Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a92b80e-0294-356b-a2a9-85d2dbbc986c.roa
File: 2a92b80e-0294-356b-a2a9-85d2dbbc986c.roa (raw, json)
Hash identifier: CrGUtOvSlRmZmZmFvdyehAKu+RcNoLFqMZSX6LFm/2c=
Subject key identifier: 33:AB:F1:11:FF:D2:A4:38:FB:EF:07:94:6E:89:C3:3B:BE:A5:CD:EC
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802699A1A0E7A230551EED1C
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a92b80e-0294-356b-a2a9-85d2dbbc986c.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2340::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:99:a1:a0:e7:a2:30:55:1e:ed:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=85d5f4f1-b865-4a87-88ee-91b481cc48e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0a:1b:aa:aa:e1:92:13:80:22:46:c5:bb:a2:
6b:5d:a8:95:41:50:df:9d:d5:6a:7b:f9:df:3c:15:
78:b4:e0:eb:20:5b:e3:18:59:8b:0a:dc:bb:b7:ca:
d4:a0:ff:81:d4:ec:d2:11:7c:4f:a8:2a:dc:ee:b9:
51:68:d5:d7:91:d7:1d:74:c8:21:bb:e1:55:5f:c1:
ef:59:63:ed:a2:3d:30:d5:b5:f3:4e:de:12:ff:56:
90:46:ba:d4:64:35:97:52:31:24:f7:ba:62:e3:c7:
7e:65:d6:53:32:38:fd:4a:a2:aa:d4:a0:3f:56:33:
86:c9:d0:08:f5:e6:cb:35:38:8f:a9:f6:2a:87:9e:
94:3e:f3:aa:42:f5:da:00:47:37:38:4e:36:d6:51:
e4:96:b6:a5:70:ca:db:d1:b4:6c:ed:e7:8c:fd:18:
85:a1:51:6a:e5:2e:d6:1a:55:b6:ce:91:d8:80:a6:
44:ee:5c:75:3f:b3:30:79:10:95:35:e5:86:91:34:
30:9b:b2:ea:f4:b9:ed:86:18:1d:ff:cd:f6:1b:b1:
14:80:f2:63:88:9e:c8:70:fa:6b:bd:e3:7a:97:84:
c4:81:c0:21:54:bc:ac:6b:c0:a0:65:b0:40:22:64:
a2:3b:cd:a4:25:cd:ab:a0:51:64:4b:14:e8:f6:d8:
df:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AB:F1:11:FF:D2:A4:38:FB:EF:07:94:6E:89:C3:3B:BE:A5:CD:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a92b80e-0294-356b-a2a9-85d2dbbc986c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2340::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:0b:e2:13:10:4e:79:e9:eb:19:21:c7:25:ee:af:f4:aa:43:
a3:6d:d8:af:0a:43:c4:9c:d0:6e:7f:58:67:1b:a6:4a:cf:8d:
e6:df:81:06:96:11:2d:b2:d4:3f:af:1b:31:e1:4f:51:b2:fa:
a2:82:9c:4f:98:0b:c3:ba:dd:8a:4d:43:7c:a7:4a:d6:d9:0a:
9c:ac:af:3b:e9:a9:de:e8:38:ad:2c:ef:d2:08:2f:48:f6:3b:
54:e3:f0:cb:9d:9d:81:41:8c:39:5f:1f:e5:47:63:5c:a4:07:
cb:4b:29:da:f8:61:cc:f6:7b:a2:78:ae:56:05:e4:a9:8a:98:
dc:52:70:5d:c3:f1:23:7e:6f:fa:32:38:5e:ef:28:50:be:5c:
6b:ad:43:b1:23:55:a5:17:75:ee:2a:0b:b2:4b:07:ba:74:e4:
e5:40:3f:35:6e:7c:fd:a7:8e:46:05:63:6f:c8:01:52:2a:44:
bd:42:b2:94:19:c7:e0:7e:c7:63:f3:3c:2b:35:29:a5:cd:a4:
7c:f2:70:a9:d3:11:fb:8c:2c:85:ba:f9:13:47:44:67:d1:60:
84:69:ec:6e:36:d1:91:1c:15:69:20:52:9d:87:9b:fc:d9:5a:
ad:cf:98:94:6a:5d:ca:8a:2f:07:69:1e:3e:6e:5e:b3:b7:57:
31:35:73:89
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJpmhoOeiMFUe7RwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
ODVkNWY0ZjEtYjg2NS00YTg3LTg4ZWUtOTFiNDgxY2M0OGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAobqqrhkhOAIkbFu6JrXaiVQVDfndVqe/nf
PBV4tODrIFvjGFmLCty7t8rUoP+B1OzSEXxPqCrc7rlRaNXXkdcddMghu+FVX8Hv
WWPtoj0w1bXzTt4S/1aQRrrUZDWXUjEk97pi48d+ZdZTMjj9SqKq1KA/VjOGydAI
9ebLNTiPqfYqh56UPvOqQvXaAEc3OE421lHklralcMrb0bRs7eeM/RiFoVFq5S7W
GlW2zpHYgKZE7lx1P7MweRCVNeWGkTQwm7Lq9Lnthhgd/832G7EUgPJjiJ7IcPpr
veN6l4TEgcAhVLysa8CgZbBAImSiO82kJc2roFFkSxTo9tjfQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDOr8RH/0qQ4++8HlG6Jwzu+pc3sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmE5MmI4MGUtMDI5NC0z
NTZiLWEyYTktODVkMmRiYmM5ODZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQCNA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB0L4hMQTnnp6xkhxyXur/SqQ6Nt2K8KQ8Sc0G5/WGcbpkrPjebf
gQaWES2y1D+vGzHhT1Gy+qKCnE+YC8O63YpNQ3ynStbZCpysrzvpqd7oOK0s79II
L0j2O1Tj8MudnYFBjDlfH+VHY1ykB8tLKdr4Ycz2e6J4rlYF5KmKmNxScF3D8SN+
b/oyOF7vKFC+XGutQ7EjVaUXde4qC7JLB7p05OVAPzVufP2njkYFY2/IAVIqRL1C
spQZx+B+x2PzPCs1KaXNpHzycKnTEfuMLIW6+RNHRGfRYIRp7G420ZEcFWkgUp2H
m/zZWq3PmJRqXcqKLwdpHj5uXrO3VzE1c4k=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:47:49 2025 by rpki-client