Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98feee51-43c4-363a-8f24-7a329d2170c6.roa
File: 98feee51-43c4-363a-8f24-7a329d2170c6.roa (raw, json)
Hash identifier: No0JXyAaSEuAilJEXFGl0+6Kw5/frdL4/kW4Zs9I+Ws=
Subject key identifier: 47:F3:F9:82:88:AC:65:67:E9:46:95:7B:E1:E0:75:AB:4E:4E:39:A2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C5818DB9E06CD555A06C0380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98feee51-43c4-363a-8f24-7a329d2170c6.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 396982
IP address blocks: 2600:1900:42d6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:8d:b9:e0:6c:d5:55:a0:6c:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=0f3b9bc6-6ef1-4c3c-95ca-bb9d812d534a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c2:87:ab:4f:1d:a4:55:bb:8a:08:15:77:af:
35:1c:da:ee:4e:4b:2e:58:47:f9:1f:9d:09:d6:5a:
b1:f4:3d:cd:b6:36:f4:07:8c:92:8a:49:f9:6c:60:
73:a8:1f:57:d8:07:b5:57:b1:9f:ee:a7:99:0f:db:
6c:b6:e7:fb:32:3a:cd:0c:ae:42:b1:cc:1c:1a:dd:
15:2e:2d:94:c9:15:80:65:a7:66:43:1b:f0:87:61:
e2:a2:1f:8f:66:b3:31:a3:02:7b:ce:8e:a1:6d:cf:
82:3c:15:56:64:07:2c:d2:e6:6b:1b:a1:94:43:cf:
cb:e2:f5:52:cd:33:9e:fb:36:2a:f3:44:3a:a2:a1:
7d:f2:6b:7c:0b:33:3d:ee:04:81:b5:8e:14:c9:8a:
39:e4:0c:9a:94:e5:85:70:71:fd:9b:41:a8:92:49:
94:72:83:23:f9:13:db:7d:2a:45:c9:eb:ee:43:b1:
0f:76:66:59:6a:e3:dd:3e:88:72:a7:7a:f2:fc:4f:
91:d1:1f:b0:61:d5:ab:25:dd:3a:9d:9a:66:bc:4d:
cc:61:b4:7c:07:85:0e:b8:5e:57:11:3e:4f:8b:89:
e6:59:b1:1e:57:04:4e:ac:23:d2:1a:27:7f:26:dc:
20:87:33:fd:37:ad:95:2d:96:d6:25:b3:40:d5:11:
6a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F3:F9:82:88:AC:65:67:E9:46:95:7B:E1:E0:75:AB:4E:4E:39:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98feee51-43c4-363a-8f24-7a329d2170c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1900:42d6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:cf:9c:0f:51:53:14:04:a1:26:4a:6b:b2:c1:22:34:88:6a:
91:ee:0a:da:08:05:85:e9:ff:9c:84:de:78:43:d2:fd:6b:92:
2e:57:db:28:0a:0a:1d:e3:19:c7:22:38:a2:5c:61:54:6e:90:
10:30:d2:9e:ee:5f:27:ef:b2:a9:81:39:eb:13:c2:a1:f1:de:
9e:56:ba:8c:2c:03:1d:95:19:7c:bf:e8:1e:f2:27:7c:2d:df:
a0:63:10:fa:95:31:1b:59:ef:c6:f4:dc:1c:a1:24:c8:6c:ad:
5b:f8:2d:a3:87:03:6a:63:32:00:7d:ae:29:c9:4f:5c:01:67:
ec:fa:37:b0:3c:c8:79:73:be:aa:c6:99:33:8e:56:e1:42:1d:
2d:e8:38:6e:23:8c:c6:1c:f8:d9:ec:b4:82:44:87:87:55:16:
7d:f1:5c:1b:6e:a2:a8:f0:dd:86:b1:e7:03:41:ad:2b:a7:49:
45:32:95:ed:60:7c:d1:0a:f4:12:00:79:14:76:cb:66:58:bb:
1c:71:0b:dc:79:c9:6b:77:b3:90:07:3c:e1:c3:ac:8e:3f:11:
8d:a6:02:98:7b:cc:22:e4:5a:c1:cd:58:13:b9:87:b0:1d:b3:
51:c5:b8:31:06:e2:cb:aa:43:36:26:1e:bd:7a:9a:b5:a3:78:
2e:58:1a:f2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgY254GzVVaBsA4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MGYzYjliYzYtNmVmMS00YzNjLTk1Y2EtYmI5ZDgxMmQ1MzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMKHq08dpFW7iggVd681HNruTksuWEf5H50J
1lqx9D3Ntjb0B4ySikn5bGBzqB9X2Ae1V7Gf7qeZD9tstuf7MjrNDK5CscwcGt0V
Li2UyRWAZadmQxvwh2Hioh+PZrMxowJ7zo6hbc+CPBVWZAcs0uZrG6GUQ8/L4vVS
zTOe+zYq80Q6oqF98mt8CzM97gSBtY4UyYo55AyalOWFcHH9m0GokkmUcoMj+RPb
fSpFyevuQ7EPdmZZauPdPohyp3ry/E+R0R+wYdWrJd06nZpmvE3MYbR8B4UOuF5X
ET5Pi4nmWbEeVwROrCPSGid/JtwghzP9N62VLZbWJbNA1RFqSQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEfz+YKIrGVn6UaVe+HgdatOTjmiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOThmZWVlNTEtNDNjNC0z
NjNhLThmMjQtN2EzMjlkMjE3MGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAZAELW
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH7PnA9RUxQEoSZKa7LBIjSIapHuCtoIBYXp/5yE3nhD0v1rki5X
2ygKCh3jGcciOKJcYVRukBAw0p7uXyfvsqmBOesTwqHx3p5WuowsAx2VGXy/6B7y
J3wt36BjEPqVMRtZ78b03ByhJMhsrVv4LaOHA2pjMgB9rinJT1wBZ+z6N7A8yHlz
vqrGmTOOVuFCHS3oOG4jjMYc+NnstIJEh4dVFn3xXBtuoqjw3Yax5wNBrSunSUUy
le1gfNEK9BIAeRR2y2ZYuxxxC9x5yWt3s5AHPOHDrI4/EY2mAph7zCLkWsHNWBO5
h7Ads1HFuDEG4suqQzYmHr16mrWjeC5YGvI=
-----END CERTIFICATE-----
Generated at Sun May 11 09:19:37 2025 by rpki-client