Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/65b9a6bc-3d9e-3e3b-9d1b-4d2643acd296.roa
File: 65b9a6bc-3d9e-3e3b-9d1b-4d2643acd296.roa (raw, json)
Hash identifier: Qj9nuAxzRhbbu9WC9aVdnHNUcHUSWITl16edCDbjUFg=
Subject key identifier: 29:43:F6:20:FE:E4:BD:9B:5F:26:30:4A:62:45:C5:57:32:A8:0A:9E
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780268DD8E290A7242697BA00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/65b9a6bc-3d9e-3e3b-9d1b-4d2643acd296.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3b30::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:8d:d8:e2:90:a7:24:26:97:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=26f3626f-8e7e-454c-9a89-4031e7f04159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4f:c3:e6:be:a7:51:5f:7b:31:1f:ba:dc:8f:
5f:46:b0:03:4c:95:08:28:7b:10:94:40:39:aa:fd:
c4:7a:92:cc:cd:0c:4d:ea:b3:21:6f:9a:79:52:0f:
07:6d:03:19:c5:02:0e:34:89:ff:bd:98:fa:eb:18:
95:7a:b1:d8:f9:e9:be:95:98:52:2c:d8:0f:a2:cd:
2e:18:3f:a4:79:83:b3:9a:50:d2:a6:63:db:ac:81:
21:6f:80:65:b0:08:bf:c5:7d:76:72:e1:8f:a3:0e:
d8:f2:2d:ab:a4:eb:87:d6:53:77:67:e7:a4:d6:06:
dc:b3:3e:68:6a:18:8e:74:75:a6:2e:83:59:e5:29:
a9:57:5d:16:04:bf:4c:02:3f:23:d8:7c:55:cc:f2:
5b:3f:51:83:92:f0:01:68:2e:da:a2:70:5f:cf:05:
26:be:df:15:0c:77:c9:94:50:58:f1:15:13:78:2a:
03:d1:12:30:e2:2e:25:c0:b3:a5:81:82:52:e3:e3:
68:f6:2b:a1:bb:60:7a:cd:e9:10:a4:28:18:fa:10:
aa:fd:10:df:84:fd:91:c3:ea:4b:f6:c4:ce:3d:ab:
ad:20:41:cc:84:82:19:c8:38:40:96:2f:0f:24:7e:
fb:9a:e7:78:b3:c3:b6:f8:bf:e7:0a:46:8d:72:80:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:43:F6:20:FE:E4:BD:9B:5F:26:30:4A:62:45:C5:57:32:A8:0A:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/65b9a6bc-3d9e-3e3b-9d1b-4d2643acd296.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3b30::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:23:37:10:ac:b3:00:64:02:db:ef:ce:36:5f:02:fb:19:10:
f9:f1:e2:06:e6:8b:60:f5:b2:a3:01:d7:30:e1:eb:43:78:b2:
93:0f:a1:14:15:33:3c:98:03:5c:54:a2:fb:4c:51:9f:07:8b:
a9:05:07:78:b7:50:87:15:b9:2a:49:09:30:3d:d2:89:5a:08:
53:a3:c7:2b:47:02:3a:cd:1e:37:b1:ba:ce:a1:bd:0a:ed:96:
c8:ab:92:85:01:12:e7:ce:b4:45:fe:b1:1f:97:7a:2d:11:eb:
76:5b:f3:a6:5c:d4:f8:2e:5d:05:79:22:9f:96:c2:5f:52:bb:
d6:8d:ce:4b:af:ec:c2:85:7d:27:32:36:85:99:73:5e:fe:32:
a2:b7:b6:be:bc:61:20:c3:0c:24:da:56:01:7c:cc:61:1d:15:
6a:a1:3f:81:e9:c1:72:ce:c7:6a:ef:28:4f:a9:cd:6c:2a:15:
8b:78:52:fe:26:95:d4:b4:c6:69:fc:37:53:fb:de:79:e0:89:
d7:45:94:ce:73:01:69:82:37:0e:5b:eb:85:7c:5c:89:88:a1:
e4:c1:9f:42:56:d8:bf:9b:19:f4:7d:ca:63:73:8a:5a:69:bf:
6e:f4:01:e3:1c:0e:73:77:b3:8f:c5:1c:6b:84:e1:6e:5d:cc:
26:48:ce:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:29 2025 by rpki-client