Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/db692dab-ee80-3a17-8b29-e2d7e88f4123.roa
File: db692dab-ee80-3a17-8b29-e2d7e88f4123.roa (raw, json)
Hash identifier: nayFGOc/gHxq1qd13od7mJPbQeCP4FjnYXkYC2SNSuY=
Subject key identifier: AC:AA:50:B2:AC:17:70:EC:B1:B3:A9:3A:53:DB:9F:3F:2A:F2:39:BB
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846C7F3F6E1D504E5601A3C6480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/db692dab-ee80-3a17-8b29-e2d7e88f4123.roa
Signing time: Tue 06 Aug 2024 01:30:26 +0000
ROA not before: Tue 06 Aug 2024 01:30:26 +0000
ROA not after: Mon 04 Nov 2024 02:30:26 +0000
asID: 50576
IP address blocks: 2001:470:353::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c7:f3:f6:e1:d5:04:e5:60:1a:3c:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 6 01:30:26 2024 GMT
Not After : Nov 4 02:30:26 2024 GMT
Subject: CN=92fd10cd-35cf-42bf-9ea0-d046b779f7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5d:65:65:d0:6d:a8:d7:b0:61:9f:0c:01:11:
b9:b5:28:11:44:b6:e4:b1:66:b2:34:35:8e:4f:95:
dc:6b:27:27:89:b9:7c:31:34:a6:7d:09:de:b4:fc:
0b:98:0e:74:0b:f4:9f:33:76:e1:81:c7:c9:f5:34:
72:b8:b2:67:08:ee:a0:e0:1e:f8:f3:15:15:27:41:
67:71:0b:39:d0:83:8a:73:07:9c:bb:55:f3:00:b3:
cd:eb:3e:0c:40:70:1f:9e:07:f9:42:8e:9d:a6:a9:
73:19:2c:cc:44:aa:99:b7:38:c3:98:03:1d:97:99:
aa:8e:51:4f:ec:07:92:1d:20:17:cd:7c:91:8f:62:
83:17:f3:f1:d2:6e:51:ef:05:cf:2d:f5:7a:e6:e7:
ba:d9:70:4e:c2:82:7e:59:7c:c2:fe:6b:43:14:d3:
bc:7b:4d:63:22:69:01:b2:1f:f1:60:bc:47:66:77:
fc:46:ea:75:d2:a5:c5:9e:46:c6:12:58:00:14:cd:
30:c3:95:ae:3b:5b:b4:00:ee:d3:d5:7e:50:45:2a:
c8:7f:ef:6c:2c:82:83:f8:a9:00:69:48:ce:1a:fc:
34:8f:77:cc:66:43:3d:9b:0f:f0:0c:8d:0d:09:3b:
4c:d2:97:63:f9:95:5b:ea:35:03:0a:b2:da:e5:98:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AA:50:B2:AC:17:70:EC:B1:B3:A9:3A:53:DB:9F:3F:2A:F2:39:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/db692dab-ee80-3a17-8b29-e2d7e88f4123.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:353::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:ea:6b:09:b4:74:13:3c:cf:dc:5e:ea:19:1e:48:90:33:8c:
77:30:ec:2b:5f:8a:7d:a6:3f:40:b2:aa:c2:d1:b0:45:d7:9c:
47:07:36:dd:f2:94:b0:97:c7:bb:cb:f6:0e:1e:2b:d5:a9:60:
c5:f2:0e:35:7f:1a:90:89:51:2c:f1:de:fe:e6:7d:df:66:c7:
05:32:32:44:68:93:12:b8:60:35:6b:e3:62:0d:d2:b7:65:43:
f4:af:29:81:29:50:e0:10:23:89:c6:2d:a7:99:c0:ea:ca:80:
4b:cc:10:87:6d:67:7f:0d:ba:a0:01:85:5d:7a:ed:0a:28:81:
f4:d2:41:21:fc:ff:1f:7a:b4:dc:bb:98:f5:ff:55:d9:26:a8:
9f:50:02:27:a2:d9:29:db:38:c6:db:cd:7d:db:8a:e3:ab:e6:
ab:12:4d:89:68:f8:7a:fa:88:a9:cc:a3:ce:62:43:90:16:0e:
ff:4d:54:56:b2:d2:c1:db:31:0b:40:5f:55:15:7c:74:a8:72:
34:8c:d0:94:4b:34:f8:8a:59:3d:eb:db:8d:21:52:80:c5:08:
a6:f0:a9:cf:26:bc:49:b1:f3:11:a2:98:0f:70:13:e2:6e:7d:
96:ef:da:cc:99:f9:36:eb:48:c3:ab:7f:02:c8:23:c4:73:d7:
a2:d0:5e:3f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEbH8/bh1QTlYBo8ZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDgwNjAxMzAyNloXDTI0MTEwNDAyMzAyNlowLzEtMCsGA1UEAxMk
OTJmZDEwY2QtMzVjZi00MmJmLTllYTAtZDA0NmI3NzlmN2E1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA411lZdBtqNewYZ8MARG5tSgRRLbksWayNDWO
T5Xcaycnibl8MTSmfQnetPwLmA50C/SfM3bhgcfJ9TRyuLJnCO6g4B748xUVJ0Fn
cQs50IOKcwecu1XzALPN6z4MQHAfngf5Qo6dpqlzGSzMRKqZtzjDmAMdl5mqjlFP
7AeSHSAXzXyRj2KDF/Px0m5R7wXPLfV65ue62XBOwoJ+WXzC/mtDFNO8e01jImkB
sh/xYLxHZnf8Rup10qXFnkbGElgAFM0ww5WuO1u0AO7T1X5QRSrIf+9sLIKD+KkA
aUjOGvw0j3fMZkM9mw/wDI0NCTtM0pdj+ZVb6jUDCrLa5Zj6LQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKyqULKsF3DssbOpOlPbnz8q8jm7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGI2OTJkYWItZWU4MC0z
YTE3LThiMjktZTJkN2U4OGY0MTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKXqawm0dBM8z9xe6hkeSJAzjHcw7Ctfin2mP0CyqsLRsEXXnEcH
Nt3ylLCXx7vL9g4eK9WpYMXyDjV/GpCJUSzx3v7mfd9mxwUyMkRokxK4YDVr42IN
0rdlQ/SvKYEpUOAQI4nGLaeZwOrKgEvMEIdtZ38NuqABhV167QoogfTSQSH8/x96
tNy7mPX/VdkmqJ9QAiei2SnbOMbbzX3biuOr5qsSTYlo+Hr6iKnMo85iQ5AWDv9N
VFay0sHbMQtAX1UVfHSocjSM0JRLNPiKWT3r240hUoDFCKbwqc8mvEmx8xGimA9w
E+JufZbv2syZ+TbrSMOrfwLII8Rz16LQXj8=
-----END CERTIFICATE-----
Generated at Thu May 8 08:57:43 2025 by rpki-client