Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2b2bd9f7-31ec-3ae2-bbed-d7000470d4d7.roa
File: 2b2bd9f7-31ec-3ae2-bbed-d7000470d4d7.roa (raw, json)
Hash identifier: ANOl27c9jZVw1B1/inP/rxsOEHCptpV6qrWa+eawP4g=
Subject key identifier: C1:23:AB:16:42:A8:1A:3B:2C:65:6C:3F:3C:F3:4D:A0:22:66:05:F1
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858478026737EF4DAB02089D3CF40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2b2bd9f7-31ec-3ae2-bbed-d7000470d4d7.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:36e0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:73:7e:f4:da:b0:20:89:d3:cf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=396b461a-3ab7-4dde-ac2e-c66b35cffc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:4b:65:ba:ba:fa:2b:0e:4a:f0:59:17:c8:
5e:69:30:ac:da:67:dd:90:f9:f2:2d:ce:59:3d:3e:
d8:32:27:7f:fa:6c:05:76:29:de:4b:76:02:4d:0e:
c1:e1:5f:d8:cb:c4:65:3b:cb:af:3a:16:56:30:36:
28:d0:79:8b:c3:07:d6:ce:57:2f:4d:6c:cf:05:8a:
1b:a8:cb:e6:e2:47:14:0f:bb:e2:5f:47:41:d6:83:
19:c4:ba:33:b6:d9:9c:fc:fe:b5:19:71:82:b4:f9:
1c:c6:d4:c0:51:c3:71:de:7c:fe:67:67:e4:eb:45:
32:85:db:ae:19:f1:2b:b4:f0:fa:b5:63:f4:82:d9:
59:40:87:ba:58:86:fa:18:2c:d1:6c:a9:3e:da:29:
f6:26:02:b0:7f:78:c1:db:37:66:a3:1b:ce:d5:9b:
47:04:7f:8a:e3:5a:b5:38:1e:21:9e:22:c8:70:82:
e2:22:02:25:db:bd:c3:3a:4a:65:0c:a4:bf:30:56:
9d:88:d5:27:a4:df:69:15:3f:d9:bb:c8:37:8a:c1:
10:89:fd:13:93:c3:3e:97:29:3d:40:f2:ba:8b:24:
bf:0c:27:91:3d:39:d0:be:11:76:9a:67:7b:58:5c:
f0:5d:c9:f8:f9:03:d1:5e:30:79:75:e4:4a:ae:59:
fe:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:23:AB:16:42:A8:1A:3B:2C:65:6C:3F:3C:F3:4D:A0:22:66:05:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2b2bd9f7-31ec-3ae2-bbed-d7000470d4d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:36e0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:31:25:32:65:ee:3f:ee:06:73:2c:86:6a:5e:4e:38:d5:ad:
21:3e:f8:5d:32:21:1a:a5:8c:75:38:aa:83:d3:1b:1d:de:9d:
61:bd:02:99:cb:71:9a:fa:84:0c:7e:12:4e:0d:ed:be:a4:3d:
73:5e:da:d6:f8:6d:46:4c:48:d9:17:cd:16:20:d2:b1:fc:72:
a5:64:28:69:0d:06:f8:38:a3:fd:ac:e0:6a:44:2c:7d:8d:e1:
cc:41:52:63:1c:ca:69:61:94:83:3b:57:a6:bc:e7:02:d2:3d:
e3:ce:3f:97:5e:6c:a0:81:3f:02:3b:19:d5:91:20:3d:2d:fd:
a8:ae:3d:b1:18:fc:35:a2:93:e9:4d:38:ae:fc:58:f3:1c:5f:
3e:8f:fb:5a:7e:bc:95:8f:79:8c:0b:4d:c8:66:74:49:cd:46:
50:42:d0:e6:ec:28:34:b7:94:31:d9:f8:ed:44:ea:92:d5:d8:
31:80:45:54:38:fb:eb:bc:e3:7a:e6:b2:09:1e:72:18:75:fa:
57:79:35:a7:8b:92:17:d7:46:04:9f:13:16:ea:28:01:6b:b3:
41:6d:e3:81:f6:c4:5a:7d:bf:ec:fe:a9:ed:04:66:8b:5b:ff:
af:c6:10:67:64:34:fb:24:a8:18:60:7f:8d:d2:9e:50:1a:37:
8d:d0:5f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:12 2025 by rpki-client