Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/903b9ae9-a778-33cc-a970-ab35cb4f33ea.roa
File: 903b9ae9-a778-33cc-a970-ab35cb4f33ea.roa (raw, json)
Hash identifier: mjRAJ0Ui48djKSBv1/6IfhW2z0e5ML9x9paI9eB727Y=
Subject key identifier: 3C:FA:33:A9:F2:C2:51:EA:5D:F8:9B:23:A7:B5:FB:4D:71:A3:AF:7E
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802670B9580C6D154E680F40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/903b9ae9-a778-33cc-a970-ab35cb4f33ea.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2230::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:70:b9:58:0c:6d:15:4e:68:0f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=66fd306c-8a63-4f41-be9a-fab542eb8bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:28:70:85:7f:ec:2c:30:49:00:a8:c9:72:
82:16:b6:ac:40:0b:9f:31:2d:5b:d6:4c:50:34:2b:
71:d5:84:48:cb:d6:e3:9c:1a:9c:bf:dd:c0:0d:4e:
21:b6:4a:4b:47:06:e3:eb:f8:9f:73:7b:cb:c3:00:
56:9f:78:2e:43:4d:65:7a:8f:f4:d1:37:0c:d0:bf:
ae:c6:3f:0e:6b:ac:d1:bc:b5:fb:2a:d2:7e:d4:2a:
5c:11:fa:54:a5:60:ca:ec:75:ad:d3:0d:4a:73:b6:
85:b9:89:4f:14:74:ee:b1:b7:2a:9a:d9:3e:2f:66:
a4:e4:83:c1:a8:d4:29:dd:f0:6b:3f:93:e0:7d:8a:
ce:bc:0b:f5:18:ce:e9:63:75:67:09:27:fe:b9:a6:
b6:4f:ea:bf:1d:ee:c8:e0:41:90:e3:ba:a9:ee:de:
74:4d:6c:4f:50:ad:8c:75:2f:d5:30:50:d8:83:56:
c2:26:bd:d4:3b:20:af:d4:c9:ce:f5:8b:73:ff:0d:
32:f1:cd:7a:58:a4:87:21:d5:2d:4c:68:38:9c:fd:
40:ba:30:de:cb:3e:e9:53:40:a4:75:1c:7a:6c:40:
67:5e:ca:c9:ce:30:6e:57:8b:c4:9a:a9:11:4f:53:
da:e3:3a:90:34:79:1e:67:d9:d3:0c:06:be:6d:28:
c5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FA:33:A9:F2:C2:51:EA:5D:F8:9B:23:A7:B5:FB:4D:71:A3:AF:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/903b9ae9-a778-33cc-a970-ab35cb4f33ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2230::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:e4:1e:05:99:38:5d:69:fe:6e:42:18:b5:cb:46:66:64:3a:
cc:1c:30:e1:ba:96:a9:c7:b5:c4:43:5b:3b:8a:87:10:fb:19:
62:4a:ec:7d:c2:39:1e:ed:bb:7a:dc:dc:d5:97:c4:3d:e1:88:
dd:35:de:db:2b:d4:a4:f8:1f:e6:72:0d:79:c5:3c:e1:ce:54:
d6:09:45:cd:3b:7f:1d:f7:f7:23:79:86:07:c6:8e:ce:80:27:
02:42:a9:63:3c:28:d7:73:0f:1b:33:e8:91:90:8b:fb:e8:35:
e3:55:8c:0c:b8:f7:5f:07:e9:ba:da:70:f9:64:a6:d9:a4:e1:
7c:2d:45:4d:d4:75:f7:07:66:0a:af:01:c5:c1:85:1f:f2:b4:
52:92:a9:61:a9:14:53:a1:64:46:5f:86:36:56:26:2e:f4:11:
4e:ce:10:40:34:4c:fe:9d:97:2e:48:c3:95:96:c9:ea:9c:b4:
32:f1:d9:4f:e8:fb:fd:69:4e:66:3c:d1:a9:ee:ce:b0:ad:bb:
df:18:e4:65:6f:c7:55:72:35:72:02:3f:95:da:95:ea:ed:fc:
ec:c0:95:cd:f9:d9:11:a4:65:f6:6b:98:a2:b0:03:55:21:c9:
55:e1:21:8d:f6:ca:6b:cf:f7:09:ae:b2:df:de:ba:60:e0:b3:
5f:3f:a0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:16 2025 by rpki-client