Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/895030c8-7ce2-317f-a208-1ad275cdd719.roa
File: 895030c8-7ce2-317f-a208-1ad275cdd719.roa (raw, json)
Hash identifier: KRD+KVMB3v/huMKeKoCeQA2CRucbPPwcqNp88N8iEJk=
Subject key identifier: 5A:E4:69:1A:92:43:52:B8:A5:4F:28:BC:06:7E:71:17:39:FE:60:4F
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858478026815DB3688374F9E79440
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/895030c8-7ce2-317f-a208-1ad275cdd719.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3970::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:81:5d:b3:68:83:74:f9:e7:94:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=4aa046d4-c08b-4bbd-80c2-c0b0f05a889f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:91:91:56:f8:19:9b:78:07:ac:0b:13:bd:b7:
a4:50:45:73:7a:44:36:fd:15:63:8a:53:b3:e4:1a:
f8:83:38:30:8c:61:a9:48:38:57:7a:b3:11:de:f7:
d4:81:6d:73:3c:c7:65:9d:c8:b4:dc:8a:70:20:69:
91:78:bc:a5:ef:fa:87:03:5e:38:27:f1:f8:0a:8b:
db:42:23:54:a2:61:aa:82:2f:34:0f:49:88:9e:c7:
3e:dc:0e:32:f9:c3:5a:4d:37:a5:0d:5e:18:be:d6:
d0:7e:6d:ee:a5:31:ee:6b:db:13:83:02:67:ac:ba:
f7:bf:91:63:fe:cb:0a:00:2b:d5:62:29:7b:4e:62:
59:e0:20:ef:fa:2d:43:ee:d1:33:ba:5d:e1:8d:c7:
73:30:61:30:ea:be:14:f8:01:48:72:fb:96:61:5d:
b5:1c:35:5f:40:e8:0c:38:1e:44:b1:af:eb:3d:9c:
dc:1f:0a:83:2a:87:0f:ca:9f:ee:c9:bc:20:08:04:
88:56:9a:76:eb:b7:95:02:bc:73:82:b4:98:40:d7:
f4:40:10:39:85:5d:48:f8:e3:11:52:a9:04:7e:ba:
9a:53:43:62:a6:16:c3:00:1b:6d:38:6e:2e:b0:e8:
73:68:2c:c5:2d:ef:7b:37:a4:38:57:cb:4e:d5:03:
e1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E4:69:1A:92:43:52:B8:A5:4F:28:BC:06:7E:71:17:39:FE:60:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/895030c8-7ce2-317f-a208-1ad275cdd719.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3970::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:71:db:19:80:d3:c3:b8:53:ee:e7:d2:90:72:c0:9e:ac:d3:
a4:7c:1f:cf:e6:68:d4:fb:5a:27:a2:19:f7:d3:21:61:21:ed:
b0:71:b6:3c:16:d2:c2:12:f5:be:b9:8c:7a:fb:3b:ca:ff:90:
8f:92:84:e1:fc:95:a2:34:44:86:74:7e:70:9e:52:0f:22:a2:
c4:da:38:4d:39:26:00:81:0e:a8:cc:d2:44:50:cd:8e:c3:86:
b9:4c:e5:e2:78:96:f7:c8:bc:0d:1c:31:64:8d:ef:90:49:9c:
49:dc:45:d9:05:de:90:6c:58:01:1b:30:72:7f:c4:34:7d:30:
61:28:08:8c:69:34:11:e4:ec:af:38:65:8b:aa:b4:c0:14:bf:
ae:79:65:8f:4d:6b:98:66:9d:7b:7b:83:ff:73:6d:3a:56:1e:
20:9f:ff:dc:cb:aa:45:36:67:6a:23:ae:66:f1:ec:73:98:60:
f8:98:77:04:2b:78:7a:1f:26:56:88:8f:89:de:b9:71:88:0b:
82:af:0d:72:c1:b7:79:24:f7:5a:2f:d0:12:0d:0e:16:3f:2e:
ac:26:8a:6f:92:b2:86:6e:a9:96:44:2d:09:9f:83:1d:bf:6b:
3f:ed:0a:98:e8:96:be:e0:9e:c1:6f:d8:6e:4a:1c:5b:d9:d5:
92:d6:f5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:56 2025 by rpki-client