Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ffac266-8491-3d5f-abc6-b07b0f354e5e.roa
File: 0ffac266-8491-3d5f-abc6-b07b0f354e5e.roa (raw, json)
Hash identifier: ZFRR5KMiga4j973KS7KFw/zGa3EkITF7LfRUrSsIlu4=
Subject key identifier: 71:33:A8:71:A0:BD:15:34:6C:C9:D3:C2:9B:30:B6:4C:1E:07:58:E7
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802662B390FD665511AFE600
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ffac266-8491-3d5f-abc6-b07b0f354e5e.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3a30::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:62:b3:90:fd:66:55:11:af:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=0195ec73-23ed-4bc6-a6b0-54e59b27456e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:55:62:3d:0a:2c:9a:71:ba:27:f5:4e:13:
88:cd:64:cd:5c:06:74:fd:ad:40:46:aa:af:d4:7e:
c0:f2:34:ac:c3:5a:8c:50:62:a9:a3:5e:e2:b6:2c:
28:02:36:fc:87:14:8f:94:36:23:61:47:d3:c9:aa:
25:3c:81:14:09:cc:6b:39:58:15:68:d1:8e:d9:2b:
ce:07:99:37:f7:6c:64:15:7e:f8:4d:06:06:d0:87:
87:4a:dd:37:5b:43:35:1a:81:a5:1b:0f:09:08:2b:
0c:9e:41:00:33:8f:64:94:ba:22:78:74:79:cb:5b:
99:0d:c2:e7:27:64:5e:23:52:2a:0c:5a:81:89:6b:
89:08:21:12:cb:4d:73:61:e3:c9:d2:4d:31:78:58:
95:9b:09:0f:30:8f:a1:b1:cc:c7:5b:70:d5:40:b8:
7f:aa:0b:55:9b:c0:03:da:80:51:89:2b:d0:07:e3:
ef:a7:17:23:92:8d:f0:eb:04:50:b2:ed:dc:3a:ab:
9f:a6:a8:c1:6b:8e:28:6a:b9:85:8e:07:e2:fe:12:
c9:0d:75:86:ba:3e:03:c5:06:0d:52:6b:42:e7:80:
e4:51:8f:7e:2f:71:e6:77:46:94:93:79:fc:5f:e6:
f6:4d:47:18:c0:b0:f5:57:ef:9d:dc:1a:af:3b:80:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:33:A8:71:A0:BD:15:34:6C:C9:D3:C2:9B:30:B6:4C:1E:07:58:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ffac266-8491-3d5f-abc6-b07b0f354e5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3a30::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:b9:25:d3:80:fa:f8:ca:65:fb:0e:97:4a:f1:34:e9:93:da:
a8:78:4c:22:b3:e6:3e:d9:fc:53:7f:b6:92:58:d5:ae:62:61:
51:2f:9b:18:f0:c5:45:4b:ff:16:50:22:b7:90:ac:ce:6f:1f:
c3:7b:e6:19:cf:0e:f3:fc:2a:25:b0:41:32:97:08:9f:66:dd:
25:9c:e2:cc:fb:e2:ee:dd:85:18:e1:1e:a1:11:bd:9f:12:c8:
e2:42:5f:23:32:8b:ef:68:67:72:aa:21:4c:97:41:1c:90:ca:
de:2b:c6:bb:10:d7:79:4d:87:37:8f:52:9e:4a:cb:15:03:f2:
c0:36:dd:9b:5e:e7:a6:42:c0:19:37:5c:15:10:6f:55:80:45:
2c:0d:6b:a2:de:8b:32:7e:b0:bb:8f:6f:a5:4a:39:66:43:16:
89:61:c9:17:4a:81:7f:0c:c2:31:ad:4a:48:e2:c4:45:af:65:
87:03:0b:04:56:9f:25:9d:64:47:ea:db:41:50:bb:81:06:e4:
2c:94:80:59:fd:d8:5c:85:81:2d:7f:df:7f:10:9d:d7:8e:1d:
9c:71:0b:cd:9f:02:e6:43:a5:55:58:d3:f3:f6:32:02:3c:b5:
8e:d0:fa:91:68:54:f3:f8:df:85:0b:ab:79:cf:ee:51:fe:ce:
39:5b:4e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:45 2025 by rpki-client