Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f8cbe44-e4b2-3124-85c6-e7c51a4b67a7.roa
File: 4f8cbe44-e4b2-3124-85c6-e7c51a4b67a7.roa (raw, json)
Hash identifier: fGNYDeLneQtOHWT7u9RRf/hFjqVW+336g1Pm513kbl4=
Subject key identifier: 3F:53:CC:FC:34:47:E9:6B:AC:C9:8C:F8:A2:04:B5:74:EE:44:EA:27
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780267225A2EB340CD1B6DAC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f8cbe44-e4b2-3124-85c6-e7c51a4b67a7.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2960::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:72:25:a2:eb:34:0c:d1:b6:da:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=a29a1a59-4793-4156-835d-3169160a4e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0e:57:68:f3:d8:ec:86:25:10:83:a0:2e:4a:
f7:94:2f:97:ea:ab:ec:98:be:a5:fd:55:86:91:d4:
7b:c9:d5:aa:ef:00:51:d2:da:df:3b:6f:06:52:2d:
82:aa:a4:0b:57:dc:93:6a:30:a0:a6:d1:da:e4:7c:
c1:c5:60:4e:af:f6:d6:33:4c:f2:be:f2:e8:8e:b4:
c4:62:e1:c4:d7:32:81:12:d4:97:95:30:5a:02:63:
18:e1:44:06:05:01:40:64:04:98:b4:e0:63:2d:71:
f6:01:32:bb:9b:72:76:d7:93:be:f0:0e:57:e1:01:
01:12:05:a1:e0:b3:79:c0:6a:71:5f:7c:6e:f9:cb:
b0:02:29:af:eb:8e:d3:87:36:a9:bd:5c:98:ae:d6:
b7:10:07:d0:06:f4:c7:7d:2b:80:4e:bc:b7:2b:2a:
2e:4c:26:6e:9d:1b:59:15:e7:08:ec:67:8d:94:f9:
cb:9d:b0:09:12:04:52:2e:4d:56:c8:66:b7:26:29:
11:1d:b7:f1:87:68:34:85:67:4b:e7:d0:04:b6:1a:
b1:5d:03:41:44:4c:da:22:97:cc:7c:0b:8e:e8:93:
8a:1f:9f:50:3e:8c:73:24:cf:09:99:98:72:59:27:
c9:ce:e0:61:f6:8a:a4:ad:dd:65:93:47:86:e0:af:
f5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:53:CC:FC:34:47:E9:6B:AC:C9:8C:F8:A2:04:B5:74:EE:44:EA:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f8cbe44-e4b2-3124-85c6-e7c51a4b67a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2960::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:e4:5f:96:2b:b5:20:f0:16:5e:db:1a:0e:ed:e6:08:96:18:
1c:a3:28:1b:31:df:e9:f5:33:05:ef:3e:d0:29:79:26:4c:a8:
20:20:94:4c:e7:bd:57:b2:3c:90:07:9c:da:8f:00:c0:59:03:
f2:12:60:e3:38:93:fa:90:b8:af:a6:11:a4:cf:8d:82:79:82:
d0:34:0a:16:18:b8:37:28:02:98:3d:db:44:c2:aa:d8:f3:8d:
bf:93:3e:e9:20:98:6f:11:4e:c8:4e:99:f3:6e:65:03:0f:18:
cc:4a:d2:e1:b0:37:fe:f5:77:c2:2f:e9:94:8f:d8:10:ca:ad:
b8:b3:33:dc:43:01:61:61:17:d8:ac:8b:bd:1b:58:6f:c8:7a:
d2:c6:ca:14:47:7e:61:a0:48:9f:59:30:4b:65:8b:6d:9c:91:
23:99:38:b9:06:58:d0:54:77:7d:54:31:ac:1b:81:fd:25:58:
c2:00:a5:99:c2:f9:97:05:ec:c1:21:bd:c7:4b:35:27:cc:f1:
44:41:c2:95:e2:ca:cd:c0:51:93:36:03:9c:60:9c:2b:fd:4d:
19:bd:1c:d8:65:70:5c:47:67:cc:8b:61:82:76:e1:ac:dd:7e:
00:b0:c9:dc:3e:4b:59:63:54:8d:09:b4:0b:e0:12:85:08:9d:
70:f5:90:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:50:17 2025 by rpki-client