Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cc1c7512-954e-351f-bf46-3c398100d052.roa
File: cc1c7512-954e-351f-bf46-3c398100d052.roa (raw, json)
Hash identifier: jAbSLABcEZLpxmb3DJ3f7q5OlvJ5Q+KGkehOqZ1Quyg=
Subject key identifier: 5F:9D:36:90:1C:F7:70:B6:AE:E7:DB:37:84:3C:04:45:FB:F0:AC:AC
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285847B80AA3EFAC18DDE506454340
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cc1c7512-954e-351f-bf46-3c398100d052.roa
Signing time: Thu 31 Oct 2024 01:30:07 +0000
ROA not before: Thu 31 Oct 2024 01:30:07 +0000
ROA not after: Wed 29 Jan 2025 02:30:07 +0000
asID: 51259
IP address blocks: 2001:470:112::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:b8:0a:a3:ef:ac:18:dd:e5:06:45:43:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 31 01:30:07 2024 GMT
Not After : Jan 29 02:30:07 2025 GMT
Subject: CN=b140018f-6e24-4363-842b-e384de344de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:6d:2a:b0:3c:3b:16:01:f1:15:91:c5:27:
63:bd:28:8e:fa:f8:85:6d:8a:84:2e:5c:3c:10:ca:
93:de:22:11:e6:51:6d:4b:43:c1:0b:ca:6b:91:d0:
8c:5f:6d:67:21:e8:bc:7e:da:c7:70:4e:84:49:c7:
74:73:3b:63:fb:0b:83:55:ac:1d:f1:2d:b0:fc:e4:
f7:77:51:54:0d:44:89:4a:10:ac:01:b5:7e:ce:93:
f1:1e:58:00:3f:9a:44:b1:39:19:c7:03:8d:08:45:
50:29:3c:c7:68:d3:1e:89:c2:55:0c:d5:c9:c1:06:
67:09:cf:2f:19:33:b1:26:f5:89:ea:27:07:da:c0:
db:33:fb:ec:74:94:28:83:29:fe:0a:73:38:25:50:
6f:4d:86:55:de:70:c1:68:01:ea:08:49:de:d5:9f:
3c:52:be:14:68:f8:64:f7:2e:83:65:ee:8d:50:40:
60:e1:9b:43:ec:0a:79:38:aa:32:83:53:cc:9e:02:
eb:e1:94:e7:54:11:58:cd:4d:11:c1:54:c8:05:da:
87:53:85:0a:3a:16:d3:6f:b7:16:41:40:5f:34:dc:
2b:0a:88:56:ae:60:ac:6c:25:d9:1b:ab:13:c2:c1:
15:d2:3b:7b:45:0d:ad:95:70:6e:da:e6:d0:bc:ba:
40:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9D:36:90:1C:F7:70:B6:AE:E7:DB:37:84:3C:04:45:FB:F0:AC:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cc1c7512-954e-351f-bf46-3c398100d052.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:112::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:b3:18:87:e2:09:aa:d5:4b:4f:f7:c8:c6:a0:f8:9a:c2:ac:
58:fe:a8:bf:ae:96:d7:d1:9a:10:63:cc:1a:9e:af:92:a8:f6:
cb:9e:f4:9b:8d:2d:76:77:04:90:63:d0:0b:3b:9d:f7:8a:a1:
b4:1e:1f:1f:00:33:3f:2c:14:e1:13:d2:ca:8c:9f:db:d3:d0:
39:52:90:04:f9:c8:ea:11:04:b5:88:6a:26:68:dc:20:9c:1e:
0b:26:f8:9f:13:c8:54:b2:bc:62:55:10:c1:94:5d:c7:2e:3e:
6e:77:dd:79:b0:5a:b1:88:75:1f:a8:94:1f:bb:b8:ff:39:ff:
64:6d:91:f1:b2:38:13:49:3e:1f:d9:7b:06:ab:ef:1c:d0:e6:
c6:f1:09:55:6a:ef:b1:2a:8e:d5:35:4b:95:39:c1:0e:12:b6:
e4:22:ee:26:5d:e4:45:5d:16:67:dc:85:82:0f:1e:2c:7d:d4:
92:6a:99:2c:05:45:9b:55:84:5d:65:ad:70:3e:97:79:65:f3:
9e:48:84:a8:22:db:26:ae:71:79:6d:1d:0d:7f:2e:f1:16:13:
07:82:88:da:2d:f6:6f:7b:e3:31:ca:2c:cf:49:1e:e0:39:7e:
22:b6:6b:19:1e:e5:d7:29:62:6c:7d:e7:ab:fd:37:40:ee:42:
53:ec:9d:f5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe4CqPvrBjd5QZFQ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTAzMTAxMzAwN1oXDTI1MDEyOTAyMzAwN1owLzEtMCsGA1UEAxMk
YjE0MDAxOGYtNmUyNC00MzYzLTg0MmItZTM4NGRlMzQ0ZGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovdtKrA8OxYB8RWRxSdjvSiO+viFbYqELlw8
EMqT3iIR5lFtS0PBC8prkdCMX21nIei8ftrHcE6EScd0cztj+wuDVawd8S2w/OT3
d1FUDUSJShCsAbV+zpPxHlgAP5pEsTkZxwONCEVQKTzHaNMeicJVDNXJwQZnCc8v
GTOxJvWJ6icH2sDbM/vsdJQogyn+CnM4JVBvTYZV3nDBaAHqCEne1Z88Ur4UaPhk
9y6DZe6NUEBg4ZtD7Ap5OKoyg1PMngLr4ZTnVBFYzU0RwVTIBdqHU4UKOhbTb7cW
QUBfNNwrCohWrmCsbCXZG6sTwsEV0jt7RQ2tlXBu2ubQvLpAjwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF+dNpAc93C2rufbN4Q8BEX78KysMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2MxYzc1MTItOTU0ZS0z
NTFmLWJmNDYtM2MzOTgxMDBkMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAES
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH6zGIfiCarVS0/3yMag+JrCrFj+qL+ultfRmhBjzBqer5Ko9sue
9JuNLXZ3BJBj0As7nfeKobQeHx8AMz8sFOET0sqMn9vT0DlSkAT5yOoRBLWIaiZo
3CCcHgsm+J8TyFSyvGJVEMGUXccuPm533XmwWrGIdR+olB+7uP85/2RtkfGyOBNJ
Ph/Zewar7xzQ5sbxCVVq77EqjtU1S5U5wQ4StuQi7iZd5EVdFmfchYIPHix91JJq
mSwFRZtVhF1lrXA+l3ll855IhKgi2yaucXltHQ1/LvEWEweCiNot9m974zHKLM9J
HuA5fiK2axke5dcpYmx956v9N0DuQlPsnfU=
-----END CERTIFICATE-----
Generated at Wed May 7 19:05:39 2025 by rpki-client