Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/656816f1-d960-3010-beef-167953ac0721.roa
File: 656816f1-d960-3010-beef-167953ac0721.roa (raw, json)
Hash identifier: hQWCVxRE2MQWpB07/+El9RIOcP2OcUKSsQirTqS5epk=
Subject key identifier: B6:C1:C7:5E:24:83:D4:A3:07:A5:12:FC:18:55:42:37:74:11:DA:13
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780267A88571F24417E94C400
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/656816f1-d960-3010-beef-167953ac0721.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2e10::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:7a:88:57:1f:24:41:7e:94:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=e51d33d0-e9c6-4c2c-bd68-8a75b374a1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:86:ef:89:bc:4b:f8:bf:5e:90:6c:9d:d9:e9:
f1:88:49:70:b1:7d:60:cf:9a:43:dc:a5:f2:a6:56:
9a:e7:da:88:43:03:3d:b7:22:bc:c7:7e:fd:31:ed:
ad:d4:b5:54:43:b6:7b:b4:77:fa:2a:06:11:0b:12:
9b:81:25:57:d8:d7:84:49:32:81:ed:6a:04:2d:bf:
2d:36:3a:8c:e5:11:5e:fa:ae:0b:78:f9:bc:f9:a6:
b0:07:70:bd:4c:f2:15:b4:6b:0e:1c:83:fc:e0:c7:
73:a2:58:8b:be:6a:04:e9:da:b4:ed:30:e7:b3:00:
0d:8e:14:06:60:18:aa:ee:06:45:fa:87:22:09:a3:
34:e2:40:6e:f8:2f:30:fd:a1:ff:96:87:ae:e7:04:
9b:90:8d:0b:32:13:2e:05:00:98:a7:fb:59:99:42:
d3:e4:9f:b4:3e:fc:b7:ad:6b:82:43:8f:d3:68:51:
c9:fd:56:72:3c:2e:30:16:b0:ac:37:35:56:8e:b1:
a0:5f:24:83:a9:3a:2f:55:a6:56:e4:2e:18:97:7b:
ee:40:34:ab:84:28:bd:ef:f5:03:f9:87:3d:de:54:
cd:17:69:93:45:8e:4a:9e:ed:12:55:cd:ed:a8:2c:
ac:1b:4f:04:34:f6:52:f1:51:6e:bd:50:ab:f8:ec:
5d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C1:C7:5E:24:83:D4:A3:07:A5:12:FC:18:55:42:37:74:11:DA:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/656816f1-d960-3010-beef-167953ac0721.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2e10::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:c3:82:17:c0:ad:a7:c5:c0:8d:06:18:a4:0c:ac:5c:81:e9:
19:68:68:51:ae:36:75:d3:72:f6:4c:30:ac:6b:10:db:e4:b1:
5a:4d:45:61:ce:97:b4:63:79:ff:d0:6d:9b:18:01:ab:5b:72:
3c:96:21:ec:97:4c:a7:78:9f:a0:f0:94:93:76:d8:88:3e:11:
3e:6b:ad:97:49:9f:c3:b1:d4:5f:b5:2c:e1:07:78:c8:e8:94:
b2:e8:a3:76:06:65:5d:b5:fb:8d:df:d8:cf:a2:4c:c6:f3:a8:
c2:f9:76:9f:fd:8b:00:af:a7:9d:69:0c:33:16:6d:37:6e:6a:
df:40:80:bb:ad:18:a7:a3:85:d6:27:40:ad:90:d2:0a:72:62:
66:51:21:98:68:4f:18:18:bc:d4:24:e3:3d:04:ff:e5:c7:6c:
49:91:27:b6:6e:1b:da:2d:97:f1:ae:9a:f9:83:c9:a1:50:ec:
9c:a5:16:35:0f:b4:56:02:63:c2:47:14:99:82:a8:ba:2b:30:
81:1b:41:9c:bd:57:91:26:b8:99:6d:d1:4e:7f:b5:d2:ba:4c:
16:0f:9c:e9:0a:3c:51:ea:ac:6b:3e:f9:eb:6a:f6:ab:a1:9c:
a9:40:5f:19:d1:9b:44:5a:9c:04:7b:60:69:05:cd:56:9d:d9:
48:24:ed:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:20 2025 by rpki-client