Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/15fa46df-7e1c-31f1-a7dc-cc6886c1bbe3.roa
File: 15fa46df-7e1c-31f1-a7dc-cc6886c1bbe3.roa (raw, json)
Hash identifier: YALJu4UK9hRp8ulX+70cDJySbA3tzga9LRoRbAGT3gc=
Subject key identifier: 98:03:25:52:DB:8C:68:1A:08:B6:C3:5E:EA:D1:A5:27:06:2A:11:01
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285847485F49E91404549AFF83ED40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/15fa46df-7e1c-31f1-a7dc-cc6886c1bbe3.roa
Signing time: Sat 21 Sep 2024 01:30:09 +0000
ROA not before: Sat 21 Sep 2024 01:30:09 +0000
ROA not after: Fri 20 Dec 2024 02:30:09 +0000
asID: 394367
IP address blocks: 2001:470:354::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:48:5f:49:e9:14:04:54:9a:ff:83:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 21 01:30:09 2024 GMT
Not After : Dec 20 02:30:09 2024 GMT
Subject: CN=dd9d8132-0b88-4e09-942c-63a7f1f9b399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:df:bf:0d:09:46:7e:57:23:09:ee:b4:09:
ce:0a:d3:45:4d:35:3b:e8:4b:ad:de:a7:87:7e:89:
13:cf:ab:7d:c7:1e:ec:cd:84:58:e0:d7:f4:02:5e:
44:b2:f0:07:f0:50:73:c2:7d:16:b1:ee:79:d6:a2:
17:67:53:04:5c:6a:1f:c7:38:9d:c0:6e:86:13:8a:
7d:dd:de:e1:ae:2f:be:b1:36:e3:8b:44:6e:c1:4d:
55:e2:1d:33:8d:d0:9c:4c:c6:fd:64:48:55:a9:61:
86:85:49:7a:ea:79:b1:38:b1:50:72:86:63:cc:9e:
99:75:fe:c5:95:7a:fc:1a:be:cc:73:35:86:51:27:
0b:9a:6d:83:9e:36:1a:10:fa:20:1d:f1:ea:ad:16:
d0:f9:65:5c:9f:a7:6a:c3:29:d8:08:5b:00:41:6b:
f4:fa:32:7f:e6:90:76:de:3d:8a:43:2f:b9:11:3d:
8b:52:e7:f3:12:5e:5a:41:ce:cc:e1:db:01:20:6b:
be:7e:dc:71:79:b7:8f:27:ba:3f:1d:33:29:1e:b8:
0f:3a:b7:0d:1c:40:a7:b5:6d:ca:58:0c:81:41:a9:
ce:9d:af:85:65:9b:41:37:1f:46:b5:45:9c:43:19:
c2:69:c9:22:06:70:ec:37:a9:09:9e:4d:7d:e0:8b:
16:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:03:25:52:DB:8C:68:1A:08:B6:C3:5E:EA:D1:A5:27:06:2A:11:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/15fa46df-7e1c-31f1-a7dc-cc6886c1bbe3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:354::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:c5:1c:96:c4:5f:19:6e:3d:9a:1c:df:53:b2:25:bc:96:98:
ab:1d:18:f5:09:82:cb:79:db:1f:0c:67:90:1a:c7:ca:c6:89:
b2:92:16:7f:b4:8c:47:e2:70:82:fb:6d:e2:dc:d7:4d:5e:1b:
3d:1f:26:87:28:4e:14:a9:73:50:12:2c:92:3f:59:8d:c2:af:
be:9a:9d:02:07:c3:da:b7:7e:f5:fa:ce:6a:d8:fb:42:f6:c3:
9d:63:ab:f8:42:45:a7:d8:78:bf:8c:64:ab:8a:8f:f9:ef:ca:
d4:0b:3c:6f:bd:8d:2d:8d:66:e0:dc:99:3d:54:2e:b2:d9:08:
3c:7c:53:25:be:36:cf:80:b2:05:8d:61:5a:f4:a2:f3:ef:79:
b7:17:cb:cf:37:33:97:41:72:f7:1b:c2:79:33:d6:b0:5a:15:
f4:39:a5:92:ff:43:70:99:52:85:9a:86:1d:e9:8e:d6:bd:da:
37:00:07:aa:d6:27:08:9e:68:a2:cc:da:ec:37:38:c1:88:0a:
93:70:e6:45:9e:15:1c:49:d0:93:5d:53:4d:9a:14:ce:21:2c:
fe:11:10:22:64:e7:a3:a4:9f:c8:67:d5:7c:0c:f7:dd:ec:6d:
70:97:4d:39:6f:71:2a:d1:bc:82:8e:5e:8b:3a:d2:2d:16:6d:
b3:f2:ae:18
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdIX0npFARUmv+D7UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkyMTAxMzAwOVoXDTI0MTIyMDAyMzAwOVowLzEtMCsGA1UEAxMk
ZGQ5ZDgxMzItMGI4OC00ZTA5LTk0MmMtNjNhN2YxZjliMzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqjfvw0JRn5XIwnutAnOCtNFTTU76Eut3qeH
fokTz6t9xx7szYRY4Nf0Al5EsvAH8FBzwn0Wse551qIXZ1MEXGofxzidwG6GE4p9
3d7hri++sTbji0RuwU1V4h0zjdCcTMb9ZEhVqWGGhUl66nmxOLFQcoZjzJ6Zdf7F
lXr8Gr7MczWGUScLmm2DnjYaEPogHfHqrRbQ+WVcn6dqwynYCFsAQWv0+jJ/5pB2
3j2KQy+5ET2LUufzEl5aQc7M4dsBIGu+ftxxebePJ7o/HTMpHrgPOrcNHECntW3K
WAyBQanOna+FZZtBNx9GtUWcQxnCackiBnDsN6kJnk194IsWSwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJgDJVLbjGgaCLbDXurRpScGKhEBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTVmYTQ2ZGYtN2UxYy0z
MWYxLWE3ZGMtY2M2ODg2YzFiYmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH7FHJbEXxluPZoc31OyJbyWmKsdGPUJgst52x8MZ5Aax8rGibKS
Fn+0jEficIL7beLc101eGz0fJocoThSpc1ASLJI/WY3Cr76anQIHw9q3fvX6zmrY
+0L2w51jq/hCRafYeL+MZKuKj/nvytQLPG+9jS2NZuDcmT1ULrLZCDx8UyW+Ns+A
sgWNYVr0ovPvebcXy883M5dBcvcbwnkz1rBaFfQ5pZL/Q3CZUoWahh3pjta92jcA
B6rWJwieaKLM2uw3OMGICpNw5kWeFRxJ0JNdU02aFM4hLP4RECJk56Okn8hn1XwM
993sbXCXTTlvcSrRvIKOXos60i0WbbPyrhg=
-----END CERTIFICATE-----
Generated at Wed May 7 05:07:07 2025 by rpki-client