Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/70374390-ce16-30be-9020-7905d1fa8461.roa
File: 70374390-ce16-30be-9020-7905d1fa8461.roa (raw, json)
Hash identifier: 9Ppe/uTnj7XRIXqxAxMl0hijANGmyyPyIijnyi1fDnc=
Subject key identifier: 5C:BC:3A:0C:30:C5:2F:81:F6:7F:A2:7A:EC:55:03:C0:35:7D:A0:B3
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802670525B4A0A44078B6D00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/70374390-ce16-30be-9020-7905d1fa8461.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3b20::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:70:52:5b:4a:0a:44:07:8b:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=b5286f05-363c-4b8f-b45f-0bd7cf136c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:10:a1:69:64:c5:26:63:d7:c1:ad:23:87:84:
d4:4b:0a:41:2e:c5:41:bf:f1:5f:4c:94:44:49:bf:
0e:62:b1:05:c1:3c:7a:5b:89:49:19:2c:0e:0b:ff:
b8:02:88:d6:66:44:99:25:00:f6:db:29:40:a3:20:
76:c5:22:ad:11:bb:4e:cc:7f:4d:9a:c5:f8:08:a0:
2f:0c:5d:3d:02:00:33:dd:3a:e8:bd:07:fc:fc:ca:
e1:f9:5f:13:fb:2e:0d:ff:4d:01:7c:58:a2:59:ac:
39:58:cb:30:58:79:c0:44:2a:88:e1:96:cd:c7:49:
99:bd:ef:b4:e6:c6:5b:5c:ac:93:e6:3f:c6:a9:31:
3a:f0:8c:83:be:62:bb:f5:93:a6:3d:53:f5:e4:f2:
25:ae:3c:22:b7:0b:9e:d9:3d:2e:ca:64:27:ba:0d:
d4:3d:88:71:63:8d:57:3f:f3:6e:ba:1d:91:88:8b:
af:cf:dc:d6:fd:a3:b3:f5:00:94:fb:45:49:b6:f1:
51:89:4e:82:ba:ca:9d:43:01:01:55:c9:8a:36:ae:
98:67:09:00:4d:10:c1:16:8c:47:42:b5:62:81:5a:
f8:8c:38:1e:87:06:89:19:88:f0:2f:67:11:c2:eb:
a8:ab:6a:7d:c3:f4:79:87:be:0e:fb:96:1f:a6:1f:
fa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BC:3A:0C:30:C5:2F:81:F6:7F:A2:7A:EC:55:03:C0:35:7D:A0:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/70374390-ce16-30be-9020-7905d1fa8461.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3b20::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:c3:34:76:99:bf:1d:dd:33:50:26:fe:bb:ff:18:c0:dd:e6:
59:40:8d:ef:2c:a2:b4:3a:17:a8:ad:1f:9b:6a:aa:cb:03:24:
4e:e6:2d:c8:67:28:4b:bd:4f:22:d8:0a:f4:76:42:ec:59:e1:
21:f6:87:b4:09:8c:52:d2:ef:82:82:3f:62:05:2b:1d:e9:b8:
0b:6a:e9:6a:24:e9:60:3f:cc:eb:7a:f2:2b:bc:e3:e5:8b:b6:
52:b8:84:d9:6b:2d:e5:8f:89:b5:38:ad:14:f3:30:20:f7:52:
41:92:e9:60:df:b0:99:37:1a:7c:1d:c6:69:fb:66:f2:ec:99:
81:eb:e9:72:86:90:e7:35:ed:33:e5:17:c6:80:20:bd:f1:9c:
81:31:35:2c:8c:c4:f2:9e:a1:54:7c:4d:42:cb:19:72:89:7a:
f1:b4:46:44:40:35:6e:b3:10:e4:99:fe:a5:61:7b:20:70:e7:
b6:3d:8b:bd:53:2b:d7:95:98:3e:46:ca:b4:a2:c3:3e:69:e8:
90:ab:02:ce:ca:a4:d9:3e:97:95:55:e8:17:11:a3:87:ea:2d:
12:49:f3:26:d5:b9:15:99:da:62:e0:aa:9a:24:ce:ba:a7:d8:
cc:a2:f6:ed:f0:0f:17:8f:c7:80:fe:b3:77:d3:15:df:93:93:
5e:c6:79:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:11 2025 by rpki-client