Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40d901aa-c539-3bbc-ba18-6a50bac90801.roa
File: 40d901aa-c539-3bbc-ba18-6a50bac90801.roa (raw, json)
Hash identifier: dalGsMslgih2Q2KBDY7+kjv9pq5gMxUSp/rNA7dqRWU=
Subject key identifier: 10:EA:7C:10:2E:9F:2D:D7:E6:41:01:95:79:90:0C:E9:F5:27:AC:B6
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802676921A688B61AA357D00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40d901aa-c539-3bbc-ba18-6a50bac90801.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2d30::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:76:92:1a:68:8b:61:aa:35:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=9d7c9500-8544-439d-ad68-354dddbc030f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:03:f3:33:40:dd:88:e2:70:e5:2d:59:f0:60:
a2:fa:a2:80:39:77:35:fa:48:d1:8f:4f:08:ae:bd:
4d:1b:7d:f5:7f:87:76:91:80:95:28:82:fa:95:31:
d5:80:36:e7:49:13:03:df:0e:6d:12:85:08:60:d3:
32:80:79:3b:f8:f8:6d:d5:4d:8d:35:19:46:99:8a:
fd:78:08:18:5b:17:84:f1:6d:4d:11:85:c5:4f:2f:
80:b7:4c:27:cb:90:11:a2:38:bf:c0:03:86:b7:33:
ae:30:ae:72:c7:3c:10:64:30:21:d8:d5:f7:cc:7e:
25:34:91:c0:aa:c0:5d:e6:e6:56:83:50:7f:44:73:
bb:44:0d:16:9c:b2:20:ac:9e:c0:56:a6:fd:62:bc:
0c:ae:92:d9:8b:b5:25:83:40:42:d8:e7:ea:cf:48:
d5:ac:bf:cf:2d:d5:f9:97:45:4a:d6:7d:ec:a1:38:
4e:1c:20:f6:d4:f7:e6:0e:bf:ed:e6:7f:71:ac:7f:
ab:b9:b0:f1:a3:4e:85:72:20:df:72:42:1c:b7:23:
24:5f:1e:23:61:4a:d6:6c:ed:2c:72:49:d0:b4:02:
04:92:b4:37:48:77:cf:49:eb:42:96:ee:3f:b1:31:
19:d2:9b:10:ea:38:ec:18:1f:e6:26:b3:0b:37:b1:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EA:7C:10:2E:9F:2D:D7:E6:41:01:95:79:90:0C:E9:F5:27:AC:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40d901aa-c539-3bbc-ba18-6a50bac90801.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2d30::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:b2:27:b4:17:b7:d1:e0:64:a3:a0:2f:c4:85:53:25:55:a1:
0d:b0:c5:5a:0d:6e:36:91:4d:2e:a7:f9:ec:26:5b:66:c9:a3:
6b:8a:37:54:71:9e:08:05:bf:14:f6:e0:75:e5:2a:d6:89:2b:
b4:54:ea:e1:3a:0a:31:5d:8c:86:93:2e:e8:7b:17:fb:d6:a8:
8b:59:e0:31:1b:82:b4:02:fa:af:91:7e:2f:1b:f1:48:98:2a:
0d:b0:d0:e8:65:b7:3b:ff:4c:3b:b3:ae:b4:78:48:23:a0:89:
59:30:e7:46:22:d6:76:fd:ac:82:6a:66:f9:80:c7:7b:ae:9e:
8e:a1:66:01:39:d4:37:be:a2:0f:de:44:43:6e:8e:f8:b3:80:
fc:5e:6a:3c:18:a0:81:a5:a2:78:40:1f:6d:da:a2:2a:8f:8b:
b0:a0:8d:18:96:ea:54:42:ec:cf:cf:aa:34:ad:53:df:52:60:
a9:08:78:b7:b0:d8:af:46:56:b5:1d:ff:1b:f8:f1:c7:1b:1d:
dc:4a:08:07:e8:66:53:0c:2c:09:47:40:47:53:6f:d7:ba:8e:
97:bd:82:b0:67:29:e0:d4:53:66:c4:a2:e0:e9:94:c7:29:d5:
cf:e2:b4:f5:58:fc:60:21:99:09:48:4e:e7:8d:be:e4:ad:1d:
20:12:f6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:27 2025 by rpki-client