Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7cf9ae0b-2e25-3446-a139-2287d55fd260.roa
File: 7cf9ae0b-2e25-3446-a139-2287d55fd260.roa (raw, json)
Hash identifier: a6NdzFlxUPhtZwyHXroJ3NOr+U9wExzFKNc5N6tk9EY=
Subject key identifier: 47:DF:AE:DC:C6:BB:91:E5:69:C5:BB:32:61:29:DB:A5:17:51:34:67
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802695E8A6191C669E74ED00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7cf9ae0b-2e25-3446-a139-2287d55fd260.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2b30::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:95:e8:a6:19:1c:66:9e:74:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=9fd957f9-a67c-4252-86b7-373368d16f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:86:89:39:69:99:5e:d3:76:34:5a:ad:2b:
db:85:d6:d9:a4:a9:fa:86:cd:d1:a4:46:90:2c:93:
be:00:bc:31:93:43:01:38:47:39:e8:81:aa:d1:7b:
4b:c0:e0:4a:54:37:88:08:a0:f4:67:3b:70:24:10:
80:9a:32:8f:6a:fe:49:d2:2e:53:3c:88:5b:62:c1:
e9:c8:28:15:44:1e:76:29:e6:de:3c:ed:b4:ce:8a:
00:af:ee:cd:06:b4:2a:8b:9d:cf:fa:fe:0a:10:40:
5c:34:40:3b:8a:78:af:d8:e7:c7:8d:1c:da:90:81:
23:0a:64:59:73:d0:94:60:70:67:d1:a3:84:ad:ee:
27:00:19:bd:dd:46:2d:5a:65:0b:14:d2:93:dc:84:
45:bb:37:39:f1:b4:49:3c:46:28:18:78:c4:ca:5a:
37:a7:66:f9:e2:03:e6:d3:10:e4:59:b7:12:ae:01:
b8:18:ee:c7:bc:76:a2:3b:40:92:6a:a2:3d:09:70:
18:1c:f8:42:f7:7f:87:c9:aa:11:d4:63:7a:04:5c:
54:6e:7a:a6:e9:3c:de:16:ab:cc:6a:19:e4:44:37:
84:f5:72:fc:a6:01:b9:d0:f7:f4:a7:37:16:5d:9a:
da:9a:c3:b5:54:04:41:b0:f5:33:cc:5a:64:f6:fe:
9d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DF:AE:DC:C6:BB:91:E5:69:C5:BB:32:61:29:DB:A5:17:51:34:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7cf9ae0b-2e25-3446-a139-2287d55fd260.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2b30::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:50:bb:83:31:51:fa:ad:11:e7:b4:51:b7:a9:0e:d3:8a:99:
27:ac:fc:37:ae:80:e4:59:e0:71:9d:f3:3e:f9:ad:27:67:18:
57:9f:9a:0e:e6:d8:ed:f6:90:fd:e8:53:85:71:b6:70:86:c4:
14:c6:76:09:72:5f:39:ed:d5:8c:4f:db:4f:fd:ca:67:7f:ee:
64:67:a3:80:2a:11:d1:f8:17:ac:d5:52:eb:4f:d4:d4:1b:37:
7c:a8:18:11:86:83:e4:7d:ae:4c:b5:1d:83:37:42:b0:f9:d7:
10:54:0e:dc:11:e0:43:96:33:e3:0d:63:8b:d4:34:32:7d:62:
9f:b1:c0:12:72:f6:8a:7f:70:76:ef:8b:51:ea:cb:06:4e:31:
2e:7a:e7:33:eb:ad:a8:a3:75:00:f1:cf:4b:3c:a2:eb:10:10:
93:fb:a4:99:8d:61:57:ac:ea:02:3f:79:9a:d9:98:89:be:12:
de:a8:da:ba:3c:51:68:25:7a:b0:5a:6b:bc:ea:8b:b6:0b:11:
3d:4f:cd:76:37:6d:54:6d:85:65:67:b7:c2:65:94:54:4c:eb:
3a:ff:41:74:a2:99:2d:dc:08:c3:6e:13:0c:97:9a:6e:43:9d:
84:be:1c:cf:57:44:e4:1b:ef:19:da:74:9f:ea:52:d0:c5:79:
d3:ea:97:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:58 2025 by rpki-client