Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7a52291f-0670-3003-ae07-ab1620388d29.roa
File: 7a52291f-0670-3003-ae07-ab1620388d29.roa (raw, json)
Hash identifier: vUUsI4ApFWUZoDeJQKymGjQKWdkI/46EXz6dV4jcH+k=
Subject key identifier: 1E:B4:73:B2:A9:A6:3F:EB:73:87:53:91:3F:74:29:AF:E4:CC:2A:03
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780269BF81B4E247D92607CD4
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7a52291f-0670-3003-ae07-ab1620388d29.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2480::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:9b:f8:1b:4e:24:7d:92:60:7c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=9fd2469d-a93e-4cd8-84d1-74b1b11ebac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:d8:7f:b1:f3:cc:28:57:5e:5c:ae:71:41:
b6:75:dd:36:cf:b2:e0:99:35:00:8b:44:1a:ab:5c:
9b:a2:6d:68:0e:76:33:63:95:e3:c6:4c:91:db:aa:
7d:31:ee:98:a9:f6:05:02:dd:80:a5:b3:f7:e4:4c:
34:a8:74:8d:da:8b:6d:e6:1e:86:d6:8e:ea:4e:d9:
c4:21:d5:f9:63:d3:64:88:8c:9f:83:b6:80:18:9b:
e7:86:f3:94:ac:35:22:3c:fd:d9:5e:98:8e:39:8e:
0f:f4:b1:26:46:09:a7:81:36:b2:9e:6e:6f:2e:12:
8d:3f:2b:02:af:db:fb:3d:f5:98:1d:f3:85:04:dd:
ea:da:eb:11:38:b6:e8:7a:c1:a2:52:e9:22:d2:3c:
44:54:e3:09:ca:78:71:c7:42:97:56:bc:47:77:44:
39:53:1d:fc:b4:5c:4d:c3:98:68:99:d8:86:24:25:
43:d2:38:f0:ff:8e:45:e2:52:0a:59:9a:81:bc:88:
93:f8:12:9b:d7:3e:55:70:77:2b:29:dd:d8:4b:e9:
66:cc:40:49:95:3d:cc:dd:a9:34:06:9a:23:bc:b9:
d5:64:8a:53:21:bc:bc:a1:59:cc:8b:e7:64:51:89:
63:5d:0b:99:c5:9b:5a:0b:08:76:e7:01:ea:2e:c1:
41:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B4:73:B2:A9:A6:3F:EB:73:87:53:91:3F:74:29:AF:E4:CC:2A:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7a52291f-0670-3003-ae07-ab1620388d29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2480::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:7a:14:a6:c2:30:b2:26:e3:16:dc:2f:53:fc:e1:29:96:76:
c4:3a:f5:55:7f:c0:18:6b:3b:0b:78:06:eb:25:08:89:2e:c4:
86:18:bf:57:f2:07:2f:7c:49:85:7f:df:84:42:30:34:da:60:
39:9b:66:fc:89:0f:8c:56:e8:8d:79:3f:b5:0b:fa:cb:cc:63:
16:17:2f:58:c0:ad:2b:84:41:51:c9:50:a9:84:01:57:b0:c5:
32:5e:14:99:7b:e5:cd:79:69:3b:b2:56:2d:f9:d8:9d:22:e2:
95:69:bc:8f:58:e2:cc:b4:9f:22:d3:6f:ae:f0:86:79:a9:36:
fc:e9:53:ed:b9:6e:d4:00:fe:8a:4a:23:15:20:c1:47:8f:da:
e9:17:f2:7c:7b:7c:f0:1d:32:5e:00:de:d2:3a:a8:fd:4e:71:
dc:ae:15:4f:fb:f0:9c:f8:60:93:25:82:05:c2:92:ef:57:90:
88:5f:8d:29:25:11:fc:12:c4:99:64:43:35:52:cf:1f:bc:01:
c9:40:55:25:a7:03:a1:39:0b:23:06:d4:ec:c9:96:ff:ea:c2:
3a:b4:53:08:b1:ba:73:15:f5:b0:b0:86:37:d0:bc:8e:c3:0b:
ea:8e:61:23:28:a6:7f:3d:86:48:1b:7d:6d:b3:9b:77:77:f9:
7a:8c:25:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:49 2025 by rpki-client