Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2da9bcb-9138-3cbe-affb-e8ede2fce535.roa
File: a2da9bcb-9138-3cbe-affb-e8ede2fce535.roa (raw, json)
Hash identifier: 7taJfUaMituG10VBHuwmXZQ1gJUgiy9NHjzDMhzYBFw=
Subject key identifier: 51:40:BA:4B:C0:D9:B9:91:3E:EE:E4:F0:AC:D3:FC:85:D3:3C:6C:A8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846C7F3EBD0CA7C90C1EA11D7A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2da9bcb-9138-3cbe-affb-e8ede2fce535.roa
Signing time: Tue 06 Aug 2024 01:30:21 +0000
ROA not before: Tue 06 Aug 2024 01:30:21 +0000
ROA not after: Mon 04 Nov 2024 02:30:21 +0000
asID: 267522
IP address blocks: 2001:470:2ef::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c7:f3:eb:d0:ca:7c:90:c1:ea:11:d7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 6 01:30:21 2024 GMT
Not After : Nov 4 02:30:21 2024 GMT
Subject: CN=8ef34e87-fb7f-4e5b-8953-307dc25c9338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2a:a0:f3:b4:18:58:ae:e0:76:4a:28:c6:26:
b8:61:77:50:07:3f:dc:e7:97:61:c7:de:b8:0c:94:
88:4e:4f:c7:bb:3b:13:e7:f7:dd:9d:4b:da:76:fc:
7f:3c:1e:3f:e0:c7:17:c1:97:e9:76:a9:d8:d3:50:
87:fb:20:55:5f:45:7e:74:c8:7f:fa:31:7b:5f:6b:
ed:0a:05:a4:5c:03:8f:0f:aa:ae:7a:6f:99:bc:88:
02:ab:70:86:9f:ae:38:14:11:1d:75:03:c1:f0:d8:
e9:2f:ab:0d:52:23:06:c1:31:2e:b8:cb:61:02:15:
34:13:b7:d4:5c:3b:68:c6:cb:6c:4b:e7:a1:8d:91:
3b:47:b6:66:68:d2:1b:9a:0e:ed:d7:dd:ed:b3:55:
00:10:8b:08:64:00:a8:9f:bd:c1:a5:29:2c:30:63:
a1:d4:44:0b:7c:03:a2:e5:68:f1:29:40:08:52:c5:
37:fa:02:b3:a8:fb:7e:aa:ca:24:20:3c:4c:ae:a3:
73:bf:6b:f5:6b:ca:1a:ff:7e:c2:05:a6:d4:3a:ef:
21:50:51:05:a1:1c:06:d4:18:bb:a1:ee:69:f7:4c:
eb:5d:0a:6d:40:5d:6a:73:2f:f1:ba:24:66:15:41:
12:f9:82:f0:e6:fa:a6:24:52:1c:85:1e:7b:73:de:
cf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:40:BA:4B:C0:D9:B9:91:3E:EE:E4:F0:AC:D3:FC:85:D3:3C:6C:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2da9bcb-9138-3cbe-affb-e8ede2fce535.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2ef::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:41:e7:55:48:a4:0b:d9:df:31:b4:5d:2f:ce:0b:95:d0:de:
bd:8d:4f:ee:28:fa:6e:82:3f:fe:93:e7:c4:c9:e0:bb:e5:6a:
cb:11:2e:50:46:90:43:04:17:42:f7:be:61:6a:75:39:3c:00:
f5:ee:04:e7:86:50:bb:a0:83:28:3f:bd:0b:97:d1:90:ef:1a:
6b:93:21:3c:cb:a0:5b:1d:26:c3:b0:f5:57:74:a4:63:7c:95:
cb:15:1a:4c:21:b8:c2:31:c6:d4:f5:e0:57:af:fb:e2:aa:22:
f1:c7:9b:cd:96:a4:d4:52:1b:e4:41:14:0c:fb:0e:1a:12:31:
2a:c9:be:e8:d0:7c:ee:a6:14:fa:0e:d4:33:a2:60:12:ec:f2:
6a:16:dc:2e:48:27:b1:6b:0d:06:6b:2a:d4:83:2e:83:21:3e:
3d:dd:84:ae:42:92:db:bb:96:4b:6a:d8:8a:e5:21:b5:5a:96:
4a:c0:5f:98:f3:c6:02:9b:4b:6c:71:c3:36:0e:19:45:99:8b:
d9:61:77:a8:8f:fa:dc:d7:75:89:ec:a6:4f:f1:d9:26:08:01:
e5:76:ce:f4:a8:a6:21:fa:6d:51:73:bb:b5:99:91:13:30:b6:
6b:ce:e1:d3:7d:d9:26:27:a6:06:f7:a8:9e:11:d0:39:32:ca:
b6:21:a6:0c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEbH8+vQynyQweoR16AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDgwNjAxMzAyMVoXDTI0MTEwNDAyMzAyMVowLzEtMCsGA1UEAxMk
OGVmMzRlODctZmI3Zi00ZTViLTg5NTMtMzA3ZGMyNWM5MzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyqg87QYWK7gdkooxia4YXdQBz/c55dhx964
DJSITk/HuzsT5/fdnUvadvx/PB4/4McXwZfpdqnY01CH+yBVX0V+dMh/+jF7X2vt
CgWkXAOPD6quem+ZvIgCq3CGn644FBEddQPB8NjpL6sNUiMGwTEuuMthAhU0E7fU
XDtoxstsS+ehjZE7R7ZmaNIbmg7t193ts1UAEIsIZACon73BpSksMGOh1EQLfAOi
5WjxKUAIUsU3+gKzqPt+qsokIDxMrqNzv2v1a8oa/37CBabUOu8hUFEFoRwG1Bi7
oe5p90zrXQptQF1qcy/xuiRmFUES+YLw5vqmJFIchR57c97PHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFFAukvA2bmRPu7k8KzT/IXTPGyoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTJkYTliY2ItOTEzOC0z
Y2JlLWFmZmItZThlZGUyZmNlNTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALv
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGlB51VIpAvZ3zG0XS/OC5XQ3r2NT+4o+m6CP/6T58TJ4LvlassR
LlBGkEMEF0L3vmFqdTk8APXuBOeGULuggyg/vQuX0ZDvGmuTITzLoFsdJsOw9Vd0
pGN8lcsVGkwhuMIxxtT14Fev++KqIvHHm82WpNRSG+RBFAz7DhoSMSrJvujQfO6m
FPoO1DOiYBLs8moW3C5IJ7FrDQZrKtSDLoMhPj3dhK5Cktu7lktq2IrlIbValkrA
X5jzxgKbS2xxwzYOGUWZi9lhd6iP+tzXdYnspk/x2SYIAeV2zvSopiH6bVFzu7WZ
kRMwtmvO4dN92SYnpgb3qJ4R0DkyyrYhpgw=
-----END CERTIFICATE-----
Generated at Wed May 7 16:06:06 2025 by rpki-client