Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/09d0b1db-0f37-3ea8-b9e8-a7d87ce7c7d6.roa
File: 09d0b1db-0f37-3ea8-b9e8-a7d87ce7c7d6.roa (raw, json)
Hash identifier: 2s6NG+06xpIscLZKN7L/QoDL6bXkNzZ4skC4mrh5LwI=
Subject key identifier: BD:F0:98:66:1C:4C:15:CB:A9:97:03:8D:F7:C8:A9:48:C1:D8:D5:02
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780266A9288329DCF7026D6C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/09d0b1db-0f37-3ea8-b9e8-a7d87ce7c7d6.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3040::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:6a:92:88:32:9d:cf:70:26:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=dd6014c0-decd-4321-a484-600375e84971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:64:38:8b:7d:8f:1f:39:83:c2:21:d5:c0:
14:89:49:4b:ba:89:02:66:94:a9:31:6b:50:5f:7f:
b7:f2:a8:07:62:26:58:68:46:3c:6f:a9:51:ec:fa:
5a:f6:90:68:30:4b:98:71:a5:7f:0e:e3:cf:80:d8:
8c:76:54:20:22:60:36:8f:eb:f6:8b:c6:fd:02:af:
5f:95:21:84:f1:3d:f0:46:0d:4b:85:0f:66:9d:61:
9f:6c:86:29:bf:9d:85:02:16:05:7b:68:81:9a:b4:
5d:a8:db:bf:e6:4b:8a:ae:99:4c:20:68:03:d6:45:
3a:34:7e:f5:7f:13:1e:ca:07:77:56:c5:08:9f:73:
51:a8:a8:9d:a0:8b:22:92:6b:d7:4d:a6:2d:84:a8:
e4:1d:9e:c7:ab:53:5f:d2:fb:4d:92:85:26:8e:32:
91:4d:ec:b3:c6:df:f2:87:56:6f:dd:86:68:ac:0a:
87:19:f6:29:41:f6:82:9b:05:ce:86:9d:a1:aa:99:
e4:86:94:e4:2e:5d:e6:6c:23:77:12:9b:8f:2e:58:
dc:ef:30:df:b6:43:d6:a6:ae:8f:a6:6d:1a:d0:6e:
01:4f:13:13:19:a6:a3:a0:0f:80:6d:73:3f:03:1f:
6c:36:86:be:c9:2d:2f:08:3c:e3:86:4c:90:4f:d7:
9c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F0:98:66:1C:4C:15:CB:A9:97:03:8D:F7:C8:A9:48:C1:D8:D5:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/09d0b1db-0f37-3ea8-b9e8-a7d87ce7c7d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3040::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:99:7d:d2:e8:ce:e2:aa:d5:05:d1:23:ff:03:8a:42:85:15:
16:e7:15:81:8b:4b:d5:b3:6e:d0:72:8c:8d:b9:5e:d0:0d:73:
c5:94:79:4c:15:cf:d5:df:03:b9:e8:b5:05:eb:89:46:21:ce:
37:76:3e:c9:e8:23:c8:64:82:35:ef:50:0d:cb:8e:5b:5b:a7:
f3:87:30:7d:2a:b0:81:a6:5c:4b:e0:0a:d0:d9:e9:70:2e:b3:
f8:85:0d:52:77:d3:3d:46:f5:29:90:94:bd:d4:ce:83:0a:cc:
6d:7c:98:0a:0e:05:d3:9f:07:a0:83:fc:5b:a3:94:bf:8f:2b:
a7:07:78:1e:28:f1:02:77:7c:ba:e0:ba:4d:df:b1:7d:e3:45:
43:f2:ce:2b:4d:1d:6b:9b:d3:23:1f:a9:a9:75:f1:de:e8:67:
c8:a0:6d:ef:d0:4a:3c:14:2e:3f:6f:66:27:9a:7b:04:b3:c6:
19:c0:49:bf:36:c5:4a:9c:74:e6:0a:df:57:2b:f0:42:01:51:
c6:3d:87:de:82:b2:98:08:19:c5:37:37:f5:25:87:44:07:32:
70:65:fe:c6:f0:f1:0a:18:60:30:78:1b:0b:e1:64:3f:fb:25:
66:a6:f4:bb:86:08:c9:e3:69:bf:b7:ea:63:97:99:b8:d0:6d:
f2:e0:b1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:26:41 2025 by rpki-client