Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/535e3664-77ae-3969-80be-9d690bdea5cc.roa
File: 535e3664-77ae-3969-80be-9d690bdea5cc.roa (raw, json)
Hash identifier: iGarWQc4EL+gz/Ltg6iBF+SILJhvYiHkcnJWtZS1aTg=
Subject key identifier: FE:DF:9F:C1:95:36:02:6F:F1:81:14:37:97:24:B6:04:88:E6:20:90
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780267D56A61F15328F0D1680
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/535e3664-77ae-3969-80be-9d690bdea5cc.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:37b0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:7d:56:a6:1f:15:32:8f:0d:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=64e59bbe-3f56-4e1e-a328-337857e4185a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:91:41:78:f3:86:42:9e:dd:33:fc:9e:42:06:
2e:3a:5d:ac:59:21:e2:fe:31:45:8d:6c:44:ba:66:
8b:a6:a5:f2:c2:94:55:59:ad:8e:5e:00:38:de:e2:
13:54:f4:48:70:03:4b:88:8e:13:33:4f:27:b5:e0:
55:65:05:7c:ef:34:6e:d8:fa:14:f2:cd:4e:e0:c2:
0d:d8:82:54:de:7f:5d:a3:91:33:cb:35:a0:44:de:
0b:82:6e:44:f5:a8:e5:19:52:c1:44:d4:92:2f:39:
d3:4d:b4:14:76:6a:09:81:0f:29:57:69:17:da:88:
48:cb:3f:95:19:8c:ca:44:16:4e:c3:d4:1e:1b:9f:
31:2e:68:86:ea:49:40:cc:d0:15:56:2b:b7:bd:80:
b9:82:37:4c:2b:10:3a:6e:de:20:bf:75:78:36:03:
45:07:df:8a:56:01:0c:e3:cf:ac:21:b5:fb:f1:8f:
1b:0b:ef:d2:6a:86:c8:07:aa:b9:95:85:c6:78:8d:
1e:16:6d:72:ca:48:46:54:01:22:bb:48:99:2f:ed:
6f:3e:64:e4:3f:02:43:b4:04:09:a8:d7:c9:95:35:
9d:7f:48:bd:09:af:5e:ee:df:ab:d4:8d:5b:e1:a3:
a8:92:06:ac:e1:03:51:94:e9:c3:be:78:c0:da:c9:
4d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DF:9F:C1:95:36:02:6F:F1:81:14:37:97:24:B6:04:88:E6:20:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/535e3664-77ae-3969-80be-9d690bdea5cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:37b0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:48:76:76:42:54:7b:ba:45:5a:b5:52:ad:f2:87:16:35:3f:
99:a3:b8:74:85:83:81:eb:ca:6a:c5:f1:20:10:e5:f7:28:86:
b5:19:52:77:31:3d:76:72:1f:10:aa:70:4c:82:9b:15:67:3f:
21:ff:06:82:29:02:42:35:65:5b:67:36:5c:f4:5b:b6:3e:77:
0f:b8:84:bc:ae:80:f1:d6:be:29:09:c6:cf:e2:1b:8c:7b:5c:
be:3b:bb:94:85:95:19:b4:f4:48:56:05:20:52:05:b7:61:e7:
90:bb:af:d7:18:f5:a3:4d:79:48:c8:d8:93:9a:86:c7:5a:18:
e3:dd:f5:1c:db:8f:9a:c6:c2:39:45:90:7d:c3:42:0d:b4:06:
6f:40:81:c9:5f:73:90:e6:0d:18:20:f8:96:2b:cb:af:57:e1:
e0:91:33:8e:ad:12:80:2d:35:37:99:8f:07:f5:d4:38:b2:2b:
c1:9d:b7:d0:3d:95:9f:e9:8f:d3:9c:2a:0f:3a:fa:55:09:14:
d2:2b:99:1d:15:94:b2:9a:5a:16:91:76:ad:69:03:42:f5:b3:
bb:0b:a0:40:b9:ad:79:88:b3:63:73:a7:c7:66:14:98:0d:a0:
5e:e4:5c:1f:de:1e:73:8c:ec:c9:2d:58:ce:97:58:5a:91:b9:
2b:50:84:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:38 2025 by rpki-client