Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/094c1ff0-ac8c-3c89-8cd5-1f78f4e1471d.roa
File: 094c1ff0-ac8c-3c89-8cd5-1f78f4e1471d.roa (raw, json)
Hash identifier: qiyhEdnUqkr3VPJLu/h5vcbnANkEYwytdUKAjyl5orU=
Subject key identifier: 40:58:FA:CA:E1:3B:07:89:2C:01:77:5A:BE:3B:CA:6A:24:E4:82:20
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802665FB3DAC02587D1E4BB4
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/094c1ff0-ac8c-3c89-8cd5-1f78f4e1471d.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:21e0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:65:fb:3d:ac:02:58:7d:1e:4b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=2d8755b1-9337-43d5-a600-0035f5a808a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:f3:8e:7b:c9:3a:36:a8:49:db:0e:77:cb:
e2:e5:8a:ae:eb:a5:83:bd:80:06:5b:b1:7a:e1:1f:
1f:df:e8:f5:6c:3e:bb:48:3a:82:89:a0:6c:f8:cd:
e9:d4:26:20:b8:ba:60:1c:1a:a2:e9:6d:7b:97:da:
74:7e:d4:39:5d:e9:61:a7:ea:53:48:53:0c:fa:a1:
58:23:68:a1:93:3a:c9:8a:ea:dd:64:99:5e:c3:8f:
b0:53:5d:9f:ed:19:46:10:58:90:c7:92:bc:70:85:
b5:fa:04:1f:c7:d0:7b:f9:38:49:ad:2c:4e:8d:1b:
5a:46:7b:83:5b:b4:2d:07:0c:d2:9c:c6:9e:e7:9a:
8f:85:c3:b7:2d:7c:6a:90:83:0f:1c:8a:3d:24:61:
71:ac:a9:34:c0:13:ba:a6:9f:af:70:c9:88:bd:ea:
35:f6:75:5f:68:2c:69:b3:bd:96:af:ff:99:05:80:
f6:e9:db:8f:b7:62:ff:89:c7:ab:08:3c:24:a8:32:
d0:1c:3f:d8:db:8b:ec:0e:a4:1a:e9:c7:e7:ba:80:
b6:c9:39:5e:04:af:fb:58:1b:70:13:aa:7f:b5:f2:
4c:ca:1d:4e:05:23:a0:ad:7b:8c:23:2a:f9:6d:9b:
73:8f:ef:08:53:ba:78:77:5b:bc:5e:07:61:df:3f:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:58:FA:CA:E1:3B:07:89:2C:01:77:5A:BE:3B:CA:6A:24:E4:82:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/094c1ff0-ac8c-3c89-8cd5-1f78f4e1471d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:21e0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:55:43:cd:d4:ed:bd:a6:46:d7:f2:ac:d4:85:c4:df:b9:ce:
13:4d:5b:da:f1:fd:30:7e:c0:fa:46:4e:82:f6:da:75:c9:e3:
09:d7:c8:4f:89:03:d3:cc:b6:5c:44:13:72:d6:c8:a3:b0:28:
24:d1:fd:2f:84:f6:77:a3:01:49:11:eb:01:45:69:7c:69:bb:
85:b4:ea:84:58:76:e3:0f:fc:bd:a5:81:00:3d:0d:d2:92:bb:
af:04:82:80:63:6b:00:c5:c3:5f:58:63:cc:aa:fa:e7:57:b7:
d7:ea:c2:96:95:ca:e2:f1:45:52:1c:55:c5:16:bd:21:47:fc:
d6:68:48:1f:91:e4:96:59:b9:30:b6:77:2a:10:43:94:cd:55:
25:65:9c:36:b3:71:20:18:61:fb:cd:b4:96:8b:e0:ba:3c:7e:
4d:55:67:41:12:86:a8:03:cc:2a:a0:5d:4a:02:d5:3f:90:5d:
6e:97:6d:d1:a2:09:9f:04:99:90:8f:84:16:94:60:71:47:96:
54:6c:05:7a:3e:5f:2a:17:35:78:f8:9e:eb:57:01:98:32:ad:
27:07:f7:4a:b8:59:bf:25:5f:53:3f:4f:11:03:3e:67:40:a9:
8c:49:5e:3a:3e:ee:21:bb:59:48:4f:67:43:5e:59:ea:4e:93:
52:32:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:13 2025 by rpki-client