Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/43970bdb-c5e3-3665-b8f5-5c9018e914f0.roa
File: 43970bdb-c5e3-3665-b8f5-5c9018e914f0.roa (raw, json)
Hash identifier: kXVkhKRq4g0k/wU39AstD1WE8Rz6dxkBnp6bMqpjh58=
Subject key identifier: A5:B3:72:DD:CD:85:20:9D:DD:93:18:F6:F4:D9:43:B2:23:6E:E5:DD
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858478026681841C13520906BD848
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/43970bdb-c5e3-3665-b8f5-5c9018e914f0.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3790::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:68:18:41:c1:35:20:90:6b:d8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=333e33df-8a70-4ac4-9121-f711843355b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:29:81:9e:bc:70:4b:e4:ef:1b:07:45:59:
01:f5:3a:78:82:ba:ce:03:a8:59:77:db:d4:37:66:
1b:b7:55:1e:94:5f:8e:02:b5:38:35:95:49:b7:60:
d5:d3:eb:71:7f:a0:09:f0:5b:2f:95:a9:24:ff:28:
14:48:80:10:8a:7c:43:0f:68:f8:24:3b:cb:b5:15:
8f:5a:ec:1c:69:35:7c:dd:5b:df:d5:0e:42:e0:4f:
9e:d7:f6:b4:31:9b:9b:a3:77:2d:35:d9:07:c0:32:
45:2d:80:12:10:f8:ce:57:5c:97:cc:ae:bf:29:df:
c7:dd:02:38:6f:ca:ca:aa:10:6c:cf:db:32:61:95:
ab:44:05:f4:90:cf:3e:54:3b:04:3e:71:d6:95:68:
f9:74:7f:13:46:d8:58:d8:d0:3f:ad:e1:20:da:c6:
a0:84:11:3c:e5:a6:46:cf:c3:a9:af:7a:0f:65:f7:
c4:ee:49:24:1b:5e:0e:64:a7:4e:ee:3b:d4:3a:bb:
79:65:d4:e8:d0:d8:59:f1:2b:1d:06:1f:88:bd:c5:
97:96:b0:cc:9a:d9:52:9a:38:8c:5a:ab:46:db:67:
f9:db:27:f5:3a:0b:b0:7c:55:ed:fa:3e:53:58:c9:
09:50:f5:e7:3f:54:86:3c:90:de:37:16:ba:3f:b6:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B3:72:DD:CD:85:20:9D:DD:93:18:F6:F4:D9:43:B2:23:6E:E5:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/43970bdb-c5e3-3665-b8f5-5c9018e914f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3790::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:09:0e:e6:82:b1:74:c2:83:ea:0f:99:ad:7d:87:d8:94:22:
03:f0:0a:53:b2:80:a8:ab:53:ba:71:bb:91:7b:e1:5c:78:a2:
c5:1c:06:dd:ed:6a:00:c2:72:a6:ef:f5:61:60:57:68:33:3d:
f3:38:db:b1:1a:bf:aa:67:31:1b:0c:1d:97:1d:ae:47:6c:19:
dc:fd:77:40:ac:af:aa:a7:4a:28:2e:a1:f9:8c:12:04:1c:70:
48:85:ce:bd:78:3d:69:7e:f6:4f:f8:86:b5:6b:0d:06:ab:3a:
79:94:c4:6b:eb:39:72:0f:9b:e4:4a:36:ca:54:f2:56:37:9a:
c0:62:43:28:28:73:6c:83:1a:49:b5:5c:29:34:47:c8:1d:b1:
1f:79:56:4e:b7:37:cf:8f:92:26:b9:87:aa:82:b7:b4:c8:6d:
7f:59:66:b5:83:3f:30:0f:45:17:51:bd:e6:7f:99:f6:03:3e:
d3:72:eb:6e:39:5a:b1:91:eb:18:09:77:78:8f:94:1d:92:51:
f1:13:72:b4:93:3c:e9:d4:01:4f:88:f9:d2:46:88:7c:68:98:
37:54:2c:2f:63:a5:dc:5d:93:85:52:7e:3e:c1:60:39:ef:e9:
7f:ee:77:2e:28:3d:d1:58:08:a6:73:e3:89:01:1b:74:c2:a4:
6b:0f:1f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:52 2025 by rpki-client