Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3a4a3439-41a2-3911-a5aa-8355af88db74.roa
File: 3a4a3439-41a2-3911-a5aa-8355af88db74.roa (raw, json)
Hash identifier: BhCCrbzH+oZpXG/ZZQ6TIj9JcbEmyy/aVLuVU73kgxA=
Subject key identifier: 2E:29:13:DE:B1:D3:B5:F8:03:D7:2A:25:05:7C:25:BC:5B:74:D1:D9
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802682C6325C94BCCC04AEA0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3a4a3439-41a2-3911-a5aa-8355af88db74.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:25c0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:82:c6:32:5c:94:bc:cc:04:ae:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=bc960a9b-5ff2-4c00-b241-0eac6f94e813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0a:88:cf:98:84:4b:94:d9:c2:cc:1b:4c:2c:
fe:7f:55:ef:e0:c6:00:01:64:4c:4f:ff:bb:3f:9f:
dc:ae:58:64:e9:35:8b:56:e8:9d:94:41:1c:8c:9b:
9d:e6:91:40:ee:02:51:18:ec:5e:05:bd:31:84:cf:
8e:43:07:6d:22:f4:d8:67:ec:3f:20:ba:89:d3:58:
e0:01:eb:7b:ef:76:01:94:5a:93:bb:7b:e4:98:ee:
c9:79:ec:d3:5a:16:66:50:fc:28:da:bd:5d:87:7a:
dc:8a:53:f0:93:d7:61:1a:28:d4:97:8b:90:d6:d0:
c6:97:4d:70:1c:f2:c8:01:1c:47:f2:51:7b:2e:79:
6d:70:e5:a8:58:db:2d:85:d3:55:ad:d0:2f:c8:d0:
3c:fa:ed:c9:1a:72:1a:b8:9f:84:2e:7f:12:49:9c:
e6:ef:9d:9f:48:fe:b8:a6:72:18:e8:e8:6d:77:1e:
43:89:a4:a8:e7:8b:a9:d5:d1:2d:1c:d7:79:10:cb:
f3:e2:0c:55:1f:98:64:44:d0:c9:ea:ff:65:57:79:
93:4c:09:8c:a4:91:14:b8:bc:8f:e5:71:d7:a5:b2:
a7:7b:55:ce:81:4e:3e:16:9a:74:4e:39:38:66:f0:
a5:f8:a3:03:2b:d5:54:e0:86:13:a3:b4:54:23:d0:
d5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:29:13:DE:B1:D3:B5:F8:03:D7:2A:25:05:7C:25:BC:5B:74:D1:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3a4a3439-41a2-3911-a5aa-8355af88db74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:25c0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:fa:d2:b9:34:27:3e:10:16:05:2e:1d:7f:42:59:4b:90:eb:
05:98:6c:14:2b:3d:76:b7:a7:26:39:6a:00:f5:3c:da:3f:4c:
68:1b:2c:1d:9f:66:d6:cf:0e:e6:ab:56:e8:2f:d2:a9:a9:18:
0b:36:aa:7c:cb:c4:18:cf:b9:1e:e2:4a:7b:1e:5e:b7:f4:ce:
c5:70:7d:e5:50:99:21:99:30:5e:76:cc:df:83:0c:d0:3f:4f:
ac:6b:c5:63:bb:b1:93:71:9c:65:89:75:78:e6:19:d6:85:42:
dc:6e:67:d1:05:08:84:63:20:51:26:bf:17:78:d7:a4:46:14:
51:e9:e0:ae:99:09:65:c7:59:02:31:78:6d:3b:6c:5f:5b:68:
7b:7e:84:bf:2c:c2:90:8c:d3:7d:57:53:61:b8:0c:88:31:04:
bb:41:37:75:b7:a9:ef:4a:26:6d:2c:04:76:05:d6:2f:87:e6:
97:27:1b:ef:18:bc:0c:16:89:bf:86:f5:8c:60:6f:c0:8f:0b:
d9:3e:90:6f:e8:a0:f4:1a:5a:f6:93:78:01:2f:72:2b:d5:36:
d2:e1:c1:0f:83:6d:4e:1f:83:77:95:a1:9d:73:20:fc:eb:9b:
b5:fb:fc:b9:3c:0b:91:13:17:67:be:5c:78:9d:2d:f4:e2:04:
81:8a:b3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:35 2025 by rpki-client