Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a7e6665-051a-3732-8c18-434f495e2ab7.roa
File: 2a7e6665-051a-3732-8c18-434f495e2ab7.roa (raw, json)
Hash identifier: i0txYeHsv4MPshBoJUpkKnVN4Sibu9jF5t4b7W1JASg=
Subject key identifier: A0:E2:F6:4A:6E:67:6D:66:42:4B:DE:70:13:97:AD:AA:A4:D2:8D:32
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780267443BC9CCA9680EFBDC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a7e6665-051a-3732-8c18-434f495e2ab7.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3600::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:74:43:bc:9c:ca:96:80:ef:bd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=dbfa7656-7aeb-482d-af11-d4329a652454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:cf:93:db:22:bf:0c:ad:49:63:d9:13:98:
3c:5a:d4:3b:d7:9d:e6:17:4b:cc:f1:ac:43:64:90:
ce:3b:94:13:6e:81:24:8e:bf:3c:55:d4:a9:f1:b9:
c7:be:19:e4:77:af:e6:aa:e8:ff:b1:09:29:07:b9:
74:43:9f:70:ba:d7:88:92:fd:65:d4:c5:ab:38:eb:
3d:de:0c:f2:45:ad:ad:36:1e:72:ea:54:10:c8:a1:
7d:b0:7e:12:83:5c:a3:8e:d9:66:f9:77:70:e8:e9:
5f:24:07:89:31:0e:9f:84:71:1c:4a:10:db:b9:a6:
00:58:49:95:81:87:bb:28:dc:c7:86:35:5d:2e:a4:
36:8c:68:cb:7b:92:67:de:3f:7d:20:35:8e:e0:26:
2e:a0:fb:39:de:e3:00:9e:ab:c8:f1:c8:a4:f8:54:
f3:3c:23:5a:d0:4d:a4:c8:a5:94:3b:ff:92:ff:17:
a4:ef:f2:19:df:d1:8b:8c:c0:7b:59:3f:d9:d7:a1:
7f:4e:96:97:3c:e0:34:72:b5:a4:cb:0b:0d:44:a6:
a6:b7:98:72:53:b1:94:34:15:98:ef:5f:eb:7c:51:
6a:6a:01:6c:39:34:9f:10:9a:e9:1a:0a:de:76:05:
0e:cb:c2:0c:bd:ba:09:4d:07:30:a6:52:fa:d0:99:
9d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E2:F6:4A:6E:67:6D:66:42:4B:DE:70:13:97:AD:AA:A4:D2:8D:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a7e6665-051a-3732-8c18-434f495e2ab7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3600::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:2f:7f:1f:77:a7:dd:8f:23:e0:bd:97:a0:54:99:7e:50:59:
a2:88:20:89:3d:1f:3b:7a:2e:1a:22:eb:35:cc:6a:9b:98:c2:
32:dc:0b:7d:09:92:2c:1a:04:40:fa:57:75:72:e7:a6:1b:60:
ca:b2:81:f3:a5:62:59:6e:ef:9c:78:c8:fb:0d:08:4c:2a:6b:
54:0b:4f:39:7e:f2:36:2e:a3:e2:7b:c3:f3:3c:74:df:d1:89:
fd:f8:b7:84:97:0f:79:ce:72:e1:84:fc:50:10:2e:f1:7b:83:
c0:41:08:b1:25:f9:03:aa:d1:a8:90:7d:dc:a7:ca:02:73:6f:
7c:ec:5c:f2:1d:47:3f:3b:db:80:8b:b5:15:31:2b:60:eb:77:
2b:15:27:ad:cf:9a:91:f7:0e:d8:d1:2d:ff:84:01:4e:5a:40:
2a:77:25:0d:dd:0e:ff:da:10:15:10:de:12:63:f0:6e:a4:69:
13:8b:e5:ab:dc:d0:f4:76:b1:ef:77:f2:8a:ce:bb:18:77:32:
4e:80:99:31:b8:cc:e2:7b:65:98:b5:d3:b1:45:fa:91:dc:7d:
92:8c:65:6a:25:41:4c:63:ac:10:be:23:16:e8:50:3f:91:3a:
67:ab:4c:b4:be:08:9a:a1:18:9a:b9:06:3c:1e:42:37:c5:49:
ba:bb:0a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:23 2025 by rpki-client