63DAajRl0o4Pi7WsXb/dcKWeIA8GEw2
hZR7A84zbPjuD/QJeJoi0qNd327IllUvGBAdMgugFYOP6+y36IjYBPomamJZSbKA
pSwUJi5lQSw+d/n8eB6b/m1VMzEwofrCXT6NDjsQi96Wd4eoF0Y1kEQfVpuSAKhi
Zt4GcqQnZmXyEJo6I1QGpcXeeHwyLJ6ZjrU=
-----END CERTIFICATE-----
Generated at Thu Apr 17 15:26:15 2025 by rpki-client