Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ca0fee5-bc09-3da4-8575-40bc82953498.roa
File: 9ca0fee5-bc09-3da4-8575-40bc82953498.roa (raw, json)
Hash identifier: zFpWHsMWCWajY0r6990fwIHn4z3H+EoQa7H7YRa8zG8=
Subject key identifier: 2C:64:81:E1:EC:E3:EB:C9:D1:F2:29:A5:AD:26:77:35:73:95:91:BB
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858478026698268EFA18CD660B500
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ca0fee5-bc09-3da4-8575-40bc82953498.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2850::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:69:82:68:ef:a1:8c:d6:60:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=207d0439-cbbf-4418-8c09-0f473d3380c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:15:c2:77:f3:7b:3b:4b:9f:1d:40:79:fd:
d5:3c:4f:71:7b:a2:b6:68:2a:85:90:7e:ef:6f:b2:
56:46:db:c1:44:5e:74:c5:b8:ee:a8:b3:29:b3:e1:
c0:0b:df:57:2d:e3:5b:f9:73:ec:dd:94:3d:a4:a2:
c0:4f:2d:3e:9b:73:2b:0a:ee:82:27:52:c1:7a:3c:
1f:be:19:df:1a:db:6d:13:ca:a0:45:c3:93:35:6d:
79:db:cb:af:ca:28:60:42:2c:01:34:a0:ef:08:c8:
cd:27:a7:ab:c0:5f:9b:73:c8:9a:bf:ed:57:a1:df:
01:6c:49:ab:51:d0:cd:1a:42:41:d1:1d:35:8e:bb:
d5:51:10:8f:af:9c:e0:48:f1:f0:19:4f:73:96:82:
65:0b:b5:1b:06:c8:70:7f:0e:87:b7:bf:b8:94:b3:
f4:a6:8e:5e:4e:0c:53:11:3c:0b:a1:ae:e7:79:cd:
cc:c8:d0:8b:a8:ab:c9:96:f6:44:f7:a0:08:08:8a:
15:1e:b1:af:35:5f:37:fc:54:89:ee:f0:af:81:11:
ac:9d:1f:30:6b:1c:b1:39:5a:fc:0a:f0:ff:a9:9e:
03:08:c5:d7:d1:3b:84:e9:96:6d:38:97:83:df:92:
41:01:d9:90:56:74:0b:16:18:0a:25:e5:06:e4:4d:
34:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:64:81:E1:EC:E3:EB:C9:D1:F2:29:A5:AD:26:77:35:73:95:91:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ca0fee5-bc09-3da4-8575-40bc82953498.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2850::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:cf:87:2f:64:f0:a5:f6:e8:12:66:7d:74:9f:cd:b0:96:31:
06:81:14:cd:21:cd:a4:d9:44:21:a2:c0:41:a1:7b:31:3e:62:
b7:2d:4d:bd:0f:95:96:d6:6d:25:c0:80:ce:8c:bc:79:0f:fb:
d8:6b:33:16:e0:07:9e:40:2e:3f:e5:94:d8:b8:f0:c4:61:3b:
a5:b5:e6:8b:24:61:b5:97:30:f7:85:cc:8e:96:05:19:12:7c:
f2:6a:97:d6:f9:bc:bb:d5:f6:c8:74:42:84:d4:2c:ca:4b:3b:
90:08:97:24:af:83:a3:3e:d3:af:b7:d0:ee:c7:1a:e8:5b:5d:
59:30:49:1d:8c:0a:0f:51:6d:5b:b7:46:ca:9c:67:db:29:aa:
80:80:b4:0b:7d:2c:73:b0:07:e3:a3:1d:12:71:16:46:f0:d2:
bf:45:c4:c4:6e:b6:cb:dc:79:57:e6:76:24:4e:6b:68:ab:b8:
86:80:c9:be:6f:7c:24:fd:70:4b:28:48:0e:13:d4:fa:de:8d:
f2:7f:82:7d:2d:3d:94:7f:88:fa:3b:78:a6:92:dd:53:fe:ae:
6d:3a:bc:43:00:29:2a:cc:8e:fe:af:39:0a:d6:cd:c1:02:3f:
05:c6:7f:e5:49:97:00:4a:cb:5d:c6:43:1b:9d:1c:2c:03:df:
f6:ae:be:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:27:37 2025 by rpki-client