Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1b3e61d9-cf06-3186-a753-409742460763.roa
File: 1b3e61d9-cf06-3186-a753-409742460763.roa (raw, json)
Hash identifier: X3ZSFLIRqxWxfMuNM4knkp2aL+VJx9RIB3roK9mRrpk=
Subject key identifier: 29:DF:90:43:56:B1:C5:A6:99:2D:DF:0E:3C:FD:19:6C:77:6E:DD:5D
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858478026835A2FD4804740D4D8C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1b3e61d9-cf06-3186-a753-409742460763.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3100::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:83:5a:2f:d4:80:47:40:d4:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=71c18af4-2017-4a37-94bc-b8d40a15dcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a2:ff:ad:e7:27:dd:64:2a:67:52:79:a4:cc:
33:da:83:d3:cf:94:38:ac:eb:59:66:50:51:bf:c8:
51:39:96:40:78:72:94:4a:61:f9:f5:47:d2:ea:29:
4c:1e:ff:e5:0c:de:ef:ff:17:b1:3e:e9:0f:b3:19:
73:9c:28:53:6f:e8:86:8e:23:76:91:94:1f:55:1a:
04:37:0d:3a:ef:e4:0d:41:c3:f5:5c:9e:91:fb:dc:
67:74:94:e9:57:cf:81:92:f0:7b:b2:67:fa:5c:ca:
c4:8d:23:af:95:db:1a:e7:dd:ba:4f:9d:4d:77:bb:
70:cb:28:b0:50:90:e9:78:ff:63:83:f0:59:c8:81:
87:2e:23:a5:3a:30:97:10:03:52:81:c0:87:e4:d5:
34:05:da:21:48:a5:a7:db:66:d6:07:6a:de:22:f0:
05:2e:11:ba:63:75:1f:17:bb:0a:c3:ee:ad:5f:e3:
fb:41:c9:8e:c3:89:c8:a8:1e:a9:93:48:3e:2d:1d:
6d:f3:45:74:ae:d7:99:b7:e6:9a:ee:2d:aa:59:8d:
b7:85:fb:50:50:29:ad:34:72:2c:16:29:dd:fe:7d:
3e:d4:3b:2f:f3:a3:47:d7:87:9e:58:50:68:a5:bc:
b2:98:16:8c:31:93:69:06:9d:f2:07:c7:f6:6f:8e:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DF:90:43:56:B1:C5:A6:99:2D:DF:0E:3C:FD:19:6C:77:6E:DD:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1b3e61d9-cf06-3186-a753-409742460763.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3100::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:2a:a4:34:24:a2:89:37:24:c9:87:3e:48:d9:f2:1b:b7:1d:
59:80:92:f7:a2:43:e6:7c:f6:7a:17:a2:b9:d4:88:b1:4b:40:
56:da:c6:07:88:41:fb:67:58:a8:1d:47:3b:c4:8b:32:42:e4:
92:67:a5:73:61:73:e6:a4:44:f8:ad:2b:f3:76:74:ab:d4:c5:
f3:1e:bb:bd:16:c9:ea:ae:7e:67:08:c6:16:77:43:21:85:7e:
e2:a6:b9:8f:5d:64:6f:43:ad:13:67:84:e7:d9:85:91:4b:26:
69:63:5e:23:36:dc:b9:7a:a9:54:11:e2:b5:14:3f:81:47:51:
b6:66:38:70:a9:cc:c4:3c:c0:9e:a3:6b:5a:f6:8e:c6:fa:7d:
bf:b5:30:d8:03:89:87:bf:ca:5d:51:dd:d2:f5:3e:30:d1:f2:
48:83:25:a0:c6:46:17:b7:7d:7d:d7:37:98:08:da:cc:cc:c9:
65:1d:5a:31:70:62:4b:09:ca:f7:41:68:c9:f1:76:0e:4f:de:
78:69:54:0d:41:64:87:d0:47:61:74:32:c7:11:5c:a4:01:0a:
20:97:ca:91:b1:ac:d6:74:fd:5e:43:35:b5:77:ff:5f:a9:ce:
6f:30:00:33:8c:f3:c8:e0:31:28:1f:4e:53:36:b5:d6:50:f0:
e1:ab:f8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:07 2025 by rpki-client