Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6a494ffd-4eff-3f75-ae9e-db9b089f6398.roa
File: 6a494ffd-4eff-3f75-ae9e-db9b089f6398.roa (raw, json)
Hash identifier: yzgx3jQ57XncqsFzhiLdWb/jnkIsTb3pr9Lz5Y7VuiE=
Subject key identifier: 16:96:2B:86:17:5E:EE:2C:8F:65:84:96:22:23:BD:D1:A4:10:65:60
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780268593F26E9D6D41FDD100
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6a494ffd-4eff-3f75-ae9e-db9b089f6398.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3a50::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:85:93:f2:6e:9d:6d:41:fd:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=d49262f0-881b-49ac-8e15-14f9258954cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:f0:7d:f3:2c:dc:70:c2:bb:f5:d6:87:33:
f9:b2:ae:94:b3:f7:28:b0:89:00:55:0e:90:9e:0d:
d9:a3:f8:ab:ae:93:ab:8d:9e:52:cd:af:a0:0f:0b:
46:a1:f1:cc:2f:6c:d0:45:bc:09:87:09:3c:d5:dd:
0e:60:87:05:4e:61:af:cf:34:93:f2:17:9b:9b:3c:
ed:fe:78:d1:e7:33:d4:05:11:5d:00:0f:96:3f:22:
90:f4:6b:55:18:00:90:a2:60:35:fe:4e:a0:5d:88:
a7:80:4d:38:4e:61:f1:4e:5b:c7:11:04:5e:d3:f9:
29:5d:6d:60:5a:eb:87:e1:5e:86:bc:a9:a5:65:b2:
7c:aa:39:84:db:d5:b1:70:6d:2d:66:85:bd:c2:9b:
74:67:ca:ef:f9:7b:ec:fc:44:55:92:fc:a3:b1:9b:
46:e6:26:37:46:0a:44:8c:81:6b:ec:73:4c:40:a7:
73:3b:1b:8a:3a:93:f6:5e:bf:04:23:0e:8e:f5:6c:
30:cd:ac:89:ae:77:f8:07:1e:9f:ef:d6:83:2e:63:
39:a0:3a:35:e8:95:a7:ad:01:e0:f8:b0:d1:5f:ad:
4c:2a:df:75:b7:07:c3:e4:30:8c:57:be:f0:3c:e5:
5f:14:d6:8d:11:93:41:6e:0d:a4:c7:b5:d4:00:6f:
68:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:96:2B:86:17:5E:EE:2C:8F:65:84:96:22:23:BD:D1:A4:10:65:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6a494ffd-4eff-3f75-ae9e-db9b089f6398.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3a50::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:3d:65:65:57:27:26:11:ab:15:b7:1c:74:ff:80:d2:63:2c:
09:ff:30:b3:c3:54:f6:93:e7:56:2b:05:b8:99:92:57:78:10:
40:18:3c:61:14:33:06:21:31:62:6a:67:64:d6:9d:0a:fb:5a:
7c:a7:c5:bb:1d:68:a0:de:ad:3d:d2:0b:a1:2e:a8:59:e8:1d:
52:48:b0:f4:f6:75:84:75:37:31:f8:8c:26:a5:bd:30:39:dc:
e8:eb:96:4d:cc:b6:bb:51:95:98:dc:90:37:fa:99:ed:05:c7:
7c:46:68:a0:38:c3:fc:8d:c1:3a:7d:a6:7c:9b:14:1f:5e:04:
84:ea:8e:9c:2f:88:95:c7:ce:f7:84:69:4d:91:16:86:7e:22:
f2:16:fb:7e:e8:98:92:18:a8:74:b2:4a:a2:37:f4:9a:0c:4a:
26:d3:9f:52:ba:05:01:99:9b:ab:b9:72:ba:34:1d:27:35:41:
ab:76:84:1d:27:55:01:d6:ab:4c:2d:a5:3c:63:0a:14:f5:8a:
16:32:7b:54:7f:46:8d:89:a1:52:e4:d4:5d:87:20:52:d6:c4:
0e:6c:1d:82:1e:73:02:ef:97:70:02:48:48:6f:bd:79:3b:7b:
4d:f8:36:a5:a4:46:01:04:fc:6f:d8:6a:18:84:12:40:16:12:
42:46:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:11 2025 by rpki-client