Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/67e5d910-866d-393b-9cb8-2b27012a9d38.roa
File: 67e5d910-866d-393b-9cb8-2b27012a9d38.roa (raw, json)
Hash identifier: 4dlVw4RAX0coDCr/jqPoXNif3lFVPrdRq72v5RsDpPE=
Subject key identifier: 06:AB:5E:CF:92:B6:4D:D6:B9:26:04:D6:2E:8E:97:83:59:C3:67:B6
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780268748E2B0326E41A26780
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/67e5d910-866d-393b-9cb8-2b27012a9d38.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2a60::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:87:48:e2:b0:32:6e:41:a2:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=03ca308c-0eb0-4836-b1c8-b9e255509731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:aa:f4:cd:0f:03:52:06:e5:f5:7b:44:12:
2b:f6:e3:de:57:4b:38:0f:01:0c:63:10:14:be:ee:
3b:6c:d9:8a:1c:19:8c:c9:97:95:70:b1:f4:88:31:
fa:b7:ba:a7:ab:fd:b8:9d:f1:41:c0:d0:c1:99:a5:
6b:9f:79:ba:ed:3b:d1:67:d6:49:f0:6c:b4:cb:9f:
e9:cf:17:43:0e:91:1b:e3:8d:7a:f0:0b:e7:ba:7e:
c5:ee:ce:f6:ad:05:e5:02:33:6b:fc:6b:ba:6c:dc:
67:03:86:53:ae:8c:5b:85:04:5b:69:45:ca:1d:11:
1e:de:8b:dd:a2:ff:86:0b:ea:db:09:24:12:00:1a:
4b:d9:c6:2b:53:44:50:20:63:f6:22:ad:99:d9:85:
de:18:c7:d3:9e:71:b6:4a:13:a3:e1:5a:08:40:10:
4b:25:03:90:33:6a:e9:30:51:0e:f0:8a:35:b1:3d:
66:ee:b4:77:76:c3:28:88:f4:03:a5:2f:72:f6:15:
c5:b6:b9:40:8b:90:be:6b:16:d0:be:51:75:d9:91:
5b:00:63:b2:4d:43:c2:77:72:f7:82:04:28:f0:7a:
37:b2:90:56:2f:21:59:92:d5:89:be:4d:52:a1:0f:
b9:a9:ea:e7:dc:a6:1a:38:7e:0a:6c:19:94:de:12:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AB:5E:CF:92:B6:4D:D6:B9:26:04:D6:2E:8E:97:83:59:C3:67:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/67e5d910-866d-393b-9cb8-2b27012a9d38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2a60::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:79:11:6d:24:71:b1:9c:ad:94:2d:00:12:62:2d:25:b0:aa:
9f:be:9d:d0:a3:fa:b7:22:3c:04:8e:42:b3:d9:ce:90:a9:73:
9d:cc:7f:18:4f:34:a7:c8:93:7c:61:f1:6a:27:bf:09:2b:9e:
6d:6b:ff:52:a7:28:d3:42:0a:e3:9a:a7:28:9e:c7:b6:18:86:
5c:26:9e:a1:c1:b3:c1:f8:03:fa:6b:73:30:62:60:41:b0:f3:
7c:53:43:a3:df:d5:8d:05:c8:0d:13:a4:70:96:e7:4f:07:7a:
98:ac:6b:5c:05:06:9f:b0:ac:2a:cc:37:f7:22:c1:98:2e:52:
24:8f:27:76:37:dd:66:47:0e:8e:00:98:87:1a:97:a6:f2:0b:
0e:76:84:e1:35:79:e4:b2:3a:4a:a4:31:c8:ca:07:fa:7d:74:
f5:90:eb:29:b6:19:0a:20:cf:45:75:eb:97:2a:f0:a5:95:e6:
02:07:3e:34:8d:6f:d5:38:41:4d:5c:98:74:1c:89:c6:f5:7c:
9e:fe:8b:dd:e1:5e:80:86:cf:12:9c:b8:ae:88:ed:ad:d3:53:
f1:c6:e9:88:ec:4a:88:91:69:88:5d:d1:ab:93:c4:16:96:a2:
27:6f:fc:f6:f4:79:13:d5:fe:92:7c:84:2a:26:e6:92:9d:b1:
ec:60:8f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:37 2025 by rpki-client