Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3928e577-c1aa-3a2e-87fe-b27b3839f915.roa
File: 3928e577-c1aa-3a2e-87fe-b27b3839f915.roa (raw, json)
Hash identifier: /XOoE/3cuR8cDw5bYNeQOx8tofvKBLx3CZjBjbOCMo8=
Subject key identifier: DB:69:FC:85:29:1C:BB:E4:8F:25:94:F6:02:6C:D4:82:B4:E2:94:4F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858476F74E2A5FB22F54F74BF9B20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3928e577-c1aa-3a2e-87fe-b27b3839f915.roa
Signing time: Sat 05 Oct 2024 01:30:11 +0000
ROA not before: Sat 05 Oct 2024 01:30:11 +0000
ROA not after: Fri 03 Jan 2025 02:30:11 +0000
asID: 395945
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:6f:74:e2:a5:fb:22:f5:4f:74:bf:9b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 5 01:30:11 2024 GMT
Not After : Jan 3 02:30:11 2025 GMT
Subject: CN=2e662b9a-220f-454c-ac9c-4aaf6fb2d0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:d1:09:e6:81:7a:e5:7e:7e:c2:12:03:70:
47:e2:33:8b:4e:3e:14:d3:d7:43:80:83:8e:33:70:
4f:87:92:86:6e:c9:fc:01:85:42:d1:8c:e6:52:c3:
e7:cd:15:8c:aa:94:e3:6c:24:af:b9:3e:0b:a7:6a:
20:70:b4:af:cb:a6:dd:71:60:3e:33:a7:c5:fc:db:
2e:10:9a:55:03:54:a4:db:66:f5:24:52:7a:4a:08:
f9:1c:d1:ad:c2:b7:2f:34:d7:56:67:b4:68:2c:0b:
e4:17:f0:3b:05:d2:8b:0a:41:ea:5f:92:1b:6c:b1:
b9:a9:2b:c2:5e:91:89:5c:a4:54:ce:41:78:96:fe:
42:c1:45:16:f4:21:14:0b:93:58:3b:03:32:34:85:
12:02:7a:f6:2e:50:d1:5c:3f:09:46:dc:77:47:6a:
d1:cc:e8:13:e3:f0:e2:19:1c:2a:ca:4a:28:b5:c7:
a7:64:3d:66:45:19:1f:9a:e3:7b:8e:15:db:f6:52:
68:30:d6:56:fa:10:64:b5:51:9e:9b:cf:08:97:65:
90:cb:0f:48:30:62:0c:93:b5:da:24:d6:d6:bf:9a:
d6:7f:0e:ba:a2:91:a6:dd:ee:08:c4:e2:d0:bf:82:
f6:45:52:71:35:1c:f9:86:61:ab:a3:07:7a:be:b3:
25:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:69:FC:85:29:1C:BB:E4:8F:25:94:F6:02:6C:D4:82:B4:E2:94:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3928e577-c1aa-3a2e-87fe-b27b3839f915.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:6d:c5:c1:f6:f8:78:11:3f:f4:83:fa:aa:cf:9c:be:62:f4:
e3:b4:12:23:4e:70:47:be:88:22:fb:a8:85:bd:e2:10:d0:91:
c1:1b:1a:b9:f2:2f:35:b4:db:92:7c:7e:df:6a:d4:e5:c2:ce:
ca:b4:f3:f2:be:84:83:15:6f:31:94:03:76:10:b4:45:69:86:
f8:78:70:1d:95:79:2e:31:d0:7f:03:84:56:13:4a:e0:41:b4:
2a:6c:f4:a0:35:41:15:27:86:fe:fc:5a:39:0a:fd:10:bf:14:
f0:65:85:d7:3b:4e:14:b3:12:8b:9d:d8:de:86:91:17:fc:f0:
3a:68:b8:19:01:b6:ac:97:07:8a:c9:72:38:35:c1:25:bb:cf:
96:bf:6a:a5:7b:a5:ae:ca:83:9b:ea:3c:38:83:51:13:96:05:
15:04:8a:71:96:ed:93:70:48:9d:02:94:b1:d8:7e:26:f6:43:
40:20:48:db:cd:df:a5:71:09:1c:e5:b9:24:a0:60:c3:1b:02:
a6:54:b0:f5:53:94:68:b9:68:e7:9d:c3:7d:28:2c:68:7f:fc:
3b:cb:1d:59:ee:25:e6:61:c1:b9:62:4a:a5:33:b0:73:47:81:
95:90:52:cc:98:87:05:41:6b:6a:e1:52:21:73:27:52:b5:d8:
71:de:13:33
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdvdOKl+yL1T3S/myAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTAwNTAxMzAxMVoXDTI1MDEwMzAyMzAxMVowLzEtMCsGA1UEAxMk
MmU2NjJiOWEtMjIwZi00NTRjLWFjOWMtNGFhZjZmYjJkMGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshDRCeaBeuV+fsISA3BH4jOLTj4U09dDgIOO
M3BPh5KGbsn8AYVC0YzmUsPnzRWMqpTjbCSvuT4Lp2ogcLSvy6bdcWA+M6fF/Nsu
EJpVA1Sk22b1JFJ6Sgj5HNGtwrcvNNdWZ7RoLAvkF/A7BdKLCkHqX5IbbLG5qSvC
XpGJXKRUzkF4lv5CwUUW9CEUC5NYOwMyNIUSAnr2LlDRXD8JRtx3R2rRzOgT4/Di
GRwqykootcenZD1mRRkfmuN7jhXb9lJoMNZW+hBktVGem88Il2WQyw9IMGIMk7Xa
JNbWv5rWfw66opGm3e4IxOLQv4L2RVJxNRz5hmGrowd6vrMl2QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNtp/IUpHLvkjyWU9gJs1IK04pRPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzkyOGU1NzctYzFhYS0z
YTJlLTg3ZmUtYjI3YjM4MzlmOTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHr
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFdtxcH2+HgRP/SD+qrPnL5i9OO0EiNOcEe+iCL7qIW94hDQkcEb
GrnyLzW025J8ft9q1OXCzsq08/K+hIMVbzGUA3YQtEVphvh4cB2VeS4x0H8DhFYT
SuBBtCps9KA1QRUnhv78WjkK/RC/FPBlhdc7ThSzEoud2N6GkRf88DpouBkBtqyX
B4rJcjg1wSW7z5a/aqV7pa7Kg5vqPDiDUROWBRUEinGW7ZNwSJ0ClLHYfib2Q0Ag
SNvN36VxCRzluSSgYMMbAqZUsPVTlGi5aOedw30oLGh//DvLHVnuJeZhwbliSqUz
sHNHgZWQUsyYhwVBa2rhUiFzJ1K12HHeEzM=
-----END CERTIFICATE-----
Generated at Thu May 8 01:59:41 2025 by rpki-client