Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/6dbc7c83-0599-3d91-b730-29dbe30ebfe4.roa
File: 6dbc7c83-0599-3d91-b730-29dbe30ebfe4.roa (raw, json)
Hash identifier: VpTb1nUC+N75d6toyMMdphUXBzT1v3E+l+KPuWvqnQ8=
Subject key identifier: B9:BD:9D:6B:A2:2F:91:C2:B8:25:2E:4E:8C:F2:5C:FC:CC:04:F6:F8
Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial: 010D0C9F4328584503C017F360449CC1B3FD2380
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/6dbc7c83-0599-3d91-b730-29dbe30ebfe4.roa
Signing time: Mon 26 Feb 2024 02:00:26 +0000
ROA not before: Mon 26 Feb 2024 02:00:26 +0000
ROA not after: Sun 26 May 2024 01:00:26 +0000
asID: 23428
IP address blocks: 23.147.72.0/24 maxlen: 24
2602:fb68:140::/42 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:03:c0:17:f3:60:44:9c:c1:b3:fd:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Validity
Not Before: Feb 26 02:00:26 2024 GMT
Not After : May 26 01:00:26 2024 GMT
Subject: CN=9eb65920-af54-4800-bb04-265eb657b6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:0e:ef:ba:fd:97:63:e2:d5:6c:4f:1c:29:
f2:f6:1f:7c:05:a8:95:ab:6e:97:5e:75:8a:ab:1b:
3a:5c:a0:1b:d6:ce:82:cb:2f:b3:9a:ac:d1:a4:24:
19:a5:5d:e5:d6:02:67:a7:7b:e2:33:c2:2f:60:67:
27:02:90:01:a6:0d:5f:09:de:a6:3d:41:ae:b2:ce:
26:6c:71:9b:cc:7f:5d:15:9c:2a:79:bb:dc:f3:93:
8d:b5:2a:90:d9:a0:e6:74:89:30:9a:fd:c3:37:b6:
3a:77:62:13:85:8e:93:a8:73:b4:c7:6f:f8:09:04:
2b:28:9d:06:8b:a2:ca:f5:ef:bd:42:c0:ce:e6:ed:
75:cb:e7:58:16:e5:d6:37:95:6b:ab:3a:fa:e3:d1:
6a:f5:97:0d:c3:32:1e:44:b4:b1:48:ae:ed:cc:0b:
8c:1c:2d:f6:17:b5:06:40:67:d9:73:ff:9e:13:53:
de:dc:86:f1:61:cc:16:f7:c3:67:3b:e0:bf:7a:40:
0a:fe:95:5d:f6:7f:93:22:3d:0f:b6:1a:74:2a:0b:
46:9e:67:7a:0e:81:5c:2e:43:2c:93:31:db:dc:34:
75:48:db:06:f5:ea:99:5c:2e:f1:b4:44:8d:bf:62:
75:6a:0a:b1:07:60:78:70:67:f9:46:ef:e8:f6:2b:
d6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BD:9D:6B:A2:2F:91:C2:B8:25:2E:4E:8C:F2:5C:FC:CC:04:F6:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/6dbc7c83-0599-3d91-b730-29dbe30ebfe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
X509v3 Authority Key Identifier:
keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.72.0/24
IPv6:
2602:fb68:140::/42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:1b:a0:76:de:a2:80:43:96:d5:78:15:3b:43:7c:88:ac:55:
1d:6a:f9:98:21:de:27:36:e4:53:ad:6f:05:d7:62:48:f0:d4:
0b:94:74:ee:4e:85:bc:2b:d0:70:b1:d1:e8:af:0c:3c:43:2d:
c0:21:68:90:22:f4:61:3c:b0:be:ad:6e:bf:d1:56:65:e6:1e:
2c:fa:79:04:16:0d:70:30:e8:26:b5:ba:1b:4b:b4:e3:a8:a0:
ea:54:e8:74:21:88:46:f3:fd:35:ac:c3:fe:e8:7c:93:16:80:
cb:d5:5e:ae:58:38:a2:89:a9:6b:0f:f7:49:70:fb:41:89:db:
a8:cf:4e:b9:50:b5:de:67:b6:dc:2b:7b:a0:f4:74:dd:5d:51:
62:13:af:29:5e:70:86:cb:03:ac:1c:eb:14:70:05:ba:c7:a1:
aa:8a:e5:71:17:63:02:6a:5e:c7:21:81:23:a6:5a:c9:8a:00:
9d:19:d0:d6:3f:05:1e:1d:9c:a8:57:4a:03:e9:4e:96:f5:d1:
96:e3:a0:c7:c6:3a:99:f4:b9:5c:cc:59:c2:eb:ad:33:c8:74:
6b:fe:52:ce:8b:27:e1:c5:a0:9e:49:d3:fe:ec:e1:72:0a:0c:
a6:ca:83:cb:f7:53:d4:1a:44:a6:8a:6a:23:5f:56:0d:33:8e:
e3:dd:0f:fb
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEUDwBfzYEScwbP9I4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl
NTRkMB4XDTI0MDIyNjAyMDAyNloXDTI0MDUyNjAxMDAyNlowLzEtMCsGA1UEAxMk
OWViNjU5MjAtYWY1NC00ODAwLWJiMDQtMjY1ZWI2NTdiNmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnScO77r9l2Pi1WxPHCny9h98BaiVq26XXnWK
qxs6XKAb1s6Cyy+zmqzRpCQZpV3l1gJnp3viM8IvYGcnApABpg1fCd6mPUGuss4m
bHGbzH9dFZwqebvc85ONtSqQ2aDmdIkwmv3DN7Y6d2IThY6TqHO0x2/4CQQrKJ0G
i6LK9e+9QsDO5u11y+dYFuXWN5Vrqzr649Fq9ZcNwzIeRLSxSK7tzAuMHC32F7UG
QGfZc/+eE1Pe3IbxYcwW98NnO+C/ekAK/pVd9n+TIj0Pthp0KgtGnmd6DoFcLkMs
kzHb3DR1SNsG9eqZXC7xtESNv2J1agqxB2B4cGf5Ru/o9ivWFQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFLm9nWuiL5HCuCUuTozyXPzMBPb4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw
NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvNmRiYzdjODMtMDU5OS0z
ZDkxLWI3MzAtMjlkYmUzMGViZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli
MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj
ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk
MjkxY2U1NGQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF5NIMA8E
AgACMAkDBwYmAvtoAUAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOhugdt6igEOW1XgVO0N8iKxVHWr5mCHe
JzbkU61vBddiSPDUC5R07k6FvCvQcLHR6K8MPEMtwCFokCL0YTywvq1uv9FWZeYe
LPp5BBYNcDDoJrW6G0u046ig6lTodCGIRvP9NazD/uh8kxaAy9Verlg4oompaw/3
SXD7QYnbqM9OuVC13me23Ct7oPR03V1RYhOvKV5whssDrBzrFHAFusehqorlcRdj
AmpexyGBI6ZayYoAnRnQ1j8FHh2cqFdKA+lOlvXRluOgx8Y6mfS5XMxZwuutM8h0
a/5Szosn4cWgnknT/uzhcgoMpsqDy/dT1BpEpopqI19WDTOO490P+w==
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:51:35 2025 by rpki-client