Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4cae9ba3-09d6-3830-9d2d-f033d196ff30.roa
File: 4cae9ba3-09d6-3830-9d2d-f033d196ff30.roa (raw, json)
Hash identifier: h0TWoUlwuhPW8wJ8AqfJeQIilehC+UH14cwpxTNuqlY=
Subject key identifier: B1:76:EB:70:D2:FE:1E:0B:48:63:EB:BF:85:89:53:CA:EB:5F:E4:78
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780268DFB8780FA090217B522
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4cae9ba3-09d6-3830-9d2d-f033d196ff30.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3ba0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:8d:fb:87:80:fa:09:02:17:b5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=8db309bb-224f-464b-abf1-2a08d5937abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2c:d1:98:6c:2f:b8:0d:69:a6:1f:fd:b1:41:
fa:3b:c4:fc:11:f4:1e:95:36:1f:f3:a5:8c:86:74:
97:2c:7d:44:ed:79:01:b2:ac:1b:66:69:00:69:db:
c2:1d:d9:52:da:ea:4b:4c:05:51:42:e6:2a:05:6c:
40:a8:78:0b:8f:e0:42:98:a7:bf:12:9f:9d:03:ae:
53:9e:76:be:0b:03:d4:2c:c5:fe:84:56:ee:7e:cf:
8b:85:16:8c:99:6c:96:2e:ce:b5:b6:b3:e6:2d:cd:
8f:1a:a4:8b:d4:65:95:d2:96:fb:33:dd:f7:8f:de:
ee:a4:6d:67:ba:77:4c:f7:e7:53:5b:e7:16:9a:b4:
47:3f:7c:27:d6:d3:f1:fa:98:d7:a5:7c:59:37:11:
4e:a5:02:f9:17:4e:e2:fd:f7:f1:67:0b:d4:83:f8:
8f:15:4a:7b:c7:16:7f:dc:1d:43:a3:85:64:70:60:
d7:84:49:86:3b:1a:2b:39:1c:3e:9d:00:73:3e:4b:
0b:08:12:fd:69:d3:56:ee:ea:af:48:89:3b:46:1e:
63:79:b5:7c:fb:bd:b8:04:03:50:00:7b:7b:6b:aa:
c8:cf:aa:60:03:30:80:5f:2c:c7:2f:15:76:01:7d:
87:84:cd:04:1f:21:d9:3d:17:4f:f1:fd:a6:19:ec:
1e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:76:EB:70:D2:FE:1E:0B:48:63:EB:BF:85:89:53:CA:EB:5F:E4:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4cae9ba3-09d6-3830-9d2d-f033d196ff30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3ba0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:38:29:9d:3a:74:13:d3:f3:5c:b7:09:cf:54:a3:c8:4f:75:
66:f6:12:fe:7a:a3:48:74:7d:94:f5:bd:a5:cd:b9:b5:e5:6f:
77:b3:9e:1b:9f:34:92:cf:cf:2a:c7:ba:ea:19:44:9f:7e:df:
af:fa:f3:f2:fe:94:0f:28:5b:79:c6:da:96:ac:01:de:56:5e:
4d:0e:b6:f0:75:f5:2f:09:d3:1d:14:89:66:f3:7e:6f:f0:5e:
13:b0:d1:37:7d:b9:6a:7a:e1:69:c5:eb:e7:24:26:f4:07:60:
b7:07:95:1e:a7:c5:9b:ac:15:e9:c0:0c:3f:41:51:75:9f:08:
34:38:d6:04:f0:e4:e2:c8:61:44:c7:36:47:1d:4b:9a:c4:eb:
a0:70:b6:2a:aa:37:c7:55:dc:58:6f:9e:36:aa:b9:13:58:ee:
77:f2:68:aa:3f:23:2e:4e:bf:15:33:58:e2:9c:c5:b4:e2:06:
c7:88:33:5b:61:ac:b9:59:e5:e4:cf:29:fc:1c:6c:51:20:f1:
f3:bc:87:d9:e5:24:f4:82:01:d1:5c:38:32:5f:c4:b8:e4:17:
d5:0a:83:50:b4:54:f1:97:de:c4:f8:63:67:27:b5:08:47:e5:
97:63:91:a7:16:56:6f:c2:2b:72:ca:29:ca:26:49:cf:c3:78:
6b:b5:04:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:28 2025 by rpki-client