Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/6bdd320e-bb51-38d5-8f03-7c16390a1ead.roa
File: 6bdd320e-bb51-38d5-8f03-7c16390a1ead.roa (raw, json)
Hash identifier: EK7QFye+XnOIBqH0QgJxBfrMgp5oNXKsPzOdAmNBK0E=
Subject key identifier: 6E:53:72:A0:42:32:00:69:4C:4A:68:78:71:2D:62:79:7B:80:E8:39
Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial: 010D0C9F43285843EC93987570C58CFB44B3C4C0
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/6bdd320e-bb51-38d5-8f03-7c16390a1ead.roa
Signing time: Sat 18 Nov 2023 02:00:18 +0000
ROA not before: Sat 18 Nov 2023 02:00:18 +0000
ROA not after: Fri 16 Feb 2024 02:00:18 +0000
asID: 16509
IP address blocks: 2606:9fc0:9000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:ec:93:98:75:70:c5:8c:fb:44:b3:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Validity
Not Before: Nov 18 02:00:18 2023 GMT
Not After : Feb 16 02:00:18 2024 GMT
Subject: CN=c2724bca-0a7d-42b4-8a16-7865987b8eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:47:da:1e:09:0e:36:76:bc:05:81:e4:a4:
00:7a:98:b9:17:60:d9:24:fd:9f:3f:f2:71:54:58:
0b:e6:be:9b:4c:65:44:5e:2a:58:ee:a2:40:69:29:
3b:e4:3c:63:61:b0:5a:cf:86:c1:7d:90:46:3f:e6:
bb:04:ed:16:c8:85:e9:80:57:80:20:36:6b:83:ef:
f8:c8:f5:71:6a:a4:f2:fa:75:bf:53:18:78:ad:af:
15:64:d2:83:88:6e:36:b2:8e:13:1c:3d:ae:78:3f:
f5:a3:17:32:7b:2d:1e:79:de:2f:6f:ae:e0:03:11:
4b:f4:ac:90:01:37:24:b3:79:e4:0a:35:2a:a0:29:
94:3c:91:8e:d6:08:ce:d4:11:ac:e3:c9:d9:37:18:
cc:51:fa:60:95:df:7b:28:3a:ef:31:86:1c:b2:e7:
ce:ba:18:68:fd:de:93:2b:39:5d:91:05:0b:fc:76:
37:f8:cd:ce:60:04:41:2c:ae:9f:53:32:84:0e:da:
59:95:fa:b6:2b:82:70:bc:30:53:7d:14:42:ba:a7:
97:f1:58:97:18:f6:a7:93:fd:a4:6e:c7:61:b7:bd:
b1:b2:2a:b0:96:04:20:cd:79:e5:bd:78:53:ea:75:
f1:82:7f:7d:17:a7:8f:94:ee:9e:c6:a1:13:67:bc:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:53:72:A0:42:32:00:69:4C:4A:68:78:71:2D:62:79:7B:80:E8:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/6bdd320e-bb51-38d5-8f03-7c16390a1ead.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
X509v3 Authority Key Identifier:
keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:9fc0:9000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:d2:ad:db:9d:ef:73:c7:26:d5:83:c7:2f:2b:be:da:a2:33:
5b:bb:d1:47:fa:0c:ea:ef:5c:24:4f:e2:c0:e8:63:e4:28:14:
7a:50:40:4a:f1:b5:38:62:94:73:88:98:5c:ae:6c:7f:d3:06:
d5:17:76:81:74:62:bd:d3:3d:c0:4b:81:f6:1b:a2:20:b1:1c:
36:d6:7b:83:31:16:1f:4c:86:ac:4e:f3:d6:60:1b:9d:78:4b:
fc:4f:37:2e:6f:3b:c9:a0:6f:64:2e:fe:51:42:45:fc:af:bd:
59:7f:47:22:7a:ed:3b:ef:39:d1:2e:8c:94:4f:74:43:9f:fc:
68:cc:36:6f:16:ca:c0:4e:b7:d2:4d:f8:47:60:28:e9:04:87:
40:0c:e5:42:9d:d7:a2:f1:14:c2:c0:1f:0a:84:d6:31:b8:83:
0e:49:3a:ec:18:b0:13:9a:f3:0c:8d:7c:e0:69:70:cf:e4:ce:
43:33:04:9a:0e:a8:2d:e7:24:0b:76:5f:74:82:b2:38:ce:2d:
23:04:2e:b2:a8:51:c1:03:6e:f7:58:26:c6:67:8f:c5:e6:f0:
52:8a:c4:cf:db:30:a9:8f:38:ca:b3:c6:dc:3c:c7:e2:3a:e4:
30:10:84:5c:21:d9:6d:55:a5:b7:cf:e3:72:37:fa:39:c7:ef:
91:d0:06:b2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEPsk5h1cMWM+0SzxMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx
YmUwMB4XDTIzMTExODAyMDAxOFoXDTI0MDIxNjAyMDAxOFowLzEtMCsGA1UEAxMk
YzI3MjRiY2EtMGE3ZC00MmI0LThhMTYtNzg2NTk4N2I4ZWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJJH2h4JDjZ2vAWB5KQAepi5F2DZJP2fP/Jx
VFgL5r6bTGVEXipY7qJAaSk75DxjYbBaz4bBfZBGP+a7BO0WyIXpgFeAIDZrg+/4
yPVxaqTy+nW/Uxh4ra8VZNKDiG42so4THD2ueD/1oxcyey0eed4vb67gAxFL9KyQ
ATcks3nkCjUqoCmUPJGO1gjO1BGs48nZNxjMUfpgld97KDrvMYYcsufOuhho/d6T
KzldkQUL/HY3+M3OYARBLK6fUzKEDtpZlfq2K4JwvDBTfRRCuqeX8ViXGPank/2k
bsdht72xsiqwlgQgzXnlvXhT6nXxgn99F6ePlO6exqETZ7zSLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG5TcqBCMgBpTEpoeHEtYnl7gOg5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4
NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvNmJkZDMyMGUtYmI1MS0z
OGQ1LThmMDMtN2MxNjM5MGExZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz
ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx
MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1
OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgafwJAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKjSrdud73PHJtWDxy8rvtqiM1u70Uf6DOrvXCRP4sDoY+QoFHpQ
QErxtThilHOImFyubH/TBtUXdoF0Yr3TPcBLgfYboiCxHDbWe4MxFh9MhqxO89Zg
G514S/xPNy5vO8mgb2Qu/lFCRfyvvVl/RyJ67TvvOdEujJRPdEOf/GjMNm8WysBO
t9JN+EdgKOkEh0AM5UKd16LxFMLAHwqE1jG4gw5JOuwYsBOa8wyNfOBpcM/kzkMz
BJoOqC3nJAt2X3SCsjjOLSMELrKoUcEDbvdYJsZnj8Xm8FKKxM/bMKmPOMqzxtw8
x+I65DAQhFwh2W1VpbfP43I3+jnH75HQBrI=
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:07 2024 by rpki-client on console.sobornost.net