Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/d17f5f02-6528-3e95-a18b-0a4192cf1d4d.roa
File: d17f5f02-6528-3e95-a18b-0a4192cf1d4d.roa (raw, json)
Hash identifier: cnpyjjI1X/CHsijs5FIlT4nUPQIVUPc5k0Iea96Lk6M=
Subject key identifier: 7F:3D:EB:FD:8A:F5:9F:38:94:75:A0:CA:50:D4:AA:41:F9:C1:85:81
Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Certificate serial: 010D0C9F4328584250D2BAE3FDF013384B861240
Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/d17f5f02-6528-3e95-a18b-0a4192cf1d4d.roa
Signing time: Fri 23 Jun 2023 14:14:31 +0000
ROA not before: Fri 23 Jun 2023 14:14:31 +0000
ROA not after: Thu 21 Sep 2023 14:14:31 +0000
asID: 13849
IP address blocks: 2602:fbb5:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:50:d2:ba:e3:fd:f0:13:38:4b:86:12:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Validity
Not Before: Jun 23 14:14:31 2023 GMT
Not After : Sep 21 14:14:31 2023 GMT
Subject: CN=630d6ab1-a3dc-46c1-b31b-536f5fe320b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:02:3d:50:8c:a3:44:ee:f4:e4:90:6a:3f:d9:
3a:85:7c:71:91:9b:f5:c0:a1:30:3e:0b:58:46:25:
38:02:45:72:db:ee:75:e3:4c:f1:d6:2d:56:97:43:
5e:69:4f:56:47:43:c1:97:34:d4:be:e7:33:20:e9:
e4:70:30:ab:60:1d:83:04:dc:0a:51:13:38:eb:79:
5e:65:00:47:e9:e5:94:a4:ba:8a:e1:3d:18:8f:6a:
18:41:1b:bd:c0:eb:45:18:f2:f0:e0:64:c8:44:5e:
06:78:49:07:ad:7f:67:4a:91:0d:c8:bf:e5:a2:83:
1a:91:0b:75:34:f2:43:c8:59:a5:7e:b1:ab:38:7e:
f8:d9:53:c9:17:bc:55:20:7b:ea:9f:77:04:41:4b:
af:e9:69:a3:61:13:ef:39:8c:3a:dc:99:72:fb:78:
94:78:a5:1d:4a:0e:31:f3:bb:7e:3b:3b:e4:5d:fc:
fe:65:00:39:b3:52:dd:49:73:5b:b4:cc:bb:6b:ea:
e2:5f:84:5c:da:f4:e4:19:a7:12:ae:f1:76:4e:8d:
bf:26:b3:f9:fc:71:16:dc:9f:27:ac:65:f9:c3:0f:
fa:44:e0:a8:ee:a0:f7:a1:71:eb:e9:9c:66:fd:c2:
dd:e0:10:30:0e:73:64:2c:08:da:d9:69:3d:08:5d:
23:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3D:EB:FD:8A:F5:9F:38:94:75:A0:CA:50:D4:AA:41:F9:C1:85:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/d17f5f02-6528-3e95-a18b-0a4192cf1d4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl
X509v3 Authority Key Identifier:
keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fbb5:3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:d4:22:84:16:03:bc:71:6e:07:21:aa:9f:3d:5b:85:c7:d1:
32:fc:a2:4f:61:4f:b2:46:67:9a:0f:b0:b5:89:eb:8e:d7:b8:
88:7a:30:1d:a2:8c:d1:d6:81:f4:88:21:b9:71:9d:d2:8f:43:
e4:fb:5a:49:01:64:49:95:00:b0:3d:e0:73:7a:ab:ae:27:8c:
a2:5f:53:09:7e:95:dd:d0:1d:8f:17:63:95:db:83:c9:f9:94:
21:85:cb:53:84:e6:b5:d4:63:e8:5f:02:10:b9:f8:3e:da:aa:
79:bd:22:90:e1:88:4c:0a:cf:70:9e:69:d7:aa:ba:02:d2:ab:
67:0b:17:36:e0:41:cc:46:49:49:0d:bc:f4:57:67:a3:ee:10:
97:5c:6b:05:64:63:61:a4:34:e8:af:28:95:72:ea:71:53:4a:
e1:4a:f1:34:e9:63:2e:a7:72:d7:b6:de:19:3a:cd:96:22:12:
ba:31:5d:38:86:5f:d0:91:58:1e:01:95:a2:01:06:39:9c:1c:
01:1a:f1:fc:3a:8d:64:51:04:2e:f5:b1:2b:5d:52:ee:74:2c:
ae:c4:d2:4a:47:eb:b2:87:6c:af:3f:31:f0:26:d8:4b:16:eb:
fd:70:58:66:92:8e:01:d3:e1:8d:f7:27:d9:4a:69:a0:7d:80:
14:9f:c6:d4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEJQ0rrj/fATOEuGEkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl
MDIwMB4XDTIzMDYyMzE0MTQzMVoXDTIzMDkyMTE0MTQzMVowLzEtMCsGA1UEAxMk
NjMwZDZhYjEtYTNkYy00NmMxLWIzMWItNTM2ZjVmZTMyMGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gI9UIyjRO705JBqP9k6hXxxkZv1wKEwPgtY
RiU4AkVy2+5140zx1i1Wl0NeaU9WR0PBlzTUvuczIOnkcDCrYB2DBNwKURM463le
ZQBH6eWUpLqK4T0Yj2oYQRu9wOtFGPLw4GTIRF4GeEkHrX9nSpENyL/looMakQt1
NPJDyFmlfrGrOH742VPJF7xVIHvqn3cEQUuv6WmjYRPvOYw63Jly+3iUeKUdSg4x
87t+OzvkXfz+ZQA5s1LdSXNbtMy7a+riX4Rc2vTkGacSrvF2To2/JrP5/HEW3J8n
rGX5ww/6ROCo7qD3oXHr6Zxm/cLd4BAwDnNkLAja2Wk9CF0jAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH896/2K9Z84lHWgylDUqkH5wYWBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl
ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvZDE3ZjVmMDItNjUyOC0z
ZTk1LWExOGItMGE0MTkyY2YxZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy
NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2
ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz
MTJhNmUwMjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7tQAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGDUIoQWA7xxbgchqp89W4XH0TL8ok9hT7JGZ5oPsLWJ647XuIh6
MB2ijNHWgfSIIblxndKPQ+T7WkkBZEmVALA94HN6q64njKJfUwl+ld3QHY8XY5Xb
g8n5lCGFy1OE5rXUY+hfAhC5+D7aqnm9IpDhiEwKz3CeadequgLSq2cLFzbgQcxG
SUkNvPRXZ6PuEJdcawVkY2GkNOivKJVy6nFTSuFK8TTpYy6ncte23hk6zZYiErox
XTiGX9CRWB4BlaIBBjmcHAEa8fw6jWRRBC71sStdUu50LK7E0kpH67KHbK8/MfAm
2EsW6/1wWGaSjgHT4Y33J9lKaaB9gBSfxtQ=
-----END CERTIFICATE-----
Generated at Mon May 12 11:17:17 2025 by rpki-client