Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a6248321-7ed2-368f-8926-2ac28a5c62de.roa
File: a6248321-7ed2-368f-8926-2ac28a5c62de.roa (raw, json)
Hash identifier: YuWYKAH/JqT25lnM1lp/y/smgm7xg3u0Xm7wAzSujXc=
Subject key identifier: 4D:80:BD:B5:76:77:F9:1F:B9:8B:05:A4:03:C2:D6:84:FF:06:3D:EC
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858460B742195E67B36DBC4F788E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a6248321-7ed2-368f-8926-2ac28a5c62de.roa
Signing time: Thu 30 May 2024 13:00:34 +0000
ROA not before: Thu 30 May 2024 13:00:34 +0000
ROA not after: Wed 28 Aug 2024 13:00:34 +0000
asID: 133905
IP address blocks: 2001:470:25a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:0b:74:21:95:e6:7b:36:db:c4:f7:88:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 30 13:00:34 2024 GMT
Not After : Aug 28 13:00:34 2024 GMT
Subject: CN=247c9ee9-4f64-4a7a-9b8a-b19020c364ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:28:b9:e7:33:37:1b:73:96:d3:d9:97:2a:c7:
b9:ad:5b:12:91:4f:36:99:8a:4a:27:51:6b:9f:c0:
64:ef:7e:fb:9a:61:a1:a8:78:46:6c:16:7a:c0:d0:
d5:c1:34:eb:36:13:a2:8e:83:d1:65:fe:f1:1a:e0:
49:d3:f1:e7:6c:c8:5b:c5:42:ed:44:ca:72:20:6f:
46:3e:e2:48:b6:4a:38:97:3d:4f:32:81:29:a9:d4:
2a:75:01:7f:66:b4:a6:d4:77:8a:f6:25:c4:51:ac:
31:26:db:9b:60:3c:a1:e1:9f:54:f6:1f:3d:a6:3f:
de:40:a2:9f:7d:08:80:da:66:13:87:46:fa:b5:40:
ce:1b:f3:bc:f6:2c:7d:af:54:a3:82:ec:95:3c:51:
2c:d2:87:99:56:02:5a:52:ed:2c:1a:a7:ec:83:ac:
1c:56:d4:83:cc:11:f6:6c:e0:66:46:e7:be:4c:b8:
c0:ce:83:fe:f2:ec:e2:58:a2:30:1b:f1:7d:4f:b1:
5d:9d:7b:af:da:73:17:4f:e7:26:4e:50:76:7d:d1:
eb:fe:af:63:bc:f6:ad:08:99:bb:98:34:07:75:a3:
2a:c6:85:ce:95:92:14:0c:47:98:5b:ab:b5:57:0b:
c0:84:03:17:21:ab:e7:c7:9a:8d:65:29:b2:be:1f:
b3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:80:BD:B5:76:77:F9:1F:B9:8B:05:A4:03:C2:D6:84:FF:06:3D:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a6248321-7ed2-368f-8926-2ac28a5c62de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:25a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:d9:69:8d:9e:99:37:96:e3:ba:e0:b3:ea:6b:4e:a9:c0:c7:
f2:df:d1:41:22:03:56:4d:07:e1:d6:99:72:22:31:84:e4:f4:
9b:08:46:3d:36:e8:c7:fb:aa:36:4b:83:2b:48:9d:df:46:62:
76:7c:f1:1e:e0:d2:af:1e:3c:f9:74:4b:17:90:05:b1:cb:d1:
a7:37:f3:0b:ad:af:06:c4:83:96:f4:0b:5d:e8:96:9c:2f:1b:
1f:42:59:eb:42:d6:33:b0:a7:97:df:4f:e5:ba:8f:0c:c1:24:
92:ad:02:77:17:aa:0a:a1:54:58:44:ad:e1:05:e2:cf:fd:03:
1c:93:be:a2:e6:13:98:76:e9:6d:5c:6d:b3:18:08:32:03:f8:
ac:55:80:bd:de:27:79:25:ca:86:02:95:c8:0b:95:5e:1d:40:
47:f7:34:22:1f:41:a2:12:55:3a:42:59:e3:95:e0:57:e5:b2:
79:35:d4:68:38:82:c7:24:50:0a:d4:91:d5:37:1b:72:91:10:
af:b6:bf:93:d4:c5:a5:8c:2d:85:7a:e8:36:c0:8a:9f:d7:95:
b0:a1:cb:be:55:fa:71:75:ed:70:fa:00:45:2f:b2:0e:06:3a:
bc:4a:bd:e8:7c:93:e9:1e:aa:30:cc:ae:d0:46:a8:a5:51:75:
56:eb:e0:e6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYLdCGV5ns228T3iOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDUzMDEzMDAzNFoXDTI0MDgyODEzMDAzNFowLzEtMCsGA1UEAxMk
MjQ3YzllZTktNGY2NC00YTdhLTliOGEtYjE5MDIwYzM2NGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSi55zM3G3OW09mXKse5rVsSkU82mYpKJ1Fr
n8Bk7377mmGhqHhGbBZ6wNDVwTTrNhOijoPRZf7xGuBJ0/HnbMhbxULtRMpyIG9G
PuJItko4lz1PMoEpqdQqdQF/ZrSm1HeK9iXEUawxJtubYDyh4Z9U9h89pj/eQKKf
fQiA2mYTh0b6tUDOG/O89ix9r1SjguyVPFEs0oeZVgJaUu0sGqfsg6wcVtSDzBH2
bOBmRue+TLjAzoP+8uziWKIwG/F9T7FdnXuv2nMXT+cmTlB2fdHr/q9jvPatCJm7
mDQHdaMqxoXOlZIUDEeYW6u1VwvAhAMXIavnx5qNZSmyvh+zMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE2AvbV2d/kfuYsFpAPC1oT/Bj3sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTYyNDgzMjEtN2VkMi0z
NjhmLTg5MjYtMmFjMjhhNWM2MmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG/ZaY2emTeW47rgs+prTqnAx/Lf0UEiA1ZNB+HWmXIiMYTk9JsI
Rj026Mf7qjZLgytInd9GYnZ88R7g0q8ePPl0SxeQBbHL0ac38wutrwbEg5b0C13o
lpwvGx9CWetC1jOwp5ffT+W6jwzBJJKtAncXqgqhVFhEreEF4s/9AxyTvqLmE5h2
6W1cbbMYCDID+KxVgL3eJ3klyoYClcgLlV4dQEf3NCIfQaISVTpCWeOV4Fflsnk1
1Gg4gsckUArUkdU3G3KREK+2v5PUxaWMLYV66DbAip/XlbChy75V+nF17XD6AEUv
sg4GOrxKveh8k+keqjDMrtBGqKVRdVbr4OY=
-----END CERTIFICATE-----
Generated at Thu May 8 07:15:22 2025 by rpki-client