Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a39fe9d3-6311-377e-bc52-503e9a76434f.roa
File: a39fe9d3-6311-377e-bc52-503e9a76434f.roa (raw, json)
Hash identifier: XXfXI6IuP/H7IbzQ21oDsVnIeAxgKh74JOP+o/nZPEI=
Subject key identifier: 9C:AA:B7:50:57:39:A6:43:13:E2:4D:6E:5F:D0:30:AF:50:34:A2:AB
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780267B236231DD2EA5581A40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a39fe9d3-6311-377e-bc52-503e9a76434f.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3bf0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:7b:23:62:31:dd:2e:a5:58:1a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=f892f069-be24-496f-a6bf-24532e8a63a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:30:52:c5:f6:44:55:5d:14:44:1a:35:ff:b3:
b9:0b:84:ae:aa:b2:0f:40:7e:c9:b5:7c:a8:ef:f2:
4f:7e:14:bb:02:02:93:f8:57:e7:e5:cc:e7:a3:97:
b6:a3:88:cf:58:f9:05:70:be:46:8c:22:e3:7c:05:
bc:9d:d1:02:d1:8c:7d:0c:ff:6a:ce:04:b8:3f:66:
81:30:5f:6f:4e:9f:a4:40:97:28:38:07:95:01:7a:
5a:d7:28:53:e8:58:d2:4c:55:e7:cc:bd:53:84:9b:
8a:7e:16:df:56:d6:a4:ad:bb:ba:bb:85:4c:33:c0:
74:d7:d4:90:42:ab:5a:ea:1e:f4:49:21:b2:ee:4f:
a0:01:2c:d6:98:21:03:90:87:34:84:9d:1d:e9:39:
82:58:db:ee:fc:8d:3b:ae:10:e7:d0:f5:ed:06:63:
75:10:18:8b:fa:f9:92:1b:b6:c7:c4:c2:80:45:6d:
26:c3:56:39:29:2a:0d:b5:d2:d7:e0:7a:ea:66:be:
5f:2e:62:2d:95:72:ff:7b:89:ea:dc:86:37:f2:95:
ff:1b:8b:41:f2:ee:2f:1e:f7:3a:93:8b:a7:22:1d:
ef:1e:a0:f3:a0:4e:17:28:a5:05:41:d8:7d:24:73:
40:47:b3:e8:17:82:f1:b8:8f:9f:2a:72:da:18:dd:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AA:B7:50:57:39:A6:43:13:E2:4D:6E:5F:D0:30:AF:50:34:A2:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a39fe9d3-6311-377e-bc52-503e9a76434f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3bf0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:78:7f:a1:97:96:1e:37:7e:56:5e:cd:8a:fd:8f:6d:1f:fb:
0a:32:61:89:2a:52:eb:c0:a7:af:63:c4:40:e1:27:ea:65:9f:
18:9c:ac:cf:49:89:21:48:8e:7a:51:02:3d:01:f4:31:96:25:
11:f0:12:61:ab:c1:91:30:bc:08:5e:4e:eb:2f:9f:22:20:ae:
65:1c:44:6e:47:b3:78:eb:aa:dd:cf:cb:2f:83:5c:3b:60:22:
2e:e9:c6:bf:f1:84:34:d4:9f:ce:78:60:bb:15:d0:e8:9e:f8:
0d:03:10:75:f8:5d:00:40:a3:9b:90:6c:66:a4:16:2e:80:86:
22:be:25:57:99:94:ee:b2:d1:a8:40:c8:99:f4:e2:12:b8:7f:
f1:8d:cc:2b:d6:51:94:c5:f3:5b:42:27:49:fd:e7:94:01:d4:
8f:5c:b7:f5:16:5e:a0:7d:69:07:8d:7f:84:05:1d:bf:5b:00:
49:94:eb:13:fa:43:a2:9a:57:dd:66:bf:ff:1c:8b:9a:a2:e4:
1e:bb:53:c0:7a:4c:9e:04:c6:0f:58:c0:3c:47:29:7d:51:61:
78:aa:b4:3a:6a:d5:bb:8c:70:b3:d7:68:c3:79:3c:a2:92:60:
13:46:47:ed:99:6b:f8:dd:37:12:51:dc:89:26:0a:db:1a:4f:
19:86:e2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:57 2025 by rpki-client