Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5accd8f9-44fd-3c15-abef-5a97824d6274.roa
File: 5accd8f9-44fd-3c15-abef-5a97824d6274.roa (raw, json)
Hash identifier: shM0wLD6NXsXxwnbrI2SoV5NAkUIXUCdsDcNYBePXz0=
Subject key identifier: D2:E4:BD:2E:25:29:16:4A:E9:0D:07:DE:D0:ED:BD:84:22:17:4D:0A
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802663F6A25B7F6A29ADDBC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5accd8f9-44fd-3c15-abef-5a97824d6274.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:39c0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:63:f6:a2:5b:7f:6a:29:ad:db:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=27a2477f-6db2-409e-8bb0-886460dc93a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:b1:38:6d:4e:34:1f:01:f4:53:6d:2e:11:
ca:7a:50:2e:2b:95:16:4f:59:78:31:e7:e1:a3:03:
2a:78:51:7b:0f:c1:a7:11:68:43:5e:70:dd:79:7e:
9c:e9:55:b4:4d:2e:b8:30:b6:54:d0:e9:52:d4:79:
4e:1e:0a:b0:88:62:bd:80:9f:02:2b:50:ef:3c:76:
be:8f:83:91:d7:f7:eb:2b:37:52:52:61:c5:6f:60:
43:09:c8:e9:bc:b5:90:62:84:9a:18:5a:b0:85:26:
d8:59:87:20:db:bc:72:a9:6c:96:12:9b:52:15:0a:
47:8a:04:20:51:4f:ad:e3:0a:e7:fa:f8:61:90:2e:
94:a3:74:7e:1d:75:c3:a6:cb:38:51:ab:4c:d4:3e:
db:e7:1d:db:98:18:ab:8e:b1:1e:96:ce:1e:e5:e4:
58:28:76:86:23:f8:62:4d:4a:10:3c:e5:67:02:e6:
4b:a7:b1:7a:13:98:85:80:22:1d:16:67:30:29:a1:
5e:7b:27:fa:eb:52:e7:4e:63:92:74:9d:bd:1f:f7:
34:c1:16:83:87:70:c9:02:fe:c8:41:2e:26:a5:be:
89:08:f6:99:54:33:85:a0:cf:a3:75:7d:76:c4:af:
40:f2:8c:65:59:90:06:ac:a6:8d:92:13:3c:c1:d8:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E4:BD:2E:25:29:16:4A:E9:0D:07:DE:D0:ED:BD:84:22:17:4D:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5accd8f9-44fd-3c15-abef-5a97824d6274.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:39c0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:19:9d:98:0f:6e:02:05:bc:e3:41:3e:39:60:e5:34:e6:e3:
70:ae:e2:9f:e7:58:e6:b7:88:06:d0:d3:ae:3f:2b:09:dc:62:
e3:aa:17:01:cc:34:fd:c9:c7:04:b9:6c:1a:6b:44:2d:46:e2:
21:a3:e7:ac:0f:60:4b:c3:57:05:65:62:f0:85:ca:a3:c9:a6:
d6:6b:32:4f:ed:cf:c0:1f:65:4f:8f:5f:36:2f:7e:cf:97:67:
b5:97:5a:17:2e:d6:4f:56:5a:a7:f4:90:28:e6:cd:48:f9:a6:
b5:04:fb:b7:57:c3:f3:54:f0:19:55:81:18:5d:8b:b5:af:1a:
1c:a2:1f:88:dc:2e:ff:f6:87:f4:b5:10:cf:b4:7c:ce:1c:13:
b1:f0:f1:f6:61:32:9b:db:f7:cd:17:af:33:e0:2e:da:9e:79:
d6:ed:a4:fc:ae:85:0e:65:d9:47:2a:f6:55:a5:7a:83:20:1d:
4f:63:19:a6:9b:22:53:e1:ed:e8:f2:f0:d1:45:0e:46:7e:b2:
d8:b0:8e:56:4f:56:67:e0:79:dd:68:06:0e:d2:d1:e7:96:b1:
dc:d0:7e:84:04:f5:21:47:2a:b6:d6:f9:62:ca:86:05:ca:92:
19:57:1e:e3:38:e2:28:db:ca:fa:84:5c:29:86:38:ec:00:14:
3b:f7:a4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:20 2025 by rpki-client