Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6feb1eb9-5ae9-3f13-a61d-736d12d02a59.roa
File: 6feb1eb9-5ae9-3f13-a61d-736d12d02a59.roa (raw, json)
Hash identifier: CE3J2i1xYqDYHg0DacjeG6+DK+kehKAPTttvu8G+LGE=
Subject key identifier: 83:64:74:41:26:48:99:C7:76:FB:95:09:06:24:6C:B1:78:9F:E1:8F
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802681BEC4CB3FFF558E6480
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6feb1eb9-5ae9-3f13-a61d-736d12d02a59.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:35d0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:81:be:c4:cb:3f:ff:55:8e:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=40859323-ce8b-45da-82c0-c685e8355408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fe:d3:b5:3f:87:83:8b:eb:95:19:56:3d:79:
c9:89:f9:9c:ec:73:73:15:18:f7:6e:1b:4e:78:84:
33:50:7c:a1:14:30:c6:4a:78:36:81:5f:16:bb:af:
36:b6:99:84:ec:14:ca:c4:16:b9:0b:aa:94:64:d3:
7f:18:25:c5:be:c8:60:65:a2:81:b5:bc:89:54:92:
71:e4:41:7b:25:fd:ab:05:70:5e:14:5d:a5:72:fb:
9e:ae:b6:ba:fc:1e:78:eb:dc:06:f0:80:3f:36:d0:
f9:23:9f:ff:94:e7:38:cc:f1:25:b8:0e:f9:d9:ef:
8a:86:20:e7:d9:97:67:80:67:ca:d3:34:48:92:3a:
bb:9a:11:96:f2:f0:f1:c6:90:19:f2:f4:ce:2f:ef:
b3:ab:65:42:9e:88:df:0f:01:0b:8b:df:60:8b:88:
0a:fa:d7:de:8d:f7:b4:19:9e:96:f3:f9:42:89:6a:
ae:f3:73:5e:f3:d2:87:77:6e:b4:c4:17:f2:36:20:
c6:0a:1e:78:9c:fb:8a:04:49:2f:f0:0c:eb:37:ba:
de:0b:65:0c:7e:3a:15:1e:c5:de:32:db:06:c8:37:
7e:f6:9b:ad:b6:8c:32:54:a5:b7:f1:fa:85:9d:af:
f6:c7:6b:2a:bf:a6:21:66:20:d0:af:94:cc:3f:e5:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:64:74:41:26:48:99:C7:76:FB:95:09:06:24:6C:B1:78:9F:E1:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6feb1eb9-5ae9-3f13-a61d-736d12d02a59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:35d0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:14:2a:7c:0e:ef:fa:09:b0:00:7f:11:96:68:eb:90:cf:ca:
1e:ab:9c:63:a1:b5:ef:cc:6d:75:52:11:f4:b7:3c:d6:62:da:
b1:8f:2a:b9:7b:b4:0b:14:3c:1f:0f:1b:8e:0c:0e:d9:c4:e8:
78:43:1e:f0:8c:9c:d3:f5:1a:15:3e:a6:2c:af:1d:2c:69:04:
1f:eb:50:7d:6f:1c:19:77:3d:f3:a9:e5:98:ef:4b:33:0e:40:
96:e5:ad:91:92:66:3e:cb:b7:93:7f:2c:bf:53:ca:46:08:80:
8e:98:28:60:4b:57:fa:37:59:d7:89:cc:fe:ed:7f:92:71:48:
0a:7f:e0:84:ad:4f:b1:a3:85:8a:32:40:c3:5c:69:68:f2:46:
13:9b:f6:5f:3a:3c:da:dc:b9:b9:1a:e8:58:5e:3e:c8:70:bc:
f2:26:75:65:f0:31:84:3f:a6:32:80:1d:c4:5a:33:44:fc:9c:
7d:b7:ea:b0:18:c9:30:a9:ec:33:1e:8a:3e:bf:ad:df:3e:3c:
22:10:9c:dd:d6:d8:06:e7:5e:93:06:07:8a:f4:c9:fe:8a:73:
e7:f3:dc:8b:fe:db:1c:7b:d3:cb:71:bc:9d:b8:e6:9f:77:48:
1a:1b:e8:d1:05:be:8e:b9:ed:2c:c2:c5:51:34:c1:41:13:f3:
52:51:90:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:34 2025 by rpki-client