Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3ef40e5c-9c0a-3a77-ad91-6b7121d72cb4.roa
File: 3ef40e5c-9c0a-3a77-ad91-6b7121d72cb4.roa (raw, json)
Hash identifier: t9m7glCm/nu5CnD6SPn4doLBGqxNzPeZ3w6f2i5UW1s=
Subject key identifier: 69:0B:4B:98:23:49:57:ED:69:A1:79:15:7B:AD:46:D0:90:47:BD:39
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802698E248E9151929C7F380
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3ef40e5c-9c0a-3a77-ad91-6b7121d72cb4.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2d40::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:98:e2:48:e9:15:19:29:c7:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=c3d60b81-fcfc-49ae-81f2-2185797b2417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:71:c5:86:b0:c8:2a:96:9f:dc:1a:4f:c0:02:
27:cb:1d:13:3e:6a:59:8d:4c:85:64:82:d7:5a:28:
ce:41:49:57:e7:4f:43:e8:0b:16:1e:94:f4:5c:7a:
61:c4:9d:98:68:a3:6f:42:21:75:52:56:6f:f1:71:
14:cb:74:4c:89:e5:c4:f1:2d:4f:ed:ad:a0:14:c4:
b2:a4:39:0b:e7:fa:c1:b2:a8:31:d8:39:6d:93:4e:
76:f6:2c:1e:9a:65:88:0d:13:e8:fd:c7:d3:16:6e:
e2:d2:c7:22:e5:12:d1:17:8e:df:c6:e2:67:25:67:
6e:7b:fa:4b:8c:1e:68:2f:16:6f:b6:49:79:e8:8b:
c9:da:28:25:66:90:68:08:2d:0a:13:f5:e1:cc:df:
c6:18:c7:65:0a:6a:22:22:d7:1d:a2:62:42:94:c9:
ef:ba:a5:26:e6:7e:ce:42:c1:cd:a1:4f:16:e4:97:
50:43:4e:76:0b:45:24:a3:c1:e6:5c:a1:6e:8a:02:
17:ba:5e:c3:ca:2a:54:f4:15:86:4e:38:f6:b0:59:
ac:bc:9a:58:63:e5:4f:96:9e:7e:92:34:59:f3:98:
88:e7:db:78:0d:64:6e:12:af:d5:2d:43:3d:31:10:
41:ba:24:b3:cf:c9:78:a7:85:fb:8c:58:bd:75:27:
75:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0B:4B:98:23:49:57:ED:69:A1:79:15:7B:AD:46:D0:90:47:BD:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3ef40e5c-9c0a-3a77-ad91-6b7121d72cb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2d40::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:b3:16:46:d9:c0:8a:9a:60:83:77:21:38:b7:a8:f6:89:23:
5b:39:f9:03:d4:16:2b:c0:7a:b5:ea:a4:4c:6d:40:53:8c:fc:
23:a4:ae:ff:44:42:45:f5:54:d6:c7:43:ac:0f:2d:41:10:b7:
e4:25:fa:eb:ce:a8:18:4d:64:a9:e9:30:79:cb:c9:60:b3:5a:
43:65:4d:59:51:88:9f:88:4e:a8:31:0c:3d:94:c1:7f:35:8a:
bd:64:62:87:9a:9a:76:d6:75:81:ba:08:42:aa:40:4f:ed:3f:
4c:42:e4:ee:75:a1:37:84:73:53:2e:90:fc:54:25:72:30:a9:
a4:da:a6:12:49:62:91:26:a4:37:74:78:9d:04:2a:16:6a:57:
82:35:70:47:2c:ba:15:ae:87:d1:05:c0:b9:7f:9d:c5:e0:c4:
b4:fd:08:02:d1:1a:9a:9c:11:b0:17:11:4d:ab:c3:30:c2:f7:
19:e7:43:8f:14:a5:ae:90:0e:1b:91:7c:1e:d3:0f:3c:a9:bf:
8c:49:11:a7:a7:ef:b4:c8:d8:93:d5:0c:83:bd:75:7f:92:c8:
84:4e:8c:bf:15:be:aa:f7:df:a8:1e:49:bc:61:aa:ef:cf:fc:
e9:20:d0:49:bc:03:db:4b:04:a8:a6:2e:ae:ab:50:7b:b2:b9:
88:3d:cf:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:55 2025 by rpki-client