Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2fbf5d93-7ffb-3a8c-b481-86e54fb18e7e.roa
File: 2fbf5d93-7ffb-3a8c-b481-86e54fb18e7e.roa (raw, json)
Hash identifier: 5/9pilWIjtu7/ZUW6FMBjE4vxr3frSQssaEV2PQ2ANk=
Subject key identifier: 7D:60:E0:4C:4C:B5:8B:95:B3:A9:91:6C:01:20:5B:CD:C6:30:F3:54
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802684F039C54C2C5C3A6EC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2fbf5d93-7ffb-3a8c-b481-86e54fb18e7e.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3210::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:84:f0:39:c5:4c:2c:5c:3a:6e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=0e50d92b-dc9e-4227-8b36-832e5c265c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:4d:74:0e:27:b1:be:27:bf:c8:36:ab:c4:
59:85:74:0e:75:19:17:93:d3:f6:64:28:3b:b7:4d:
cf:92:f9:80:4e:3f:84:8c:6d:2e:a8:47:a3:b9:69:
32:89:c3:7a:d0:15:32:2c:fe:ab:14:0e:33:95:36:
47:82:3d:a1:31:e2:2f:33:33:99:b5:34:1f:f9:8a:
9d:ec:5b:14:e7:9b:c5:12:7b:7b:f5:5e:a4:0f:d2:
5a:b5:24:47:7f:f2:8f:9a:e8:53:7a:d4:87:4d:d0:
4f:77:fd:0a:5e:f4:01:a4:9c:d0:fc:f3:6c:b2:a4:
0d:09:8e:64:27:8c:d0:99:b1:d1:3e:b7:4c:ed:e8:
35:0a:47:01:4d:35:72:a9:12:72:c4:6b:e9:a1:6a:
ec:95:80:09:73:fa:ef:9e:3d:3b:2d:01:83:55:d0:
e9:e7:74:28:5f:80:d0:0b:c5:50:ae:71:09:20:09:
71:ea:69:40:65:7e:49:e7:fd:9c:9f:e5:dd:96:cd:
78:f8:53:7b:02:b0:f1:0c:d5:27:76:bf:22:87:88:
5a:68:ec:b9:89:b1:0e:3e:31:75:c1:ff:05:d0:5c:
38:ae:ee:09:55:6e:97:64:44:30:b1:98:24:cc:6b:
19:9a:e7:64:99:95:e1:eb:e6:34:a5:c4:f4:f7:0d:
fe:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:60:E0:4C:4C:B5:8B:95:B3:A9:91:6C:01:20:5B:CD:C6:30:F3:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2fbf5d93-7ffb-3a8c-b481-86e54fb18e7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3210::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:50:0a:ac:f3:b4:f3:ab:2c:6e:4a:49:08:80:89:fc:7c:89:
93:f1:40:ce:41:23:e8:80:1e:40:ee:4b:cf:91:7d:f1:0f:bf:
10:06:a2:83:e5:50:8b:9b:10:49:c6:62:19:51:e5:f8:07:ea:
47:4f:83:aa:80:0e:d8:77:94:1f:a2:b7:12:8c:1b:be:24:6c:
e0:86:1a:d5:e7:e4:08:4a:6c:d2:af:9c:ad:fb:3e:c9:76:79:
6e:11:f7:dd:aa:25:53:19:7a:a1:16:1d:88:c5:96:c6:ed:8d:
d5:33:97:ba:43:a6:2c:13:6a:e3:23:99:1d:c0:da:36:ed:20:
b2:93:35:44:be:16:a9:97:82:86:3a:e9:d7:38:36:fc:04:4b:
e8:f9:86:98:97:6b:f0:4c:6e:1c:b3:c7:65:b5:7a:c7:86:f7:
eb:1c:b4:04:28:75:e4:8e:49:f3:fb:e1:98:23:bd:78:41:9a:
4d:42:5a:48:61:0b:b5:ea:08:2d:22:29:aa:da:f8:49:9b:29:
5b:2d:d7:a2:5f:82:6a:8d:dc:c7:14:76:f0:a9:94:a4:9f:83:
83:92:49:7e:b8:9b:0e:b5:6b:7e:d3:bb:87:8b:1a:67:e0:6f:
3f:5c:7e:cc:22:8a:5a:7f:ce:12:d2:88:e4:27:98:bd:c9:aa:
36:98:0f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:46 2025 by rpki-client