Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/882838c4-51c0-3dd2-9845-3dcc55379edc.roa
File: 882838c4-51c0-3dd2-9845-3dcc55379edc.roa (raw, json)
Hash identifier: LhmDjpZNbLVU7qacQw8wAiWxfzgTwozo6Aoxw1285gY=
Subject key identifier: EB:BB:2D:5E:1A:F0:02:71:1B:E9:DC:4B:83:38:D9:25:64:FB:16:44
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858460E3ECE2EAAE52A907D89ED40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/882838c4-51c0-3dd2-9845-3dcc55379edc.roa
Signing time: Fri 31 May 2024 13:00:36 +0000
ROA not before: Fri 31 May 2024 13:00:36 +0000
ROA not after: Thu 29 Aug 2024 13:00:36 +0000
asID: 54133
IP address blocks: 2001:470:1ce::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:0e:3e:ce:2e:aa:e5:2a:90:7d:89:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 31 13:00:36 2024 GMT
Not After : Aug 29 13:00:36 2024 GMT
Subject: CN=d4efce70-3263-41c8-b0fa-1249bc2660f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:5b:8d:a0:dc:19:b6:6d:70:22:d2:25:81:
63:d2:ac:06:c8:10:a1:f5:11:da:02:47:49:3d:20:
03:c5:56:38:84:66:4a:7a:10:af:64:3f:c4:22:61:
2b:0c:2c:03:26:8f:2a:26:af:3a:9b:d5:c5:96:f9:
77:ae:7c:56:49:9d:7a:3c:e2:1c:cf:d5:d2:71:a9:
f4:f7:5d:7b:74:a1:21:56:1f:d3:67:48:34:21:be:
95:37:0c:6c:74:e5:e5:83:a5:84:6c:4f:ba:84:0f:
1d:22:90:25:83:8a:e1:d4:06:8e:c8:7c:40:91:bc:
3f:26:13:61:52:90:dc:62:7e:96:a6:77:3b:8c:85:
fc:2f:6e:21:de:2b:be:6f:87:7e:29:bf:83:2a:53:
b0:16:6c:98:9c:9e:85:84:af:dd:54:a6:53:f1:82:
3f:f9:e1:e5:cb:81:b8:01:6d:00:49:89:97:37:9d:
68:1e:45:4a:36:ec:b6:6c:52:1c:4a:40:64:00:73:
13:7b:9e:ed:51:2a:b4:c5:dd:25:87:07:c5:d9:d7:
c2:95:c9:ed:dc:c1:b6:7f:3c:ea:7d:ea:fd:67:88:
16:2f:5d:96:ec:b8:c8:9a:4a:51:42:49:78:55:00:
e5:7c:57:c2:0f:9a:a6:ec:f9:91:0c:67:6f:8e:1a:
af:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BB:2D:5E:1A:F0:02:71:1B:E9:DC:4B:83:38:D9:25:64:FB:16:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/882838c4-51c0-3dd2-9845-3dcc55379edc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1ce::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:dc:63:4b:f5:17:fe:79:6e:37:92:10:7d:12:80:df:5e:e9:
c3:de:14:26:33:b1:6b:11:54:5b:38:ca:63:b8:c3:96:7c:a5:
3b:82:54:c8:4a:9b:2a:19:82:94:88:d6:57:20:49:d9:e3:89:
4e:9b:5d:40:72:96:a6:89:b6:05:0e:57:c3:dd:aa:7b:82:e4:
cc:82:a5:ce:50:83:2b:41:d9:e0:84:72:8c:09:18:45:b9:e7:
f1:c7:52:18:08:a6:6a:1a:f6:86:50:1e:b9:7a:29:0b:91:23:
75:4a:79:ea:d9:e9:14:2a:c7:3e:7d:14:b9:fe:9a:2c:16:e6:
bb:0a:15:94:42:9d:82:a0:21:1e:18:05:08:3f:3b:06:c1:71:
ee:f7:ee:d1:a8:91:84:f0:6b:6b:07:91:78:50:aa:e4:88:16:
44:1a:ce:59:bd:b0:83:c0:3f:66:ed:9a:d7:69:8e:f5:43:db:
9c:92:ee:f4:cd:b1:56:d2:ad:90:5a:d9:34:22:ba:da:ed:ee:
de:c2:c2:45:44:f5:12:9a:d9:0f:ea:03:92:54:5a:79:e9:58:
b9:cd:77:47:2d:79:e6:c5:99:63:c3:9b:70:e5:b9:24:2b:97:
77:f8:68:b6:fc:db:71:f3:38:3a:b6:89:27:e0:61:2d:2b:e0:
63:6b:9c:aa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYOPs4uquUqkH2J7UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDUzMTEzMDAzNloXDTI0MDgyOTEzMDAzNlowLzEtMCsGA1UEAxMk
ZDRlZmNlNzAtMzI2My00MWM4LWIwZmEtMTI0OWJjMjY2MGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw9bjaDcGbZtcCLSJYFj0qwGyBCh9RHaAkdJ
PSADxVY4hGZKehCvZD/EImErDCwDJo8qJq86m9XFlvl3rnxWSZ16POIcz9XScan0
9117dKEhVh/TZ0g0Ib6VNwxsdOXlg6WEbE+6hA8dIpAlg4rh1AaOyHxAkbw/JhNh
UpDcYn6Wpnc7jIX8L24h3iu+b4d+Kb+DKlOwFmyYnJ6FhK/dVKZT8YI/+eHly4G4
AW0ASYmXN51oHkVKNuy2bFIcSkBkAHMTe57tUSq0xd0lhwfF2dfClcnt3MG2fzzq
fer9Z4gWL12W7LjImkpRQkl4VQDlfFfCD5qm7PmRDGdvjhqvcwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOu7LV4a8AJxG+ncS4M42SVk+xZEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODgyODM4YzQtNTFjMC0z
ZGQyLTk4NDUtM2RjYzU1Mzc5ZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADfcY0v1F/55bjeSEH0SgN9e6cPeFCYzsWsRVFs4ymO4w5Z8pTuC
VMhKmyoZgpSI1lcgSdnjiU6bXUBylqaJtgUOV8PdqnuC5MyCpc5QgytB2eCEcowJ
GEW55/HHUhgIpmoa9oZQHrl6KQuRI3VKeerZ6RQqxz59FLn+miwW5rsKFZRCnYKg
IR4YBQg/OwbBce737tGokYTwa2sHkXhQquSIFkQazlm9sIPAP2btmtdpjvVD25yS
7vTNsVbSrZBa2TQiutrt7t7CwkVE9RKa2Q/qA5JUWnnpWLnNd0cteebFmWPDm3Dl
uSQrl3f4aLb823HzODq2iSfgYS0r4GNrnKo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:24:22 2025 by rpki-client