Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dedd5e4-4ca8-3001-959c-e1e53f2134fc.roa
File: 9dedd5e4-4ca8-3001-959c-e1e53f2134fc.roa (raw, json)
Hash identifier: BfgHgpxyM72UOtteWFOBw13B655kVyQsjkJRYOSuJJ8=
Subject key identifier: E8:39:F1:C0:42:F6:B1:89:C3:69:C1:A8:47:65:7E:8E:1E:E7:C1:45
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780267DEA1BD2C9466FD11B00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dedd5e4-4ca8-3001-959c-e1e53f2134fc.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3e70::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:7d:ea:1b:d2:c9:46:6f:d1:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=2ed7d715-84e3-4093-ad1e-64059d7e7ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:07:74:0c:8a:0e:b2:4d:7e:96:d4:ce:e0:9c:
5e:e4:17:5e:cf:2d:1c:65:ec:18:c6:25:0c:27:96:
63:5a:b5:ce:01:31:19:a1:34:1b:ec:57:3d:42:cb:
15:d3:26:6a:8a:7b:7e:a7:88:50:75:50:a2:48:ae:
06:ac:30:f9:a5:ee:b5:cc:91:e3:af:6d:1f:4d:62:
7f:db:e2:6e:73:b9:6c:1a:d8:6a:dc:27:db:27:44:
52:d1:c5:1e:eb:b9:ea:0e:c0:45:4d:3c:ff:07:2d:
a8:e2:4d:1e:86:f0:37:25:56:ae:5f:17:ef:b5:bd:
1b:c9:9a:a3:f6:bc:1e:1f:de:02:6b:84:02:a2:f7:
e5:73:30:ec:fc:56:3d:97:2a:00:10:5c:10:63:ea:
fb:c7:d8:f3:a6:2a:09:66:6d:09:a8:df:70:b3:fe:
b8:15:92:3f:be:56:e3:63:f2:aa:7a:93:a7:d9:28:
f9:e4:cc:23:53:76:d1:f7:7f:b5:de:cc:93:da:2a:
42:99:64:c6:bc:c0:70:ff:81:d6:cb:ec:3d:c0:78:
b6:65:c7:cd:3b:c2:33:24:cb:50:eb:f7:dc:4b:c9:
ee:bf:33:24:61:e2:e2:01:65:0c:88:b7:ee:18:2f:
d7:4e:aa:b2:4b:a2:3d:b4:53:15:a9:0f:cf:60:5b:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:39:F1:C0:42:F6:B1:89:C3:69:C1:A8:47:65:7E:8E:1E:E7:C1:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dedd5e4-4ca8-3001-959c-e1e53f2134fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3e70::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:a6:e8:c6:ea:c2:3b:d7:48:1f:52:c2:8d:3e:af:af:c2:91:
41:0c:99:0c:2b:8a:d7:65:53:ba:7c:4c:04:c7:6c:d6:3e:f1:
14:3e:a1:dc:2c:aa:2c:c9:3d:78:87:0d:f1:0f:f7:f9:97:f8:
e2:56:23:f9:fc:1f:49:7f:ff:54:57:19:34:cd:8d:80:40:c0:
50:b0:a7:d6:be:c4:e5:6d:08:f4:32:fd:f3:36:53:bf:0d:66:
45:23:11:e6:58:61:5f:63:b3:a4:6b:ab:86:40:f1:39:22:31:
95:d2:2c:c9:81:37:d2:78:68:93:0d:11:8f:fe:04:08:cd:f6:
be:c7:2c:6f:cb:70:6d:e4:e8:62:a1:10:a8:a4:94:20:d8:40:
39:6a:69:4b:78:c0:48:54:89:36:c4:11:49:0e:66:64:34:bf:
d0:b3:58:2b:41:5d:43:3e:83:d9:40:08:ca:4a:28:f0:1f:14:
29:bb:f4:f3:1a:c5:da:57:48:46:5c:10:19:15:fe:c6:6d:2c:
1a:32:01:0a:51:cf:64:f3:bb:40:c0:d6:e8:33:0a:bd:6b:b1:
23:8a:44:7e:07:6d:c5:9e:63:d7:91:df:5f:fd:95:94:5c:74:
15:6c:48:24:c5:1e:f5:39:ad:ef:1d:4e:ca:20:38:73:45:00:
14:34:73:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:03:57 2025 by rpki-client