Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/33855ce5-a093-3db2-8290-0965a915a9e1.roa
File: 33855ce5-a093-3db2-8290-0965a915a9e1.roa (raw, json)
Hash identifier: U6Cbmj8VP7BTFmbTMukWBxpT/dtSO/Y0OE7Qp9o7fco=
Subject key identifier: 3A:A9:0F:62:F8:5C:51:3B:DE:79:E5:66:E1:E2:6B:AD:5B:B8:3F:B4
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780268FD32ADFEE52444B5980
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/33855ce5-a093-3db2-8290-0965a915a9e1.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3c50::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:8f:d3:2a:df:ee:52:44:4b:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=e210ad08-fffc-4ea5-ab39-c03cdc5fcc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:b2:9c:e7:73:df:61:06:1e:e3:26:4a:47:
4b:7c:39:b5:1a:80:f6:26:c0:62:b8:9f:c1:a2:9d:
cb:e8:a7:5f:70:17:35:c1:e6:bf:e7:61:62:ff:1d:
43:28:40:3c:fc:6a:a0:51:4b:40:0e:cf:0f:f5:40:
2f:0f:a4:6a:2d:35:b9:39:89:d3:df:c4:36:b3:c6:
30:06:ba:3c:5f:7b:17:5f:d0:1d:cd:14:a0:11:f6:
6d:14:a7:4e:2d:9c:49:b9:c6:18:80:51:ba:3c:8b:
6e:6f:21:be:5e:bc:16:ad:5b:c5:78:05:a6:fe:92:
52:5f:9d:c9:3e:f9:ac:0a:ee:f8:d9:09:6a:ac:c1:
e5:e2:a2:3f:34:7d:80:6a:30:0b:40:47:65:7b:87:
2c:d8:52:6e:bf:83:04:1a:e0:36:b1:88:2e:b5:dd:
51:4f:61:8d:80:bf:a3:92:2d:3f:84:25:2c:0a:69:
13:30:35:f1:5a:59:ae:fd:e0:22:6b:ca:fc:87:63:
16:e9:71:5d:52:65:11:e6:52:76:36:75:09:84:de:
74:6b:3a:6d:5b:55:e6:5b:e8:36:46:11:1e:b2:94:
a3:07:98:f0:f6:f6:13:de:ae:d3:17:c4:d4:fc:4a:
1a:18:ec:c5:49:ac:91:ae:6d:31:16:06:6d:ec:a5:
75:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A9:0F:62:F8:5C:51:3B:DE:79:E5:66:E1:E2:6B:AD:5B:B8:3F:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/33855ce5-a093-3db2-8290-0965a915a9e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3c50::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:bb:00:23:39:45:70:58:af:3a:f9:32:c6:cd:fb:a1:8a:67:
e0:3d:d6:69:15:c7:45:01:37:7f:fe:a7:65:2a:af:fe:8f:54:
5f:fb:5f:71:17:40:0b:69:0f:dc:d2:1d:7f:36:70:a6:d1:86:
40:4a:77:76:e8:a6:df:cb:3b:94:97:6c:76:5e:4f:f6:62:27:
ce:6b:93:e3:4c:7a:80:92:70:de:c5:39:62:aa:b8:bc:7e:0b:
1d:fc:49:5c:3f:1c:96:48:53:40:d5:a4:19:59:e1:f8:01:4c:
69:61:fa:29:81:08:d2:fd:04:d6:ee:06:6d:df:96:8a:63:52:
23:67:d9:a7:c2:4f:ab:db:d8:54:68:ac:d1:c2:ce:87:e5:2a:
92:44:0b:60:ef:ee:55:5d:5d:1f:5a:84:23:99:77:5b:c7:02:
8e:42:b5:35:9b:59:10:71:de:bc:6c:c7:dc:a6:e0:6d:cb:71:
40:3e:c2:3b:64:44:41:13:11:a0:00:c7:e8:9f:49:a9:44:f1:
91:67:41:e7:e2:38:48:33:c0:69:da:11:b2:71:38:57:11:63:
f2:72:4e:9b:10:e2:2e:50:ad:b0:86:c8:fe:5c:96:b1:91:f3:
ad:b8:60:0e:16:43:5e:97:45:c6:92:4b:b7:16:a2:2b:d6:1c:
17:a9:ca:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:21 2025 by rpki-client