Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9b437226-83dc-3666-8ee2-50236696101a.roa
File: 9b437226-83dc-3666-8ee2-50236696101a.roa (raw, json)
Hash identifier: dfc1Qg0BgueQ+c0gfgAl6TB7lKkPGnxEY/Wj8dHqfto=
Subject key identifier: DD:FC:99:00:30:AD:56:87:CC:17:CA:70:94:74:35:6B:EE:9F:80:47
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802673D26AB27FF7CB8E5C40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9b437226-83dc-3666-8ee2-50236696101a.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:38f0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:73:d2:6a:b2:7f:f7:cb:8e:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=f4837e9c-00ac-48d6-96bd-34f144e28350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:03:40:b2:8a:ca:f6:e6:4f:9a:66:d3:8c:
67:22:82:7a:1b:ce:9c:41:29:c6:e2:4c:bc:a0:91:
75:91:eb:58:c1:bf:46:07:9b:63:54:da:f9:49:be:
11:7c:1f:fe:50:b2:c7:8b:2d:73:a1:23:ef:b9:15:
49:37:b5:58:7b:3a:44:13:a7:ef:23:e3:c4:41:a4:
f8:42:07:15:eb:1f:30:47:e3:d5:5e:e2:5d:9a:b0:
2d:af:a5:6d:32:7a:d0:39:3e:6d:0d:c5:71:91:d1:
71:1d:20:81:19:94:3f:2a:35:ab:b5:93:d5:be:c2:
ea:e3:e4:d1:e4:f3:36:59:d2:1a:71:f6:93:da:55:
b8:cc:b4:e3:3a:69:b2:7f:73:c2:df:0c:4c:76:fa:
fb:02:9d:52:d7:cf:ec:e3:f5:20:e2:5f:52:cf:33:
b2:6b:ba:06:25:97:47:1a:32:21:04:83:0a:35:3a:
a8:40:22:85:f6:27:b4:ce:db:e9:60:fb:78:a6:06:
00:e0:78:8d:48:25:0a:7e:bd:13:04:50:4a:85:9b:
7c:c6:ee:2f:b0:d7:ac:11:66:dc:a5:0c:f2:f1:1d:
0e:97:68:ec:56:41:f6:3f:5c:5f:2c:02:37:5f:2f:
32:c9:a6:1f:02:d8:30:97:a7:94:09:6c:34:af:6c:
a5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FC:99:00:30:AD:56:87:CC:17:CA:70:94:74:35:6B:EE:9F:80:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9b437226-83dc-3666-8ee2-50236696101a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:38f0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:5c:cf:6b:16:05:54:39:f7:96:01:04:60:55:50:b8:e9:e7:
98:b2:d8:10:b1:55:5b:f9:76:6e:c5:ba:82:84:20:15:95:16:
20:f5:25:ef:da:f3:9d:b5:2c:91:67:fd:c2:28:fa:dc:f7:75:
e5:6b:83:44:22:c4:3d:64:62:29:00:7b:20:a8:0a:df:42:aa:
f2:71:96:51:65:b1:0f:a8:01:f0:f0:f3:1b:49:e9:67:0c:1a:
2b:ed:66:92:61:71:78:e1:18:59:69:a7:93:d5:b0:b6:6d:a0:
03:21:ac:ff:21:e6:0a:d0:51:ec:9d:ab:20:18:54:f2:ab:10:
27:16:f6:1f:e6:03:0d:af:78:45:c5:66:78:f8:8c:d5:7f:05:
0a:44:8d:0a:cf:f9:93:a0:cc:af:fd:da:de:18:97:0b:0c:e6:
52:a5:8d:e2:3d:42:d1:09:ce:e7:b6:45:ef:9f:9f:b2:3f:c3:
96:91:37:0b:5d:d5:ef:25:5b:14:72:cc:24:19:11:36:ad:d5:
70:2a:49:a1:23:fc:65:2f:99:77:0e:6c:ac:cc:b9:a0:1f:9d:
04:99:87:57:5a:0b:cd:8c:83:ec:0e:f0:43:cf:94:0b:3e:93:
f4:5f:9f:9c:79:f7:a9:42:3f:3b:97:b2:60:39:ce:f2:09:84:
1a:80:cc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:43 2025 by rpki-client