Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/38b3e8c7-a8fd-34c2-82f5-947303d04a71.roa
File: 38b3e8c7-a8fd-34c2-82f5-947303d04a71.roa (raw, json)
Hash identifier: MniXApgw4+Jaq0V9z/D05RUiY2eog6rkgOkFMOPyiO8=
Subject key identifier: 47:4E:94:4D:58:8C:4A:1C:5A:D2:CC:D0:D7:C0:87:63:AB:79:28:60
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802666B1F0A4472DED16B7C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/38b3e8c7-a8fd-34c2-82f5-947303d04a71.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2bf0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:66:b1:f0:a4:47:2d:ed:16:b7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=936a5d0b-073c-441f-bd2b-8d2b0503249d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:91:e4:2b:93:8c:c9:80:25:55:99:5e:29:
ef:8d:62:2b:bb:5c:02:40:b9:7e:bd:2b:ee:be:d2:
c1:16:91:55:75:58:45:b6:20:49:95:6b:02:6f:9c:
9a:48:c8:c1:ab:9c:c5:61:6b:df:c7:75:95:6a:29:
f0:d2:83:2d:a6:98:5b:90:9f:33:be:08:cc:82:83:
bf:ed:6f:2e:f9:45:ec:29:dd:16:19:9f:96:6d:ba:
b9:08:ad:ca:a8:fe:4d:7e:0d:6b:10:d8:16:40:96:
6a:64:a5:17:d2:5b:f9:45:90:1d:2c:9b:b5:83:e4:
43:39:64:ae:75:eb:81:4e:ea:3f:3e:c3:c8:51:e3:
bd:bf:d9:21:5f:83:f0:e3:76:e2:bd:42:8b:3f:c9:
72:b3:62:71:fe:e3:c1:20:13:42:14:e8:b2:fe:82:
18:9a:d0:67:55:5a:01:27:c7:95:bb:29:bc:38:20:
e8:ed:82:04:23:1b:66:a2:d3:bd:8b:2c:a1:50:28:
03:07:4b:06:34:b3:0a:09:43:09:a6:4a:16:68:25:
21:16:00:89:84:86:cb:4f:2f:75:0c:bd:77:e4:e9:
a6:ee:73:6d:36:77:8e:68:03:ef:c2:37:b2:6a:99:
33:e9:b2:4b:a4:06:b3:bb:7b:67:e3:b6:41:b7:a9:
47:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4E:94:4D:58:8C:4A:1C:5A:D2:CC:D0:D7:C0:87:63:AB:79:28:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/38b3e8c7-a8fd-34c2-82f5-947303d04a71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2bf0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:1d:cf:19:4e:a7:07:9b:46:e8:a4:6e:70:f9:46:2f:de:71:
d5:6f:31:b5:f9:72:0b:7b:10:99:ce:65:0d:44:3d:f9:1d:d0:
a3:72:a4:4b:9a:05:60:ea:71:f0:59:74:84:c1:96:06:e6:df:
af:31:2d:67:c4:d7:bf:b5:3e:ca:a6:1b:61:40:7d:25:74:4e:
33:78:65:36:24:96:a5:7f:f3:d2:3d:62:05:ca:bd:77:b4:8f:
5c:7a:d9:f1:33:1b:11:be:8d:77:0f:20:47:7a:f7:fc:89:6f:
27:3d:e8:c2:05:d7:62:1d:b5:f4:be:ad:31:57:95:9c:f0:40:
04:96:d6:86:64:b9:41:50:37:5d:06:9f:9f:17:ca:d4:48:09:
75:1d:79:99:eb:26:e1:c6:cd:01:88:81:24:a8:68:7e:10:7d:
47:ed:39:34:f8:a7:18:82:11:0e:00:a3:e0:3f:df:ed:dd:24:
63:07:c4:ea:74:03:40:70:dd:76:6d:50:07:b0:38:e4:75:34:
ff:d5:58:97:5c:64:32:99:a4:9e:52:5c:5b:f1:5d:ac:4e:e6:
2f:1f:84:76:e2:1a:e2:45:97:0d:be:d4:29:3f:f4:1b:35:54:
a0:0a:c9:d9:4c:25:dc:46:61:3e:a4:56:1a:e8:e6:2a:99:51:
0c:49:f5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:21:29 2025 by rpki-client