Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a68d386c-b73f-3b2d-ad43-ed5c0fa592c3.roa
File: a68d386c-b73f-3b2d-ad43-ed5c0fa592c3.roa (raw, json)
Hash identifier: 3VdHRmEAoU1GDOaLGBbCqRir30pGCDp9OkHXjL+MXBE=
Subject key identifier: 29:EE:45:E9:A1:A5:7B:A3:FB:B1:A2:45:06:86:89:5F:5E:F7:44:F0
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802675301AB3DF47F0ADB600
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a68d386c-b73f-3b2d-ad43-ed5c0fa592c3.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:29e0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:75:30:1a:b3:df:47:f0:ad:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=0a048653-254b-4d45-90af-0646b8f1d8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c1:e2:1d:ee:36:d7:9d:21:50:3c:6f:e4:34:
fb:d2:7c:09:41:4a:b9:52:7e:82:ea:5e:84:57:c9:
27:0f:43:9b:eb:2b:08:ce:3e:0e:b8:ef:b6:b3:b9:
c4:a2:b9:4d:87:36:36:f5:4b:14:83:3a:23:6b:69:
c2:99:fb:f1:d4:37:61:51:d4:fb:8f:b0:d1:a3:7f:
74:0f:de:32:18:6c:2d:3f:7b:de:9e:66:8b:c5:a4:
4a:5a:cc:64:0e:8d:82:2b:83:f2:dc:41:60:19:fe:
5b:8c:1c:87:96:6a:48:b6:70:2c:cc:96:7c:5e:c1:
3d:fe:b5:fb:d6:de:8c:a5:90:50:6f:a4:02:78:72:
15:5c:2a:60:7a:8d:85:9c:9a:15:34:a7:ba:e1:9e:
da:b3:46:74:95:04:ef:9c:fe:fe:11:7b:6e:55:b4:
72:38:86:30:e2:f9:1a:a4:e2:88:3a:6e:0d:45:47:
72:5c:9e:44:ae:5d:70:c8:0d:9d:a4:14:43:ae:e4:
5b:53:fa:37:2d:6e:35:be:ab:6e:3d:6a:56:4a:d2:
5d:d1:dd:49:4d:43:6c:01:96:e7:04:31:9f:75:44:
02:8e:c3:c2:b2:fc:83:4c:49:03:fa:f4:6e:dc:20:
91:b9:bb:80:49:cc:91:fa:2d:61:39:06:9b:69:d4:
ee:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EE:45:E9:A1:A5:7B:A3:FB:B1:A2:45:06:86:89:5F:5E:F7:44:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a68d386c-b73f-3b2d-ad43-ed5c0fa592c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:29e0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:b8:c1:06:9d:a2:58:50:5e:e0:0f:bb:a6:b9:a5:f2:08:f7:
01:ec:25:62:09:19:34:78:38:90:37:da:a5:f6:95:d2:17:af:
6b:42:0f:5c:03:7c:46:09:4c:ff:67:91:32:17:13:a3:33:22:
7c:ff:64:3d:c8:dd:3d:55:89:8f:d6:66:d6:c3:10:5b:00:3f:
6f:31:54:eb:d5:73:d0:dc:9c:dd:db:aa:fc:d6:22:ed:23:23:
14:d4:c1:8e:ac:6e:72:dd:01:ca:75:f5:0e:ca:56:d6:b9:8c:
11:4e:c0:2e:63:8a:43:b5:35:26:8e:79:f8:75:44:98:8b:ac:
b5:6e:6e:7d:13:23:8d:a0:6b:f4:d1:fa:7e:7a:71:10:e2:86:
d9:74:23:85:b8:eb:73:03:84:9c:11:cc:6f:29:09:5c:23:28:
04:e0:d5:07:9d:80:b3:99:74:d1:8a:19:96:f0:e2:bf:b2:3d:
32:b6:83:c0:5f:76:c0:11:2b:e7:61:36:4e:60:71:8c:11:79:
73:75:00:01:5f:aa:71:01:4b:09:e8:1e:7d:d0:38:9f:84:ce:
08:21:d0:0f:67:fb:46:38:2c:41:2e:ce:59:1b:da:67:03:66:
ee:4e:c6:30:a0:3a:cd:0f:c7:f0:aa:01:5a:30:18:9b:7f:7f:
04:25:9d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:02:41 2025 by rpki-client