Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21bfc4f3-ff52-3607-9fb1-3df31ea311e9.roa
File: 21bfc4f3-ff52-3607-9fb1-3df31ea311e9.roa (raw, json)
Hash identifier: +nieZ3oPh50aVZc2PSQQFA35cjTkOGY7xS7p3ub/XSU=
Subject key identifier: E2:8D:6D:F4:5A:B7:4A:1C:0D:7F:C7:2C:8C:51:A8:26:2D:9B:9A:88
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780268895BC33DFDFA3EA9A80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21bfc4f3-ff52-3607-9fb1-3df31ea311e9.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3c40::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:88:95:bc:33:df:df:a3:ea:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=f89dba07-5a74-48f3-89d9-1740c200a0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:65:3a:d3:91:e4:dd:c1:7e:cb:e1:11:33:
0a:d3:a0:b4:ca:f3:81:7b:02:3a:12:22:64:b2:9f:
25:e2:91:2c:18:43:54:88:74:f3:90:98:ce:3d:b1:
23:92:7d:ea:46:72:27:b5:01:ef:1a:48:71:8d:6a:
e9:78:85:e5:92:13:4e:d0:22:5b:f7:63:b0:0c:ee:
06:7d:3b:47:3c:a3:4b:18:28:e8:0f:37:f6:63:c5:
39:7e:80:3f:1a:77:7c:e1:c1:05:78:81:c4:7f:8a:
b7:c3:29:08:c9:ed:eb:88:ff:32:83:a4:0d:da:2b:
0d:ef:c4:1a:90:1a:fe:49:20:76:69:ad:fe:a8:85:
ff:a6:ad:d5:ce:4f:1a:57:4f:b6:f7:c7:32:ce:1a:
9d:51:5e:25:15:62:4d:d0:b6:c3:dd:e9:dd:e8:48:
88:9e:2d:22:93:09:5c:c6:d8:8f:e0:65:60:67:c1:
aa:09:1e:ec:19:b5:5f:81:55:a5:74:d3:e2:09:be:
b9:85:93:44:a5:9e:dc:2c:d6:28:73:be:81:7f:7f:
ed:45:98:b3:55:53:10:ff:48:4a:2b:dd:19:83:60:
09:a0:9a:76:11:e1:61:71:7d:24:cc:7e:60:4a:7d:
ce:fc:6a:dc:e1:1f:9c:0f:86:a9:0b:e5:a1:1a:ac:
11:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8D:6D:F4:5A:B7:4A:1C:0D:7F:C7:2C:8C:51:A8:26:2D:9B:9A:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21bfc4f3-ff52-3607-9fb1-3df31ea311e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3c40::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:33:25:2f:3a:d1:d9:c0:90:15:5d:68:44:f2:19:bc:af:ec:
ba:db:b8:f4:f0:03:e8:57:9c:f0:b5:53:f6:4a:00:d3:16:3a:
b2:84:69:6e:76:42:0e:60:92:08:a4:cf:ba:ad:e8:c9:0e:a0:
b1:4f:7a:33:31:62:c8:54:ac:df:57:cc:be:83:53:ec:4d:14:
d7:43:be:cc:e0:4f:3f:16:f2:cb:1f:b1:f0:a0:bf:ee:71:0d:
46:52:9d:d1:43:58:e9:58:7b:fa:c0:88:05:c0:bd:6a:32:bb:
0d:f8:b1:07:84:63:6c:60:9a:be:30:de:2b:c0:ec:4e:84:19:
77:6f:7f:89:73:47:a3:ff:a1:83:b2:53:b4:97:55:26:42:f1:
b5:44:c6:8a:d2:c5:60:32:78:56:1d:4a:f2:77:4c:f5:c3:6d:
85:19:48:7f:e0:cc:dc:f6:c6:48:43:44:7d:01:44:81:fe:25:
f1:7c:6c:67:07:b0:a5:8a:38:c1:ff:50:c6:ee:cc:f8:07:4e:
bb:06:0f:26:3f:2d:f0:fc:0c:5b:fa:c4:4a:e6:2c:b0:80:5d:
43:95:12:1b:60:de:e1:0a:7f:62:50:1a:fe:a3:50:7a:1c:28:
04:83:de:ab:60:f6:4f:0b:14:37:91:3f:b7:6e:81:21:8a:78:
58:be:13:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJoiVvDPf36PqmoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
Zjg5ZGJhMDctNWE3NC00OGYzLTg5ZDktMTc0MGMyMDBhMGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYZlOtOR5N3BfsvhETMK06C0yvOBewI6EiJk
sp8l4pEsGENUiHTzkJjOPbEjkn3qRnIntQHvGkhxjWrpeIXlkhNO0CJb92OwDO4G
fTtHPKNLGCjoDzf2Y8U5foA/Gnd84cEFeIHEf4q3wykIye3riP8yg6QN2isN78Qa
kBr+SSB2aa3+qIX/pq3Vzk8aV0+298cyzhqdUV4lFWJN0LbD3end6EiIni0ikwlc
xtiP4GVgZ8GqCR7sGbVfgVWldNPiCb65hZNEpZ7cLNYoc76Bf3/tRZizVVMQ/0hK
K90Zg2AJoJp2EeFhcX0kzH5gSn3O/Grc4R+cD4apC+WhGqwRVQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOKNbfRat0ocDX/HLIxRqCYtm5qIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjFiZmM0ZjMtZmY1Mi0z
NjA3LTlmYjEtM2RmMzFlYTMxMWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQDxA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADAzJS860dnAkBVdaETyGbyv7LrbuPTwA+hXnPC1U/ZKANMWOrKE
aW52Qg5gkgikz7qt6MkOoLFPejMxYshUrN9XzL6DU+xNFNdDvszgTz8W8ssfsfCg
v+5xDUZSndFDWOlYe/rAiAXAvWoyuw34sQeEY2xgmr4w3ivA7E6EGXdvf4lzR6P/
oYOyU7SXVSZC8bVExorSxWAyeFYdSvJ3TPXDbYUZSH/gzNz2xkhDRH0BRIH+JfF8
bGcHsKWKOMH/UMbuzPgHTrsGDyY/LfD8DFv6xErmLLCAXUOVEhtg3uEKf2JQGv6j
UHocKASD3qtg9k8LFDeRP7dugSGKeFi+ExQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:32 2025 by rpki-client