Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/52f994e1-ad78-35a4-9a59-7545e2e9277d.roa
File: 52f994e1-ad78-35a4-9a59-7545e2e9277d.roa (raw, json)
Hash identifier: wcEltO4w25YU/W0XH+e0RINGBdhWPAzvVIIEmt6xvHc=
Subject key identifier: 1E:17:DD:1E:60:F5:4E:86:6B:99:CD:E2:AA:9C:D8:E6:77:8D:3C:5B
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802667BDC76D2B0B5AEBF080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/52f994e1-ad78-35a4-9a59-7545e2e9277d.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3bd0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:67:bd:c7:6d:2b:0b:5a:eb:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=95030013-4ec5-4071-ad92-cdbc8b3cac83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:25:08:dc:ae:c4:09:ad:9c:c1:73:db:d9:
63:7a:78:b1:d4:95:80:64:11:e2:e7:ef:6a:95:90:
23:44:28:a5:00:81:4b:56:65:e1:2e:13:08:8f:b3:
c2:53:fd:80:65:79:fd:7c:b6:cd:3c:75:fa:35:e2:
15:54:2e:73:f9:6a:36:db:ea:fb:e4:4e:0d:4f:45:
c2:f7:4d:0c:bb:97:a2:66:17:20:af:10:30:ef:7f:
25:75:14:d7:8e:a7:c3:e4:b1:d8:de:1d:76:e8:35:
39:2f:db:9b:8f:a8:3b:e6:fa:1d:74:0d:15:82:87:
da:9d:c3:78:e8:be:24:2b:55:af:6c:5a:fb:02:a5:
80:5d:93:62:07:fc:95:a7:b1:58:94:b2:8e:b5:83:
3b:83:dc:f1:bf:ac:ee:9a:89:50:e3:ec:5f:d3:1d:
57:e2:8b:30:db:cc:1c:b3:84:29:6d:1e:fb:13:d4:
45:0e:b6:7f:f3:8a:60:3b:3c:16:f5:57:e1:4a:11:
93:60:61:98:85:99:de:c9:24:37:46:8e:bf:7e:b0:
eb:19:d6:15:f8:58:fa:1b:42:54:29:1e:c3:5c:30:
9a:15:4f:a9:67:cd:0c:6b:fd:a5:17:80:3d:b3:4d:
cc:02:52:cd:04:bd:b3:a1:08:5e:c6:08:7f:7f:67:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:17:DD:1E:60:F5:4E:86:6B:99:CD:E2:AA:9C:D8:E6:77:8D:3C:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/52f994e1-ad78-35a4-9a59-7545e2e9277d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3bd0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:4a:7a:54:e0:e2:28:02:0f:9a:19:6a:50:50:0b:38:0f:b8:
9c:d4:06:a9:9c:68:c1:7f:86:72:59:06:8f:96:34:0b:21:77:
d2:c1:a3:c9:38:03:1f:7d:c8:a8:98:f5:d8:99:47:1e:24:b9:
3b:00:11:fa:b9:17:1e:f9:f1:cb:44:72:ac:1d:3b:36:95:d5:
d2:bb:3c:a5:0e:cd:18:fa:77:8e:76:d5:7b:32:b0:31:32:8a:
cd:c7:72:d7:d6:dc:4e:0a:74:86:7f:bc:7e:48:5d:ee:2a:63:
f0:ef:a9:50:d8:dd:fd:93:5f:2c:e0:3c:a2:4c:8b:9c:4d:23:
c2:8c:01:c4:2c:ae:52:33:54:6d:df:4e:81:c8:b8:9c:48:ef:
84:23:50:cf:0f:af:ab:96:2d:01:da:ce:ee:63:61:a7:fb:a7:
3c:9a:f1:4a:7c:ea:66:a5:8e:60:d6:ea:35:a5:3e:44:b2:7f:
bc:60:b5:79:4d:84:fc:9f:8e:20:06:b7:4f:da:0c:33:54:21:
77:6c:9d:c7:d5:b4:03:39:60:3e:6d:02:c2:65:31:22:f5:5b:
3e:bf:aa:dd:6d:6b:8b:60:37:ee:1a:24:1c:71:ed:8d:34:0f:
3d:e6:a8:a7:a6:c9:b5:97:95:1d:10:50:c2:8b:35:e5:33:1e:
7a:36:49:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:34 2025 by rpki-client