Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/623423a6-897b-34b7-8bd0-478c98f7b9e2.roa
File: 623423a6-897b-34b7-8bd0-478c98f7b9e2.roa (raw, json)
Hash identifier: jh9E47HLMtYdmfjMR/qf0+ovwYfoydlOlovkszOAOUA=
Subject key identifier: 27:82:5B:D9:7B:0B:9D:DF:1D:0F:9F:8B:15:82:80:1A:EA:C5:D6:BC
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780268A6DEF691249C10ABB00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/623423a6-897b-34b7-8bd0-478c98f7b9e2.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:27f0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:8a:6d:ef:69:12:49:c1:0a:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=ea288874-c89c-420a-ab82-d59162b455df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:f9:c5:d9:d0:22:2c:e4:81:46:0c:42:8a:
82:b8:cf:5a:36:5d:89:da:77:05:0f:74:e0:07:7a:
3c:06:e4:29:67:26:27:f2:b6:f6:2c:bd:2e:f6:a1:
f6:f4:76:d3:0a:7c:ee:73:40:02:05:8c:00:c4:34:
5f:4d:2a:87:a3:a0:4b:ed:68:8c:cf:a6:83:58:d0:
3c:f7:e5:07:74:da:fe:c4:8c:1b:72:49:6f:18:1c:
12:35:7d:ea:3d:97:b1:90:0f:9e:15:48:f5:24:5d:
c7:77:7b:f6:0d:cc:ce:7d:81:34:dd:cc:06:09:09:
5c:e5:8c:04:08:2a:36:d6:1b:42:95:1d:5b:fb:c1:
2d:55:2a:22:3a:e7:cb:a6:0f:71:12:eb:10:1a:ba:
a7:b8:a1:0f:e9:d8:10:70:65:73:9d:c9:23:56:b3:
4b:97:be:02:09:4e:e4:63:c1:d2:b6:8f:47:5b:37:
17:e6:06:bd:d5:0c:d6:c0:96:2b:c3:c4:99:65:ab:
dd:9d:05:ff:b4:ff:24:5b:20:c5:c2:c3:8e:29:28:
db:f2:a2:b0:f8:62:e1:e8:78:bb:34:e6:3f:dd:42:
11:a5:a8:10:37:43:3e:69:9f:f4:97:20:dc:d9:42:
58:00:ad:74:51:a3:b4:8e:89:bb:02:12:85:ca:48:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:82:5B:D9:7B:0B:9D:DF:1D:0F:9F:8B:15:82:80:1A:EA:C5:D6:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/623423a6-897b-34b7-8bd0-478c98f7b9e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:27f0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:06:97:ab:f0:a6:e0:15:d8:8c:3a:69:ef:d1:66:ea:e7:ef:
22:a6:02:7f:77:1c:07:c3:bf:b7:0d:6f:d3:e4:26:87:f8:b0:
fd:a7:4f:d8:69:2d:49:87:9f:35:f2:a7:45:97:58:7b:27:5a:
13:dd:a4:a2:25:41:b7:a4:01:b4:c8:0e:93:93:70:e1:cb:58:
5c:5a:82:e4:f9:06:ca:f5:f0:bc:79:7d:41:dc:19:d6:79:62:
0f:7e:aa:20:fc:40:84:9a:ab:e8:19:71:85:61:0b:e9:f5:7e:
90:06:3b:18:c7:4e:54:40:58:31:98:fc:2c:f8:41:9b:7e:e4:
9b:3d:6c:b0:ce:47:88:06:52:25:c6:c1:3e:ce:93:7d:8c:80:
f9:51:14:9f:4a:2d:31:16:df:57:51:d7:c2:19:4e:d8:3d:dd:
4b:46:14:5c:c2:83:21:ff:ab:40:1b:81:e9:7b:55:7b:ba:1a:
4b:eb:d8:5d:04:36:e1:5f:0a:5f:48:10:f1:46:2a:29:47:5f:
54:de:58:cb:8d:60:a2:c2:13:92:c5:dd:60:0e:71:a9:5d:5b:
ca:28:32:c4:39:8f:1b:f5:ed:f5:4f:45:4d:3d:f7:2a:fd:ec:
50:0a:b9:60:90:f3:e2:d4:e2:be:f6:55:ac:f7:3a:9d:9d:21:
c1:b2:d1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:27:58 2025 by rpki-client