Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/53ff0f4d-818f-361c-b51d-1b82a3e71b03.roa
File: 53ff0f4d-818f-361c-b51d-1b82a3e71b03.roa (raw, json)
Hash identifier: B1p/Xf49P+Mo+8fIAC7O0abZaS/MBtOcGixYt0tuZR4=
Subject key identifier: 01:79:04:29:DA:E6:15:39:B7:B6:4F:7B:D1:5C:67:B7:AF:32:53:11
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802673C089F474EBBCB18800
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/53ff0f4d-818f-361c-b51d-1b82a3e71b03.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:20c0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:73:c0:89:f4:74:eb:bc:b1:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=b2bd69c7-bfca-4d95-af1c-a9ddfeecbca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ac:85:0b:cb:ea:c0:07:af:d2:b1:6d:31:f5:
82:7e:7f:77:f0:e8:1b:ec:49:19:38:9a:c7:ec:fa:
04:c9:1a:88:5d:87:63:01:47:10:fa:3d:4b:45:a6:
30:5d:6a:9a:d6:22:32:7f:9a:b0:dd:2a:21:c8:42:
d9:77:77:9a:c6:d1:95:a1:85:8a:a2:cf:66:c6:16:
b3:20:88:e4:77:a3:a0:ce:60:52:d3:30:8e:37:67:
92:13:33:de:36:3b:af:cc:81:ba:cc:94:97:86:74:
55:7a:9d:5b:30:80:40:e5:01:17:2b:e2:a0:30:81:
dc:f5:f9:9d:7c:09:40:44:0f:bc:9f:0e:8f:ab:7a:
dc:5f:fd:a5:a3:40:4d:b6:de:38:f9:28:5b:05:a6:
9a:4d:8e:e7:19:15:c8:82:10:d3:92:fa:a0:12:77:
10:3e:6f:cf:74:db:dc:b2:c1:70:9d:4d:06:12:2e:
2d:fc:e5:c2:fd:b7:be:62:59:b5:f2:41:12:5d:42:
a3:60:bc:e0:68:7f:49:d6:1e:a8:ff:49:a8:33:0f:
fe:81:13:ed:80:23:f6:42:32:e9:7e:53:dd:06:d8:
e3:9f:3b:4a:3c:20:43:0f:ca:5f:a0:60:38:2c:fd:
79:b8:a0:81:ce:d0:75:22:54:ec:c0:4a:15:31:1a:
5c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:79:04:29:DA:E6:15:39:B7:B6:4F:7B:D1:5C:67:B7:AF:32:53:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/53ff0f4d-818f-361c-b51d-1b82a3e71b03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:20c0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:85:d8:c2:21:6d:aa:d4:f5:09:12:ec:40:06:8b:4d:ad:3a:
00:9d:b8:a6:e2:e8:b3:55:d0:b3:36:e8:1b:08:b4:13:26:d6:
fe:db:4f:57:c4:61:5b:24:b4:76:e4:a6:de:bf:71:fb:07:77:
22:e9:33:96:d2:c8:71:90:25:aa:69:24:6c:b5:b2:2b:8f:cc:
29:ea:b6:95:38:5a:ad:02:0d:55:69:2b:48:13:a1:da:3f:e2:
e5:43:81:e5:e1:01:a8:36:21:db:60:6d:03:a1:fa:bc:7f:f4:
b3:8e:55:85:f4:dd:4e:46:9d:79:58:09:89:3d:b1:bb:59:62:
b4:37:28:8e:cc:e5:cf:1b:5b:94:1e:4e:bc:56:e6:0b:ab:9c:
38:1d:e5:ec:03:35:54:8b:be:89:0b:8f:ec:36:98:57:d7:e8:
96:b9:40:58:bc:1c:19:77:52:05:7e:5e:00:d4:4f:2f:21:fe:
24:12:da:43:1c:b8:47:62:12:81:b0:98:ac:2d:91:f4:2e:96:
14:39:35:8a:c4:3b:1e:9f:e2:69:81:07:a6:29:97:14:ba:73:
bf:46:d2:59:f6:65:46:73:15:fd:97:2a:1f:a5:3b:99:ce:ba:
cb:ac:c4:b7:a7:26:af:8d:24:fd:24:1f:11:7d:84:b6:fa:3c:
20:75:6e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:21 2025 by rpki-client