Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a5d9dfcd-25f6-32b3-9613-a37f9c1502b6.roa
File: a5d9dfcd-25f6-32b3-9613-a37f9c1502b6.roa (raw, json)
Hash identifier: XmqOyDRUctfIiK3ikox/ZC0KVrT64qi//Uo396wjAm4=
Subject key identifier: 15:CE:A1:4B:9E:A6:5C:62:06:66:88:7E:64:33:06:6D:79:0E:B3:4B
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780267B55D4E1454054ED2680
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a5d9dfcd-25f6-32b3-9613-a37f9c1502b6.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2590::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:7b:55:d4:e1:45:40:54:ed:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=5cf069bf-aba0-45b1-aa5f-d771cad3532b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:99:57:b9:72:07:84:3f:be:31:f7:ea:30:18:
e4:b7:6a:d6:05:2d:ae:72:7b:2a:9b:4a:cb:15:53:
95:24:a3:64:55:f9:40:18:66:a8:55:07:5e:bd:18:
04:75:32:03:84:32:2b:f6:25:75:41:c8:1e:83:78:
bd:d2:4b:f5:ec:60:d1:e2:d7:e6:2a:73:42:fe:d6:
a3:d1:91:85:7f:f1:83:0d:9e:58:71:92:39:6f:5b:
e1:aa:e2:c0:12:7d:89:cd:e2:8e:b8:32:81:55:a5:
92:8b:c0:ea:d9:e9:d1:d4:76:3f:ae:a9:26:ec:ca:
10:ab:30:fe:bc:af:91:ac:b9:4b:e8:73:e4:be:53:
97:9e:a0:32:47:cc:e8:d5:cd:4c:08:a8:7d:10:e3:
62:27:50:33:73:e5:18:83:a8:d5:c4:90:31:96:14:
ca:50:ba:17:45:c7:16:48:7f:fe:29:2f:ce:98:d4:
a3:0a:22:d1:2e:e3:8f:e9:b6:b3:ab:ba:c4:99:52:
52:3d:35:80:64:46:cf:35:36:5a:48:e6:67:c2:cb:
3d:08:84:e8:10:2b:ef:cd:7e:6d:9f:30:23:cc:30:
e9:af:ab:1e:82:5b:4e:e9:13:84:08:83:4b:ec:fd:
d6:62:3f:64:da:28:42:3e:ea:f0:e3:77:99:a5:a6:
09:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CE:A1:4B:9E:A6:5C:62:06:66:88:7E:64:33:06:6D:79:0E:B3:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a5d9dfcd-25f6-32b3-9613-a37f9c1502b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2590::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:33:1c:3e:fd:57:c1:7f:c3:74:d8:0d:14:37:68:f7:7a:ff:
0c:75:19:76:aa:d4:b3:92:8d:18:20:12:27:d1:24:0c:ad:62:
3e:e2:55:b4:53:37:d5:a8:5a:35:9c:05:29:76:fb:16:d4:7a:
26:dc:a4:d8:33:94:7c:fd:de:07:75:6c:f0:cb:58:a8:79:21:
ba:32:91:c3:ed:95:1a:b3:99:6a:9e:71:6e:1f:24:cb:8b:be:
27:95:ca:5b:3a:68:b0:eb:f1:e0:ca:0a:6a:76:31:a3:81:a2:
48:b6:0c:d1:dd:06:6f:70:12:2c:c3:8a:fd:33:56:34:c0:26:
d5:87:ff:29:c0:b6:84:1b:af:17:cc:0e:47:a6:8e:19:72:6e:
b9:b7:49:79:b8:3b:77:42:7c:a2:a3:6a:d5:bb:87:b6:e2:04:
e9:d5:01:17:b3:b5:18:64:68:a0:76:f2:12:3f:f9:0d:b4:5d:
ab:43:96:84:8d:86:5a:00:96:76:52:44:5f:40:ea:fd:69:fe:
74:68:56:c9:f5:60:1a:cf:34:9b:5f:ad:0a:57:2c:a6:65:03:
f0:05:c6:2b:32:f8:7f:d8:82:d7:ec:eb:15:66:2e:86:2d:b4:
22:0f:e1:84:3e:ef:39:dc:78:11:ae:67:6e:0b:70:bf:ff:01:
64:93:8f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:40 2025 by rpki-client