Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25f2c16a-54a6-3910-99c6-222ca99cc3cf.roa
File: 25f2c16a-54a6-3910-99c6-222ca99cc3cf.roa (raw, json)
Hash identifier: VHDqSE0roXxZ+Z1hnrzk4W3Cb68b0fGUuobSXlhB3xI=
Subject key identifier: A3:CB:4C:9C:D8:54:10:5F:36:AE:C7:1D:06:01:77:A5:41:A8:31:70
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858478026918452C1EF36005CD680
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25f2c16a-54a6-3910-99c6-222ca99cc3cf.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3dd0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:91:84:52:c1:ef:36:00:5c:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=63bf14c5-9f1a-42a3-a514-4bf5aee7d7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:5e:e0:f7:15:3b:fa:c7:c9:45:6a:7e:63:
aa:52:0b:3a:0d:0d:75:bd:12:06:61:42:9c:e1:13:
d5:43:c1:64:c2:3c:7b:7f:d4:df:2b:31:1d:c5:07:
fa:77:b8:83:4d:02:31:9f:f7:6b:b7:8e:97:b4:c1:
99:82:9d:32:a5:55:1d:8d:e5:a4:3b:c8:13:c0:68:
c8:f0:f4:c7:ae:eb:88:35:51:58:e1:bd:ba:91:8f:
1b:92:fc:99:4d:fc:06:22:2b:fb:b2:53:f4:f0:5c:
a2:6f:57:d0:9c:0c:f8:44:8a:40:81:cc:db:b0:2a:
56:ea:2d:f3:5b:30:9e:04:35:5d:ae:e4:5a:59:24:
f2:02:25:e2:a8:37:8c:33:c2:66:24:68:a6:46:05:
b3:43:05:7b:7e:ff:a2:be:cb:6a:2b:77:3d:63:00:
66:47:22:da:3d:99:20:c6:cb:c8:e8:9d:32:4d:28:
ea:d0:ca:6a:17:d5:f3:22:ba:79:04:a6:ff:e2:32:
9f:08:8c:d5:41:ff:ff:22:68:4c:bb:97:28:05:eb:
5f:ed:04:02:3f:f9:b8:03:c1:dc:08:46:49:eb:2a:
d7:54:7e:b9:b3:88:3b:48:28:3d:c4:f4:19:30:74:
16:f0:40:dc:1d:89:a1:60:16:34:a9:59:73:f7:a3:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CB:4C:9C:D8:54:10:5F:36:AE:C7:1D:06:01:77:A5:41:A8:31:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25f2c16a-54a6-3910-99c6-222ca99cc3cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3dd0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:e1:03:1d:17:7e:9e:b0:7e:eb:c7:18:b2:56:d5:37:3e:6e:
53:58:28:95:91:c4:5b:fe:cf:fb:5a:3c:bd:ad:da:98:f9:84:
dd:98:ad:3e:99:1b:ec:15:93:a0:74:03:04:08:06:27:3a:b3:
27:e7:a8:d8:4d:b0:12:8e:ec:bf:8e:4b:e7:43:6d:4b:59:df:
ee:63:14:42:97:13:1b:7c:0e:18:00:15:ac:52:3c:0a:c7:0f:
8e:f2:cf:b3:55:1a:cb:d1:aa:70:1b:05:70:42:71:bf:23:10:
e1:25:f0:32:57:31:0d:36:f3:22:cf:21:32:43:ee:22:b7:af:
26:82:2b:9e:fa:7f:e2:31:72:98:67:f4:fe:37:c9:5e:4e:f9:
7d:3f:ee:bc:d8:6e:a7:49:9b:af:3d:9f:1a:0b:28:3a:42:d8:
36:0d:e3:24:da:ec:42:c5:21:72:98:34:ea:0b:de:e6:5d:ec:
95:b2:08:d8:a8:15:63:d0:d6:2c:39:11:37:b7:36:94:ee:f8:
75:ae:55:c8:ca:dd:bf:bb:39:b0:e0:79:07:15:17:f7:73:0d:
79:0c:37:a9:0f:bf:76:12:ef:15:4f:8f:cd:ce:1b:8b:40:6d:
ad:df:eb:4a:08:ed:a1:ec:2a:97:dd:f9:93:78:46:db:ba:10:
1f:03:e4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:13:24 2025 by rpki-client