Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3be852f7-6d11-3485-90ad-4d1309fe6efe.roa
File: 3be852f7-6d11-3485-90ad-4d1309fe6efe.roa (raw, json)
Hash identifier: LEXLPSiwCGtZtzLjcy2XEX212yz41gnJvnBKxc8+AxU=
Subject key identifier: EF:DE:85:B3:43:20:5E:72:8C:B8:C8:8D:6F:0B:B8:4B:B5:AD:B6:46
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780268D1D471256590CCCE080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3be852f7-6d11-3485-90ad-4d1309fe6efe.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:32b0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:8d:1d:47:12:56:59:0c:cc:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=50ea3fd0-772d-4758-ac69-0e3c7d71ea45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:72:81:c7:80:bf:a4:e4:f0:aa:b4:6f:17:e3:
d6:7f:aa:24:f2:5b:b5:ac:c8:fc:ce:08:01:08:0d:
67:22:df:d9:c5:42:28:cc:02:63:bf:ac:0d:b6:2a:
8e:24:52:c8:5f:4f:4b:a7:8e:5f:9e:ce:97:04:1f:
68:57:fb:8a:fe:1c:06:20:56:bb:1c:11:f6:6c:da:
f6:e0:fb:bf:9d:32:2f:90:54:c2:93:5d:b0:4e:89:
b5:71:02:50:e5:72:8f:38:d1:3c:68:bb:2f:44:32:
03:3a:5d:a7:0d:04:30:0b:b2:9a:53:2e:9f:3e:8e:
af:3e:a6:9c:b0:a9:d8:9b:48:60:33:8e:bc:75:79:
61:4b:00:7a:52:1a:7b:b7:f1:f7:91:4f:ae:83:b3:
fe:1a:07:00:5f:a1:91:2b:be:ce:3c:7b:1f:1f:59:
3b:28:a2:bf:c0:3c:ff:5c:bd:03:46:05:ea:cf:5c:
45:2f:00:45:ca:46:a0:86:f7:21:09:0f:67:b4:91:
1d:07:d5:90:ed:13:43:62:ff:81:1c:f2:1f:53:cd:
b3:83:ff:26:e6:57:82:0a:ae:5d:cc:e8:32:42:05:
e3:3b:ab:e4:25:ee:23:09:8f:89:c5:39:cf:46:e7:
63:cb:c1:c4:8a:a4:d4:32:bd:88:c2:b8:5a:02:52:
dc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DE:85:B3:43:20:5E:72:8C:B8:C8:8D:6F:0B:B8:4B:B5:AD:B6:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3be852f7-6d11-3485-90ad-4d1309fe6efe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:32b0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:d0:dd:b8:ea:4d:97:39:5e:08:f0:42:9c:9c:04:ed:b0:2f:
c4:f3:d6:86:c5:8d:27:1d:d6:fc:78:5b:b5:ab:0b:a9:fb:12:
85:7e:30:47:b0:ee:67:4f:d9:6f:a6:18:16:58:72:53:ac:25:
2f:0a:90:ce:6f:f9:d8:c5:d1:26:5b:76:06:e0:11:7a:9c:36:
f1:a7:a9:50:b4:1c:f4:c3:5e:02:dc:f8:36:16:f2:26:20:be:
df:99:f2:06:97:e5:9a:98:d9:23:c7:55:0c:a7:8d:fe:82:b0:
1d:7a:c5:f2:00:cc:52:16:9e:3e:35:21:e7:18:fa:1c:34:f5:
64:6e:95:15:89:0c:1a:6c:51:3b:b4:b3:1a:7b:17:6e:cd:bc:
37:20:08:7e:a2:82:95:04:96:5f:da:b2:3d:8b:99:42:88:75:
32:c7:d1:2d:95:6d:14:8a:7c:f0:64:89:ed:68:a8:be:10:a9:
c1:cc:5d:6f:82:fa:19:62:b4:57:d4:96:f4:11:77:e2:d8:30:
3c:40:56:fc:4d:97:6b:c5:0c:15:6f:c3:67:cf:c3:51:66:8e:
e1:f8:d8:c4:ed:7e:06:68:ef:46:43:fd:e3:f7:a8:4a:0d:1f:
8d:60:e6:97:1c:b9:50:4d:67:44:dd:bf:b5:46:b7:3c:a6:b3:
9c:d7:a9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:06 2025 by rpki-client