Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a11fa60-addc-3012-947d-d9254d3b4897.roa
File: 0a11fa60-addc-3012-947d-d9254d3b4897.roa (raw, json)
Hash identifier: vcGxjVEZj+Lnjy91EavtYyoGy1GHFaHzRbu9Aw4dWZs=
Subject key identifier: 1C:1B:78:17:5F:F1:22:A5:EC:FF:29:BA:17:E4:CB:E0:94:04:1A:61
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780267CD8DA3637C53F9677B0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a11fa60-addc-3012-947d-d9254d3b4897.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3ab0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:7c:d8:da:36:37:c5:3f:96:77:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=42aa0ee2-bd66-429c-9a70-b23dc15dfcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8e:ef:bf:70:71:63:6d:71:cb:bb:ab:3c:be:
f3:cf:ef:8e:1d:79:73:d1:a5:23:2e:51:d1:44:53:
e2:ce:52:71:48:7b:ba:71:50:e3:a6:ce:82:be:c9:
37:3d:ee:5d:5b:1e:de:7e:fc:13:b8:02:a1:fe:e6:
1c:3f:fd:69:75:f8:c0:54:79:61:26:7f:21:ff:24:
c1:ef:9f:a9:64:54:3c:28:66:cb:71:da:0b:63:e7:
b4:47:e6:80:40:69:b6:c3:b4:c9:7c:7a:d9:04:67:
26:e2:fd:61:9a:0d:f0:df:a8:ba:e0:99:99:a3:c5:
90:ab:98:a4:f8:fe:ce:a6:e6:dd:26:0e:bd:47:c2:
19:89:61:ec:9c:c6:dc:ae:66:c7:db:46:f2:9f:1a:
f7:61:19:42:c8:0d:2e:cb:9c:81:a1:ca:8d:25:c1:
fd:9b:ad:fa:cc:98:91:95:39:82:e8:ee:83:c3:b6:
e3:75:2e:c3:3e:65:29:dc:0a:48:a6:65:34:52:33:
ad:1f:42:43:e9:2f:99:2b:52:f8:30:8b:18:d9:a2:
9a:37:0e:00:d8:b1:06:53:ae:ba:d1:c2:21:93:cc:
a4:8e:42:c7:96:b0:23:f1:03:73:4c:a2:d6:23:8c:
b8:0b:77:37:e0:e6:91:60:bd:f9:99:92:f3:53:2f:
9d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1B:78:17:5F:F1:22:A5:EC:FF:29:BA:17:E4:CB:E0:94:04:1A:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a11fa60-addc-3012-947d-d9254d3b4897.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3ab0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:8f:43:fc:33:5b:4b:91:f0:d3:82:c6:35:79:25:4b:05:6c:
d6:87:f5:d3:bd:76:5f:c4:0c:e6:49:f6:c3:08:17:a7:9a:40:
0e:24:13:19:86:47:ee:e0:e2:44:5e:3b:ed:ea:94:69:fb:3e:
17:9a:68:12:ab:3d:d4:e1:fd:fb:5d:e6:4a:a7:6f:6f:c3:33:
89:bb:67:28:25:5e:e3:8d:d1:e2:f7:60:01:c1:64:40:33:41:
01:a8:58:3c:0f:77:80:ea:0b:c3:ca:49:3c:47:ba:d1:be:8e:
1b:b9:43:cd:94:cc:ea:c7:d1:b0:49:7f:91:41:19:84:fb:39:
07:12:c7:4d:8f:c2:76:3a:f2:a4:3c:0b:b7:48:8e:e3:f6:0e:
94:85:8c:15:3e:e1:38:15:cf:54:53:e7:3a:66:08:b5:a2:58:
6e:de:e8:9f:b9:1b:37:30:b1:9b:85:96:5f:4c:5c:c5:fa:9c:
e9:86:eb:8f:9b:7f:82:fd:43:c5:b9:48:f4:44:7a:31:af:91:
29:f2:f9:82:9b:f2:dc:1e:c3:b6:f2:5a:60:a5:66:ef:6b:38:
a0:bd:41:c6:04:57:69:b8:ef:98:2b:6a:df:43:36:e4:1a:c2:
a4:58:00:45:b8:9f:05:43:55:be:1b:a8:d4:8e:b9:92:71:b3:
b1:79:1c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:49 2025 by rpki-client