Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/984642b3-6eba-373e-a30a-cdc62f56b509.roa
File: 984642b3-6eba-373e-a30a-cdc62f56b509.roa (raw, json)
Hash identifier: 5S+RXIYmWOqsBDV05Scsk4fr3ti5T9p1gwqpxRDHItg=
Subject key identifier: 16:4A:C7:4B:8C:BD:A7:2F:A2:DD:C7:EF:AD:B8:DE:B3:16:8D:3C:8E
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858478026800E2A1C9E29CE704E80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/984642b3-6eba-373e-a30a-cdc62f56b509.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3640::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:80:0e:2a:1c:9e:29:ce:70:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=f9c3bab7-e85e-44a2-a005-535b9fe66346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:67:98:2c:c3:c2:0d:8f:2f:51:c2:e2:06:
05:c5:28:80:83:2b:50:4f:b3:b1:69:69:a8:57:85:
79:58:dd:5d:6f:63:20:d1:47:f2:62:1c:01:17:a5:
2b:6e:4e:3d:60:71:94:5f:88:d3:10:ff:eb:e8:aa:
c9:48:db:9b:f7:17:ad:c8:77:01:b1:a0:97:41:09:
38:9d:f7:bf:ab:8c:2e:ad:5f:e7:8c:91:de:a7:70:
88:70:1a:dc:79:ec:34:f0:85:d0:7c:5b:e8:69:af:
df:2e:59:08:1d:ad:8b:c3:9a:6e:7c:b6:fd:b9:5f:
8f:f3:d5:11:7c:e9:38:f5:50:05:f5:dd:a3:fc:4a:
22:87:e1:b3:e4:8d:34:98:95:7a:ee:00:63:2f:dc:
6a:49:d4:b0:08:f6:45:c8:e1:12:2c:12:7a:b0:05:
f0:06:30:87:5c:bd:9a:67:cc:c9:2f:0f:31:e0:05:
93:58:89:34:fc:52:90:b9:92:ab:e7:b1:6e:8a:e0:
d4:84:98:07:8c:da:44:e5:4e:45:d8:c7:b0:ad:af:
56:cf:c4:ef:a6:4c:cc:b3:ce:51:7c:4d:45:f3:77:
3a:ad:59:f1:32:9d:38:ad:69:31:9b:9f:a0:83:90:
3d:0b:fb:04:3a:bd:39:7b:ad:51:70:5e:73:95:ce:
4a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4A:C7:4B:8C:BD:A7:2F:A2:DD:C7:EF:AD:B8:DE:B3:16:8D:3C:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/984642b3-6eba-373e-a30a-cdc62f56b509.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3640::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:b1:d6:0e:2c:b5:a7:f6:fb:12:e3:ad:f4:a7:3c:d3:64:66:
bb:00:cd:c5:51:dc:cf:5a:eb:b4:63:1e:e2:a4:d7:25:6b:84:
16:d5:bd:40:fa:b3:87:2d:0e:ec:74:cf:2e:a2:1d:74:2d:4b:
90:1b:11:80:fa:0e:d6:04:7e:39:b3:59:34:4d:05:12:54:dd:
0a:77:0c:8e:b8:1c:fa:9f:7c:2a:7e:9f:4d:9f:8d:76:3d:42:
6a:aa:2e:0d:32:c2:b3:ae:c5:5c:ea:86:f6:b5:21:01:e9:9f:
0e:ef:e7:ae:7b:4f:ec:2b:f0:f5:4f:89:65:81:1f:e8:5d:c2:
9d:45:91:f6:cb:0d:0a:3d:1e:75:1e:3f:ce:2b:af:f2:3a:f4:
80:95:2f:e7:17:d2:35:64:66:1d:d6:a5:0f:15:1c:60:1c:53:
79:4d:cb:fd:da:32:46:fb:31:9f:fb:21:fe:b8:a7:4f:d8:25:
2c:bf:cf:01:5e:3e:41:30:84:06:c9:42:7b:8a:5b:1e:c7:f4:
c1:c2:25:d9:ca:02:06:c6:3a:e0:dd:22:31:f9:ba:ff:95:0b:
38:7a:68:0f:eb:5c:2c:17:11:70:f2:ed:02:21:c9:39:dd:41:
fd:bd:f1:ef:3a:3d:90:d1:cc:25:50:c2:ad:cf:a1:aa:8c:e8:
37:f8:4d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:43 2025 by rpki-client