Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/18aa78da-bec1-352c-922e-a973e70c746a.roa
File: 18aa78da-bec1-352c-922e-a973e70c746a.roa (raw, json)
Hash identifier: 5Pinfvis5re604/CnQ9BtTe6Gfs0uIWqHw1x8bTlcxA=
Subject key identifier: 99:D8:DB:FB:E2:DC:2F:77:68:AE:CF:EB:FF:F1:AF:A1:FC:27:49:89
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802690365F5450F73B633520
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/18aa78da-bec1-352c-922e-a973e70c746a.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2630::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:90:36:5f:54:50:f7:3b:63:35:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=8c45f445-5780-4574-bb13-c04d51e31082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:84:5b:89:51:8e:2b:8e:c7:da:3a:e5:25:60:
2c:86:68:d6:a9:6f:80:8e:4f:9d:84:96:30:4b:c7:
d0:6d:8e:f7:30:16:0a:b3:b5:8b:ab:1e:ec:63:74:
3f:67:4b:ef:12:ca:bf:04:99:d6:ab:01:0f:f1:27:
e0:5c:f8:50:24:e9:60:e0:a4:59:29:32:44:b7:9f:
2a:b5:84:f8:d1:2d:73:42:33:01:bb:ce:e7:73:44:
5a:03:89:b2:39:64:7c:fd:58:fe:6f:d8:2e:87:c9:
4f:bc:83:9f:2d:f7:cc:ac:86:49:93:ac:db:c0:ae:
53:a6:78:6c:1b:4c:14:fb:55:1e:87:da:ae:c7:1d:
59:25:2f:6b:82:61:87:fd:0d:86:a6:24:7c:a2:97:
17:b0:e8:35:fc:39:8c:c9:f8:42:e4:3e:b7:1a:d0:
8a:e5:8d:87:fd:d3:5a:1f:d5:31:a5:18:29:7e:08:
96:17:c9:03:40:f0:fa:42:b4:ac:b4:73:9c:8a:e3:
df:49:6e:d3:c0:b4:27:73:f9:de:a4:ee:2f:d1:cb:
97:37:a3:4a:56:dc:65:2e:09:ef:86:46:57:c5:60:
e4:e1:9b:31:60:69:6e:80:bb:02:82:1d:7a:2a:7b:
05:90:2e:9c:39:bf:5c:65:fe:9e:6a:c4:a4:74:cc:
be:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D8:DB:FB:E2:DC:2F:77:68:AE:CF:EB:FF:F1:AF:A1:FC:27:49:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/18aa78da-bec1-352c-922e-a973e70c746a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2630::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:42:e1:ee:88:91:81:3e:f5:10:68:38:65:28:ff:27:4e:36:
ca:86:9f:5d:9f:a5:f4:16:cd:1f:c9:cb:a6:ab:d7:09:2e:ad:
59:91:42:c6:c1:5d:eb:36:74:45:e3:9a:6d:c2:66:d3:76:3c:
f8:ba:11:a7:e3:a5:17:04:b7:b5:da:38:4b:46:8d:f2:e0:c0:
66:05:ae:88:a8:5b:36:64:cf:7b:80:80:c3:a9:21:58:45:bf:
05:af:ac:6c:a7:d7:56:0c:87:e0:cf:df:37:36:5a:21:14:61:
33:5c:41:c5:08:cc:a8:1d:d6:40:78:18:f6:8a:de:dd:70:8a:
b3:35:9a:cc:d3:a4:ba:0e:d5:af:62:97:a8:ee:4f:4f:e7:9e:
72:d6:ee:fe:56:48:81:c0:fd:1e:b2:b6:bc:61:cd:02:9e:94:
4b:0a:5b:df:8f:31:97:45:bc:35:54:b4:59:2b:e4:28:2e:42:
4f:22:75:f8:eb:02:e5:96:7d:64:92:c6:39:00:e8:13:f5:a4:
91:f5:da:3a:3f:27:04:56:3e:0d:70:d5:5f:90:2e:a4:0b:cd:
94:37:c7:7a:2a:6c:98:af:d2:cd:4b:14:1e:30:a2:a4:29:a0:
57:46:78:b3:4b:e1:a7:2b:27:40:a8:6a:6d:39:14:23:d2:15:
99:fe:a1:dd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJpA2X1RQ9ztjNSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
OGM0NWY0NDUtNTc4MC00NTc0LWJiMTMtYzA0ZDUxZTMxMDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4RbiVGOK47H2jrlJWAshmjWqW+Ajk+dhJYw
S8fQbY73MBYKs7WLqx7sY3Q/Z0vvEsq/BJnWqwEP8SfgXPhQJOlg4KRZKTJEt58q
tYT40S1zQjMBu87nc0RaA4myOWR8/Vj+b9guh8lPvIOfLffMrIZJk6zbwK5Tpnhs
G0wU+1Ueh9quxx1ZJS9rgmGH/Q2GpiR8opcXsOg1/DmMyfhC5D63GtCK5Y2H/dNa
H9UxpRgpfgiWF8kDQPD6QrSstHOciuPfSW7TwLQnc/nepO4v0cuXN6NKVtxlLgnv
hkZXxWDk4ZsxYGlugLsCgh16KnsFkC6cOb9cZf6easSkdMy+AQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJnY2/vi3C93aK7P6//xr6H8J0mJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMThhYTc4ZGEtYmVjMS0z
NTJjLTkyMmUtYTk3M2U3MGM3NDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQCYw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFBC4e6IkYE+9RBoOGUo/ydONsqGn12fpfQWzR/Jy6ar1wkurVmR
QsbBXes2dEXjmm3CZtN2PPi6EafjpRcEt7XaOEtGjfLgwGYFroioWzZkz3uAgMOp
IVhFvwWvrGyn11YMh+DP3zc2WiEUYTNcQcUIzKgd1kB4GPaK3t1wirM1mszTpLoO
1a9il6juT0/nnnLW7v5WSIHA/R6ytrxhzQKelEsKW9+PMZdFvDVUtFkr5CguQk8i
dfjrAuWWfWSSxjkA6BP1pJH12jo/JwRWPg1w1V+QLqQLzZQ3x3oqbJiv0s1LFB4w
oqQpoFdGeLNL4acrJ0Coam05FCPSFZn+od0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:06 2025 by rpki-client