Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/973d2f33-d19b-33d2-a12f-5879d18cbcf8.roa
File: 973d2f33-d19b-33d2-a12f-5879d18cbcf8.roa (raw, json)
Hash identifier: KEZ5qQG3GcocRm8HIBe9ZBNCynQH0d1qfgUGVOxltjc=
Subject key identifier: 90:7D:24:04:DE:B2:41:8F:41:C5:82:24:9A:B9:1F:CA:B4:23:FF:CB
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780267DB60AEAE5FF16705A40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/973d2f33-d19b-33d2-a12f-5879d18cbcf8.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:25b0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:7d:b6:0a:ea:e5:ff:16:70:5a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=6aae7f7e-e290-4f0a-b89e-efd63a21e88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:54:f8:33:90:9a:33:70:65:23:48:de:75:3d:
59:78:75:1f:04:7a:ee:be:03:a1:55:fb:44:73:a2:
0a:47:5e:0d:e3:b5:c4:9e:cf:08:3a:fc:9e:cd:f5:
1b:10:3a:f8:73:bf:88:22:36:a8:d0:6e:af:8e:0b:
de:7c:07:92:c6:6a:b3:84:b5:7f:20:ff:20:e0:6c:
55:b9:78:0f:73:02:17:5d:93:62:17:f1:40:c0:55:
1b:de:00:9f:75:0a:c6:58:f1:0c:67:6b:b7:81:c7:
d3:3a:be:fb:cb:fb:28:a7:60:93:45:6f:24:62:17:
e4:a6:73:0c:12:da:16:a2:63:7f:a4:81:da:c6:75:
bc:4a:84:a1:46:19:8c:00:f9:99:c7:5c:36:8e:63:
6c:ab:1b:39:b5:81:4e:cc:32:c4:17:eb:45:9d:d7:
af:3d:e2:f9:28:72:f7:10:bd:9d:d2:8d:c7:bd:e7:
b3:83:2f:78:b8:fe:67:70:fd:57:d7:36:58:94:70:
94:5b:87:79:be:37:4a:b4:22:68:db:85:8a:61:19:
a0:9c:c4:c2:18:35:0c:d9:b5:35:59:38:92:d6:cc:
d2:7e:94:36:d9:7a:0a:ba:87:49:35:10:ce:00:e0:
0d:1c:25:c0:a3:53:df:95:5f:f2:84:ba:d5:a3:2c:
0e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7D:24:04:DE:B2:41:8F:41:C5:82:24:9A:B9:1F:CA:B4:23:FF:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/973d2f33-d19b-33d2-a12f-5879d18cbcf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:25b0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:7c:6e:0c:eb:cd:36:63:d6:bb:39:6e:a6:6c:cc:0a:28:50:
a6:64:0f:21:a9:21:13:c6:28:93:2a:e9:46:56:f5:fd:4e:0e:
46:32:76:55:d6:b5:a8:4d:4f:84:50:3f:91:cb:9a:c4:c1:00:
f2:1d:f7:02:d1:f8:4e:de:81:dd:5e:19:ba:dc:6b:57:1a:28:
1e:85:ba:d1:66:23:76:b4:5a:58:2c:73:b0:44:f7:a1:e8:65:
44:08:da:b6:8d:88:e6:4a:f8:52:2b:b0:36:7b:bc:9d:9e:2f:
95:5f:05:cb:a6:7b:c1:ac:5b:91:c0:fb:64:0e:50:cb:0d:a7:
a3:02:42:a1:7e:cd:79:4e:e6:55:57:fb:df:a2:f2:d7:b1:d1:
2c:12:16:b9:57:8b:3f:61:4e:7e:65:89:eb:43:32:a7:12:18:
14:e1:16:f9:e2:db:6c:5a:0e:5e:2b:9b:d7:8f:5d:35:5e:bd:
aa:86:b6:e6:5e:60:5c:01:75:89:a1:fc:19:ba:63:82:6e:55:
85:da:25:24:9c:18:75:95:be:5e:24:95:a4:87:95:7f:45:04:
3e:85:96:95:2e:4f:a2:97:02:f3:02:75:ac:fb:7d:21:7f:86:
24:15:b5:17:f4:00:13:18:d3:82:d8:6e:4c:d2:04:80:cc:cb:
b2:d3:08:b8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJn22Curl/xZwWkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
NmFhZTdmN2UtZTI5MC00ZjBhLWI4OWUtZWZkNjNhMjFlODhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFT4M5CaM3BlI0jedT1ZeHUfBHruvgOhVftE
c6IKR14N47XEns8IOvyezfUbEDr4c7+IIjao0G6vjgvefAeSxmqzhLV/IP8g4GxV
uXgPcwIXXZNiF/FAwFUb3gCfdQrGWPEMZ2u3gcfTOr77y/sop2CTRW8kYhfkpnMM
EtoWomN/pIHaxnW8SoShRhmMAPmZx1w2jmNsqxs5tYFOzDLEF+tFndevPeL5KHL3
EL2d0o3Hveezgy94uP5ncP1X1zZYlHCUW4d5vjdKtCJo24WKYRmgnMTCGDUM2bU1
WTiS1szSfpQ22XoKuodJNRDOAOANHCXAo1PflV/yhLrVoywOKQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJB9JATeskGPQcWCJJq5H8q0I//LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTczZDJmMzMtZDE5Yi0z
M2QyLWExMmYtNTg3OWQxOGNiY2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQCWw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA98bgzrzTZj1rs5bqZszAooUKZkDyGpIRPGKJMq6UZW9f1ODkYy
dlXWtahNT4RQP5HLmsTBAPId9wLR+E7egd1eGbrca1caKB6FutFmI3a0Wlgsc7BE
96HoZUQI2raNiOZK+FIrsDZ7vJ2eL5VfBcume8GsW5HA+2QOUMsNp6MCQqF+zXlO
5lVX+9+i8tex0SwSFrlXiz9hTn5lietDMqcSGBThFvni22xaDl4rm9ePXTVevaqG
tuZeYFwBdYmh/Bm6Y4JuVYXaJSScGHWVvl4klaSHlX9FBD6FlpUuT6KXAvMCdaz7
fSF/hiQVtRf0ABMY04LYbkzSBIDMy7LTCLg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:16 2025 by rpki-client