Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/38960648-3f07-3289-b62a-f0131b28ad69.roa
File: 38960648-3f07-3289-b62a-f0131b28ad69.roa (raw, json)
Hash identifier: 2m8nWG13R4uQSw2Ng/YmSIpUS0mdCqb/Z0klClhSHmU=
Subject key identifier: 82:FF:EB:D8:0B:4E:5B:D2:5A:56:5F:1A:19:6D:93:C4:52:11:CB:6D
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802661097835DD7F33811F80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/38960648-3f07-3289-b62a-f0131b28ad69.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2920::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:61:09:78:35:dd:7f:33:81:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=2c25e172-86b0-4adc-88ee-6f75263ce824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c1:bf:af:28:a9:79:86:ee:91:c9:6d:99:e6:
db:40:b5:0f:1b:44:06:ad:48:c8:ac:2c:79:f0:10:
13:00:fa:52:cb:91:a5:d6:70:c3:58:95:eb:e6:aa:
0e:8b:f7:17:cd:06:bf:5b:05:ee:13:71:27:9b:ef:
5c:4a:e1:f4:e3:71:b7:da:9a:df:45:2f:80:f9:62:
ea:9f:75:8f:12:f8:39:56:57:b2:3d:29:19:8d:60:
2e:5d:05:08:d8:c4:d5:c3:dd:5f:e3:a6:1b:da:eb:
cd:e9:51:b9:6e:20:de:eb:b5:e9:26:22:2b:6e:e5:
e2:93:9f:a4:09:e2:a3:65:bd:90:9b:93:e6:38:76:
ee:49:2e:2a:76:b9:ca:96:a2:af:5b:88:74:60:ed:
a4:27:c0:10:e1:f4:78:35:05:c3:7e:f1:4d:ab:56:
03:5d:99:7f:d8:53:7a:5b:f4:78:57:d3:f0:0c:13:
06:11:b2:75:d6:24:38:b4:46:d7:d1:7e:5a:12:3d:
35:e5:33:d0:ff:d4:38:44:a8:2f:71:d2:8d:95:6f:
fb:52:e8:e9:67:54:0c:51:75:78:0b:11:f8:93:f2:
3b:50:e4:da:ae:5b:7b:2b:e5:30:d6:4c:ec:4a:ce:
37:6e:38:40:98:61:a3:ef:9f:2d:05:52:dd:b2:08:
ba:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FF:EB:D8:0B:4E:5B:D2:5A:56:5F:1A:19:6D:93:C4:52:11:CB:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/38960648-3f07-3289-b62a-f0131b28ad69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2920::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:71:59:b1:c3:3f:3a:0b:f7:77:33:60:cf:5b:fb:42:71:29:
42:df:81:14:f7:4c:1f:24:28:59:73:ba:75:99:d2:2b:8e:ac:
c3:58:7c:15:72:2d:a7:1d:66:09:34:78:cb:70:49:7a:5e:0a:
2e:7e:df:35:bf:2d:85:81:c5:4e:ae:4e:56:a6:1e:3d:36:31:
d6:51:81:84:00:da:82:46:7a:77:a5:ca:aa:34:fa:a3:dc:1a:
f4:a5:9a:69:83:d3:9d:3f:e0:b2:c3:a1:45:24:63:4b:b1:72:
07:25:a2:96:8b:f4:b9:02:f4:6f:3d:84:d9:47:9e:62:36:a1:
7a:3e:c9:51:8a:a1:59:8f:ac:6f:8a:34:8c:64:f9:14:34:3f:
a0:9f:aa:40:35:e2:be:a9:80:21:85:d6:2e:86:06:87:fd:c2:
86:9c:51:e8:e4:73:f8:19:fb:25:91:05:4e:52:44:81:80:2f:
8e:00:f0:c3:8d:a1:22:0d:ed:44:fd:75:63:24:99:4b:eb:b8:
98:9c:9b:b8:8c:3f:63:85:ed:d4:fb:69:63:e7:92:9a:7a:d3:
06:a5:d0:18:f4:23:fa:8f:fe:a3:1a:d8:de:58:79:94:05:0d:
0f:df:00:54:28:16:2c:9d:80:1b:1a:9b:be:35:b9:33:d3:f2:
b3:a0:5b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:29 2025 by rpki-client