Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7bf4c18f-ad86-3539-968e-4aa2ad8a8d04.roa
File: 7bf4c18f-ad86-3539-968e-4aa2ad8a8d04.roa (raw, json)
Hash identifier: 1vJUa9VHGjnzS1MciqY47znVDjo/T94/RZhTOp3l76s=
Subject key identifier: D8:22:F4:B5:69:EC:F5:1B:C6:AF:EF:37:DB:44:CE:6C:F2:55:00:55
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780266C5D2C2CD0D839BC7700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7bf4c18f-ad86-3539-968e-4aa2ad8a8d04.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2750::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:6c:5d:2c:2c:d0:d8:39:bc:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=f03a247e-1f2d-434f-a332-2f6be35c7c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:2b:0c:c3:50:66:10:a9:5f:91:a9:61:d9:
89:7b:40:a2:2b:2a:7d:90:d4:7e:c0:83:73:27:69:
e2:06:47:12:fd:9e:35:90:ed:31:67:9b:0d:b2:54:
f5:f4:32:82:1d:0b:83:da:af:21:60:c8:6c:4e:06:
81:14:49:cb:86:b4:67:2f:80:39:b1:58:88:0b:3f:
19:e2:ec:c2:7b:78:30:a4:8b:6b:58:bd:c3:f1:19:
c0:07:5b:65:73:5e:3e:88:c2:11:50:81:e6:f0:51:
67:64:92:bf:95:4d:c7:e2:19:42:1f:f1:b0:47:22:
e3:9e:b6:ec:9d:36:7e:20:db:5b:db:f6:f6:07:26:
d4:e9:dd:fe:4c:26:88:f8:e0:13:3a:a8:29:98:39:
37:a0:12:de:8b:50:9b:fd:4b:32:7e:da:cf:1a:91:
06:c2:eb:e3:c9:f7:47:0f:7b:25:93:6d:8b:be:2f:
45:03:69:52:bb:b6:5d:af:0a:0b:21:28:b5:f8:65:
e3:e0:4b:fc:a6:ac:26:ba:0e:5c:77:84:4f:59:a6:
e8:72:4d:8e:7a:dd:b9:90:70:39:58:00:e6:0d:db:
ab:85:01:c4:9f:9d:f8:23:96:32:a1:1d:5c:78:94:
33:7d:61:65:c8:28:d0:0f:83:c9:f7:b0:fd:b6:48:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:22:F4:B5:69:EC:F5:1B:C6:AF:EF:37:DB:44:CE:6C:F2:55:00:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7bf4c18f-ad86-3539-968e-4aa2ad8a8d04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2750::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:1d:ff:c1:1b:02:c7:15:bd:9d:2c:ab:94:67:ed:e8:75:d8:
4b:0b:e4:b2:25:98:c5:97:ab:c8:1d:28:ab:06:f7:ba:6a:de:
67:bb:b8:aa:2e:e0:a8:c1:41:f6:58:29:c9:eb:f6:f8:fd:4d:
5c:fe:a6:0f:f1:85:26:89:9a:4a:c4:6d:ba:9f:2b:96:1a:68:
23:89:d8:40:f6:fc:ff:33:48:32:f1:d6:02:43:0a:82:96:e1:
9c:7e:3e:40:60:37:17:97:a4:32:3c:26:03:ea:25:fb:bc:00:
06:ec:1c:12:81:dc:cf:20:23:a8:c7:42:b8:8f:48:43:4e:b9:
85:23:dd:a4:b8:72:df:ae:66:ea:85:86:62:f8:3d:1a:55:fd:
3a:50:03:92:93:f9:52:7e:3e:ab:89:23:44:91:95:ae:fb:5d:
ce:29:35:48:c6:86:96:e6:ee:da:6e:10:99:78:33:43:94:2e:
09:48:f8:aa:fd:1e:d8:4b:8b:50:28:bd:f9:81:4e:64:d3:33:
dd:b5:3c:2d:41:9e:b7:4d:7b:cc:56:58:34:60:f9:71:4c:20:
1d:89:2e:e9:0d:da:41:32:21:04:8a:dc:9f:ba:24:42:6d:53:
af:9e:48:57:73:d5:20:2c:16:2f:fa:91:f3:c9:69:c3:e1:f7:
e9:da:eb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:13:14 2025 by rpki-client