Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/22b97a76-87d0-3eab-8677-72020b6cd129.roa
File: 22b97a76-87d0-3eab-8677-72020b6cd129.roa (raw, json)
Hash identifier: NUoNIvCN2e/6zeeGccit/T1A7JC2U5akEApnbPY0nKM=
Subject key identifier: 46:4B:04:FC:36:DA:07:81:C7:37:36:42:A7:5A:C4:BA:78:E0:32:5A
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780267F4EC6F22BD94D6F8EA0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/22b97a76-87d0-3eab-8677-72020b6cd129.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3590::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:7f:4e:c6:f2:2b:d9:4d:6f:8e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=b7d4be2a-61a7-4f3e-9b8d-c3776d573468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:34:9c:4e:69:7c:86:48:3e:0d:8c:d4:98:
36:2c:e6:97:bb:be:0d:be:1f:e2:f2:94:c8:c9:cf:
48:d5:d1:49:66:58:29:cc:46:db:8f:c0:e6:c9:0c:
59:6f:15:f8:2c:06:e9:89:56:e4:9f:2d:ad:6d:72:
60:ff:dc:11:b3:73:e6:da:2e:62:f8:f6:9c:04:38:
43:d1:ff:93:65:02:88:9d:92:5a:04:d0:bf:21:63:
7d:95:04:25:56:23:c4:7e:88:80:dd:62:0b:fa:bd:
c3:be:49:b6:16:4d:e1:4c:87:18:fa:ef:59:bf:3b:
26:5b:a1:64:ee:a9:f5:4a:2b:22:19:a1:94:fe:73:
60:d4:80:48:92:d3:2b:8d:88:4b:c1:ec:b1:68:9d:
ec:ff:89:22:7c:b5:7f:82:6d:d1:7c:54:f7:3e:8c:
1e:23:9c:07:b5:c7:16:f5:07:8b:3c:09:82:31:97:
98:f7:b8:74:f2:fa:a5:14:dd:e9:c8:17:dd:8f:0b:
70:7c:8f:36:09:6b:f2:66:bf:d1:d7:37:72:84:b3:
18:1c:a2:5b:8d:1b:50:56:58:72:73:d7:9f:b8:25:
b4:75:f8:84:4c:7f:22:5d:3f:ed:43:dd:96:52:3a:
63:4e:be:ef:9b:db:9d:6e:ce:df:6f:8e:d5:99:f5:
96:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4B:04:FC:36:DA:07:81:C7:37:36:42:A7:5A:C4:BA:78:E0:32:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/22b97a76-87d0-3eab-8677-72020b6cd129.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3590::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:68:75:52:e7:49:56:25:9f:64:77:bc:cd:ec:b7:cf:67:67:
27:e3:88:99:ac:84:f7:0a:ee:a9:60:6a:0b:63:a1:95:69:4e:
48:44:dc:f6:37:f3:6a:d6:be:f6:6c:ac:6f:d1:a8:1a:0b:a3:
24:c5:e7:b4:f8:5a:23:49:89:ee:21:46:a2:8c:b8:19:bf:01:
3b:83:b0:ca:39:d6:2b:d0:2d:19:31:89:cf:77:dc:0d:ba:d9:
99:3a:8a:6c:ad:b5:62:e8:11:ca:98:43:67:3b:34:46:f9:1e:
04:eb:eb:2b:44:a8:88:2e:19:5e:00:cd:3f:c2:4d:53:cc:fa:
22:9f:99:1b:fe:88:8d:f7:42:35:1f:88:ed:e5:07:15:6c:a8:
e5:70:91:19:3a:44:00:a2:61:5a:c5:3b:66:ac:39:29:fd:49:
a2:e6:1e:4c:ec:db:9b:3c:46:79:46:96:b4:c4:e8:e2:51:fb:
05:7e:fe:5a:98:b1:10:ca:c3:99:26:e3:70:68:94:2a:7b:ce:
7a:e9:e9:19:b0:af:3f:59:ce:f7:11:92:2d:ff:d5:cf:81:7c:
b7:14:b9:d2:1c:92:87:25:79:7d:e0:88:4f:bd:f9:71:1c:ed:
67:2f:da:c5:c0:30:ce:ac:16:cf:d0:37:33:be:b0:21:cc:be:
f6:e8:55:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:31:35 2025 by rpki-client