Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/02792fc4-7a12-3a20-b071-7eaff8006be7.roa
File: 02792fc4-7a12-3a20-b071-7eaff8006be7.roa (raw, json)
Hash identifier: ry1DEOWcjkAbJGN/5wpjtAcTWDEVzP9/pEKVJC+AHPo=
Subject key identifier: 3E:4B:3B:0B:21:BF:C0:F2:3D:EF:14:B1:DB:CB:89:4D:E3:8A:8D:65
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802682028498B505102893C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/02792fc4-7a12-3a20-b071-7eaff8006be7.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3d00::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:82:02:84:98:b5:05:10:28:93:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=07742d7f-f0de-4190-a2c7-85fa8cce4166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:b8:1a:d0:00:9f:0f:b3:50:5b:8c:b9:58:
aa:12:f5:84:61:46:98:15:15:64:b7:bf:3b:3d:ee:
58:c3:b7:60:40:99:e3:3c:c6:14:96:01:93:af:a1:
be:17:78:44:88:c3:fd:f6:99:d7:54:24:68:92:eb:
ce:b6:06:6f:b8:38:22:e0:36:ba:33:c0:1a:e8:94:
ad:c4:c4:11:aa:57:04:9b:2a:5c:45:3f:22:5a:68:
1e:1c:c2:d2:22:7e:ba:d2:f6:9e:5c:53:de:31:7e:
bd:46:cc:36:da:4f:da:d5:cc:29:e9:5d:09:60:01:
fc:9c:3a:68:97:84:3e:dc:28:bc:01:6b:56:20:b0:
b0:fc:4c:b9:b0:f0:57:ab:24:1c:0b:21:0f:16:e6:
04:ef:80:f4:4d:95:c6:5c:4d:55:87:14:04:37:c1:
35:62:c4:2b:20:27:aa:b3:6b:81:ff:73:35:1a:4b:
b1:35:7a:d0:7b:8e:bd:62:0e:4a:92:b2:0f:e6:5c:
4e:f1:3a:b6:39:33:4c:c4:78:be:59:a5:28:39:58:
0a:f6:b0:80:7d:5f:88:5c:b5:f4:9a:85:fb:dd:e1:
89:64:9c:54:8d:b2:51:24:91:41:e0:e8:13:b2:95:
6d:d7:71:f9:2e:61:a6:74:45:07:07:a0:e7:d4:08:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4B:3B:0B:21:BF:C0:F2:3D:EF:14:B1:DB:CB:89:4D:E3:8A:8D:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/02792fc4-7a12-3a20-b071-7eaff8006be7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3d00::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:22:e4:34:33:78:14:27:2a:88:40:e7:83:fc:35:a0:f8:cd:
6a:a2:34:b1:f9:18:eb:7e:1f:c5:8a:99:a1:53:39:78:47:e3:
74:b2:a3:99:db:d6:f3:d0:65:c0:b1:74:c2:8d:10:66:b7:5e:
ec:7a:8d:e0:ba:e0:63:4a:8f:4c:39:f2:c1:47:91:cc:37:8a:
29:0a:54:0a:d2:06:2e:6e:40:78:11:0f:eb:3f:d5:ba:c2:b0:
0d:2e:7c:e9:e2:43:c2:f0:20:9d:18:c7:62:3d:0e:a8:f8:36:
3c:87:bd:dd:c2:2e:80:6c:17:80:7e:44:8e:fe:bd:6a:70:32:
a1:b6:1b:18:9b:b5:94:d0:68:d7:13:9a:c3:82:2b:f2:72:29:
ab:f9:9f:39:e0:0d:ff:5d:69:ea:1a:b9:52:b2:0c:ff:67:3b:
65:0b:ae:ae:51:dc:1b:58:04:bf:44:07:77:61:59:e6:37:7c:
41:b7:5a:97:b7:e5:e2:d6:d0:49:e0:ef:49:56:cd:fe:cd:5a:
83:4c:13:92:b3:e7:ad:b6:3f:a8:dd:fd:ae:1e:05:10:14:50:
c9:9c:24:14:3d:75:5e:20:53:7b:70:80:07:3b:10:ad:80:27:
1f:e3:bf:50:7b:7d:f3:e5:e2:5a:fb:0c:75:da:e0:7f:b6:75:
f9:96:1d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:28 2025 by rpki-client