Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2fc21e75-035a-3493-8c78-e454ccac5f53.roa
File: 2fc21e75-035a-3493-8c78-e454ccac5f53.roa (raw, json)
Hash identifier: fuKIHx/Fq9zLz20tbvDqPkZ0C26DPeOh+uuxii6RJS4=
Subject key identifier: 69:36:82:E0:63:7C:82:82:DA:8F:41:80:2F:D8:D1:DD:3D:DB:6F:EB
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780269B20ED3FF9695423D380
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2fc21e75-035a-3493-8c78-e454ccac5f53.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:20d0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:9b:20:ed:3f:f9:69:54:23:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=33c0e76d-c82f-4b65-917a-4dad7ff091ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:a1:3b:a1:20:aa:a6:f4:19:6c:93:7e:ea:
41:f5:15:71:b2:b3:59:6b:4e:d4:52:82:89:91:cf:
f4:31:07:4e:b9:92:66:5b:d4:e4:2b:b3:a6:78:8f:
cd:c1:4b:7f:a4:43:5e:64:58:d7:37:b7:7b:a5:19:
f9:e5:5c:cc:91:b4:9f:ba:30:55:fa:e8:47:25:24:
6c:75:6c:92:2f:01:c8:45:c2:20:3e:26:a4:e6:64:
0b:6d:68:c7:1f:25:e9:44:3c:ef:5d:3c:a4:f6:4e:
f7:85:d4:f1:3f:33:a0:33:f1:56:4a:d8:66:ba:6e:
49:dc:0c:d5:15:1f:20:4c:e7:5e:23:bd:40:69:fe:
af:ff:93:70:73:72:3f:c6:d3:d4:c5:d8:0e:68:ce:
4c:97:1c:86:63:6b:23:9b:68:22:de:5a:1f:b7:e8:
f9:9b:b9:1a:0d:21:af:dd:64:49:20:db:3d:18:01:
3f:c4:9c:cc:7f:a7:53:0b:2d:1a:e8:97:cd:11:a3:
a4:71:fa:0c:25:af:8d:df:ab:69:20:b8:f5:c8:4b:
3d:84:6d:51:5e:4f:b1:0d:d6:e7:19:44:4e:36:2e:
3d:52:f5:b2:c8:7a:c5:95:f2:c9:e5:75:a7:15:55:
72:c5:87:e3:67:38:89:9f:d7:31:6c:1c:0a:29:9b:
43:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:36:82:E0:63:7C:82:82:DA:8F:41:80:2F:D8:D1:DD:3D:DB:6F:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2fc21e75-035a-3493-8c78-e454ccac5f53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:20d0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:4a:54:a1:30:72:9b:10:aa:6f:e2:92:9f:5a:f5:66:69:3f:
4a:82:36:d8:58:5f:8f:73:e9:47:d4:85:6d:cb:f5:02:51:da:
02:2a:74:d6:9f:58:b8:aa:5c:44:b4:bf:18:5a:4a:91:b8:58:
97:78:40:72:7a:02:3f:9a:37:e7:1e:de:85:d0:be:6a:5a:fd:
df:e5:92:d0:35:25:f5:26:19:5f:65:83:be:ff:6d:2f:73:20:
d8:52:d1:e4:6e:56:ae:1b:07:e9:32:81:05:d6:51:4e:56:1d:
66:43:c7:cf:33:30:f9:da:9b:d3:2e:cf:b7:e5:bc:ad:db:23:
9d:46:b9:21:c9:89:99:41:cd:ff:50:31:7f:9f:91:8e:6d:5a:
28:09:ad:cf:ff:ea:52:11:73:77:1e:df:75:67:74:fa:3d:e4:
3e:91:cb:54:1e:13:04:c5:cf:c7:11:2b:33:0c:13:02:d2:ff:
cf:17:36:9c:9a:5b:8a:0c:5e:41:ab:1c:44:64:67:dd:dc:62:
2c:54:58:cd:ba:c7:97:10:5e:25:c4:86:0d:78:ff:6f:7f:31:
b0:64:3e:11:21:8f:ce:9f:ab:5b:f5:88:7e:4e:5c:dd:9b:59:
0e:6b:6b:a5:f9:1d:a1:d5:9e:08:b7:aa:5f:e6:2a:6f:34:cb:
d8:64:8f:44
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJpsg7T/5aVQj04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
MzNjMGU3NmQtYzgyZi00YjY1LTkxN2EtNGRhZDdmZjA5MWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv2hO6Egqqb0GWyTfupB9RVxsrNZa07UUoKJ
kc/0MQdOuZJmW9TkK7OmeI/NwUt/pENeZFjXN7d7pRn55VzMkbSfujBV+uhHJSRs
dWySLwHIRcIgPiak5mQLbWjHHyXpRDzvXTyk9k73hdTxPzOgM/FWSthmum5J3AzV
FR8gTOdeI71Aaf6v/5Nwc3I/xtPUxdgOaM5MlxyGY2sjm2gi3loft+j5m7kaDSGv
3WRJINs9GAE/xJzMf6dTCy0a6JfNEaOkcfoMJa+N36tpILj1yEs9hG1RXk+xDdbn
GURONi49UvWyyHrFlfLJ5XWnFVVyxYfjZziJn9cxbBwKKZtDLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGk2guBjfIKC2o9BgC/Y0d0922/rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmZjMjFlNzUtMDM1YS0z
NDkzLThjNzgtZTQ1NGNjYWM1ZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQCDQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEtKVKEwcpsQqm/ikp9a9WZpP0qCNthYX49z6UfUhW3L9QJR2gIq
dNafWLiqXES0vxhaSpG4WJd4QHJ6Aj+aN+ce3oXQvmpa/d/lktA1JfUmGV9lg77/
bS9zINhS0eRuVq4bB+kygQXWUU5WHWZDx88zMPnam9Muz7flvK3bI51GuSHJiZlB
zf9QMX+fkY5tWigJrc//6lIRc3ce33VndPo95D6Ry1QeEwTFz8cRKzMMEwLS/88X
NpyaW4oMXkGrHERkZ93cYixUWM26x5cQXiXEhg14/29/MbBkPhEhj86fq1v1iH5O
XN2bWQ5ra6X5HaHVngi3ql/mKm80y9hkj0Q=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:13:31 2025 by rpki-client