Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3fefc4e3-f28e-3eb3-8eab-b3f94f421ee7.roa
File: 3fefc4e3-f28e-3eb3-8eab-b3f94f421ee7.roa (raw, json)
Hash identifier: MbHKyL3fKlbYmNE8/vwwp2JN3vJpZcoAF5EPbxvcKQc=
Subject key identifier: 50:4F:E1:1D:50:85:19:5F:DE:22:13:A7:D8:E9:73:65:96:B6:FB:59
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858478026833ABFAAD66CA71C8000
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3fefc4e3-f28e-3eb3-8eab-b3f94f421ee7.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3160::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:83:3a:bf:aa:d6:6c:a7:1c:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=82704a4e-eca9-4a66-a315-307fa5887afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fa:e5:98:88:89:14:08:1c:95:17:16:8a:ad:
30:e8:ad:d9:af:48:63:7e:cc:8a:ad:1a:5a:4f:9b:
8b:af:0a:65:83:f8:e6:b4:75:3a:af:6d:91:af:ff:
4a:83:e9:ec:6c:42:f9:c8:a9:51:cc:10:1a:e3:de:
03:e7:52:4d:eb:8d:d9:fd:bc:2d:dd:03:d3:fb:6f:
af:c6:30:5a:59:74:1d:4c:54:cf:88:6b:e9:9d:4d:
85:0d:bc:2e:8c:3a:ff:5f:39:c0:83:d0:11:1d:98:
6a:e7:9a:f3:a2:e2:3d:85:9c:5b:4d:2f:28:89:b2:
e4:ec:07:1e:f9:05:9a:d9:11:de:c9:6f:60:e1:70:
e8:4d:0c:9a:e3:3e:08:1f:e3:53:2a:ac:d6:30:33:
c0:32:18:bc:d6:99:55:76:96:3c:51:16:61:35:96:
5d:00:23:d4:ef:27:97:36:c8:0e:4a:82:22:42:47:
18:18:e3:87:63:b0:30:4b:43:2e:07:41:44:a5:6c:
df:1f:6d:06:ac:f1:66:3e:9b:ae:8e:9e:47:65:c5:
31:46:a6:44:38:1a:fa:73:7e:8c:23:35:fa:87:92:
53:e4:be:96:a7:6e:c9:96:40:f0:80:6b:e3:86:71:
e8:8a:4d:53:c0:a1:db:f7:3b:a4:66:39:db:fd:b0:
8c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4F:E1:1D:50:85:19:5F:DE:22:13:A7:D8:E9:73:65:96:B6:FB:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3fefc4e3-f28e-3eb3-8eab-b3f94f421ee7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3160::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:c5:76:53:7f:91:2d:1a:d1:c3:e2:32:ac:3a:45:b0:d3:ad:
77:44:91:ed:ab:ab:19:fa:98:92:23:31:db:32:49:90:f5:ff:
2e:a2:2d:77:86:b6:33:db:a9:75:a2:41:4b:32:51:cc:a6:1a:
71:b1:87:1f:4a:53:d4:1e:4e:e9:f7:02:fb:ff:e5:2f:d4:49:
a6:da:63:91:f0:73:34:c8:6c:f1:63:12:97:a3:e7:1d:81:8f:
db:c6:d7:c3:8a:de:19:e0:8f:2d:61:8c:0b:10:fb:ae:0a:2b:
14:38:6c:fa:b8:3c:50:73:6e:a4:b2:24:52:d5:73:ef:d3:fc:
7d:3d:55:fb:ee:90:b5:59:92:08:f5:ba:76:c5:74:3c:3e:8e:
3c:88:8f:18:07:40:98:8f:3c:f7:56:dd:7b:c6:ca:00:20:29:
dc:13:ac:3b:97:e0:8e:49:a8:ca:b3:ea:9d:e6:a9:47:af:93:
1d:a5:7f:65:ac:65:f0:f0:04:58:b4:d9:d7:16:42:e3:07:80:
73:0b:33:3a:1f:40:de:c2:b4:bb:c7:8e:82:44:b7:d1:35:3c:
74:b6:d0:69:3c:8a:8b:a4:8b:25:9f:01:77:c9:35:f1:67:6d:
39:78:58:d5:af:17:bd:97:c5:cb:c2:8b:80:5e:da:3b:54:15:
a3:15:5f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:05 2025 by rpki-client