Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a8dcd799-5673-339b-8227-4e0b8ab57c5a.roa
File: a8dcd799-5673-339b-8227-4e0b8ab57c5a.roa (raw, json)
Hash identifier: gX9oo7G4EwWS0uzfA3jjUt6fTG/E/CzbOflS0d4tc4Y=
Subject key identifier: FD:49:F8:8E:8B:BE:B3:F5:1C:B3:30:AE:88:61:30:9F:7E:9E:84:85
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780269A09C31999CFD44D0700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a8dcd799-5673-339b-8227-4e0b8ab57c5a.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2010::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:9a:09:c3:19:99:cf:d4:4d:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=9e49708c-077b-4114-947f-a53cb719bea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c4:68:f4:f2:5c:57:42:0d:e2:33:bc:fb:f6:
0b:e3:d5:48:cf:2c:44:ae:8d:d1:01:1a:c6:92:00:
57:5e:d0:19:f7:e5:75:dc:0c:cd:5b:f2:0d:50:84:
e5:b1:a1:ff:4b:00:18:3d:6d:79:f1:dc:5b:3b:35:
a7:56:c9:f1:31:bc:30:95:60:99:cb:a1:a2:83:fd:
bd:53:14:9a:a6:2b:bc:ea:44:8d:97:67:3b:41:35:
4c:17:1b:9b:44:fa:a5:be:ac:33:7a:0b:1c:79:25:
49:eb:50:b2:61:bb:a9:54:4a:b9:6f:09:41:cd:08:
f5:32:e5:b0:21:1d:1d:fb:3a:8b:3c:13:97:2c:3e:
ff:a2:bb:a7:f1:b3:f9:07:a0:6d:0c:11:f0:5f:7f:
99:c9:0c:41:c9:64:5b:6c:c4:80:d2:53:fb:d3:49:
a0:fc:27:39:e5:2c:23:64:a5:70:1d:96:e7:13:5b:
50:27:a9:ba:da:72:c0:7b:2c:86:48:51:60:fe:2c:
f7:17:f2:b9:b8:03:4f:52:0a:9f:14:11:33:87:9d:
ee:aa:80:c2:d7:42:5e:66:b2:3f:56:da:f8:30:ba:
de:ac:8f:e9:dd:61:f7:5e:b6:5e:33:53:b8:55:ad:
18:81:0e:76:79:73:4f:11:20:0e:fe:06:86:91:f2:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:49:F8:8E:8B:BE:B3:F5:1C:B3:30:AE:88:61:30:9F:7E:9E:84:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a8dcd799-5673-339b-8227-4e0b8ab57c5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2010::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:64:e5:60:c6:d8:66:e1:0f:6b:f2:ab:e5:97:bf:7f:74:25:
65:d6:90:7e:16:11:d9:c0:de:c1:0d:cf:77:28:18:28:3a:9a:
02:3b:d5:0f:9b:32:26:f9:1d:44:9a:c8:d5:ab:2a:69:3f:8a:
47:69:73:cd:cf:c2:bc:66:ed:f4:9e:f3:56:94:37:b2:24:ad:
90:e6:a7:c6:9a:18:f7:4e:e6:9a:8c:38:11:37:d1:ec:7d:20:
ad:ea:16:47:3f:28:e7:fd:7f:3d:aa:2a:04:3f:af:c8:0d:57:
d2:d4:af:3e:3b:f1:a7:03:65:5b:ca:18:d1:17:7d:94:09:ad:
e2:f0:4a:30:d0:87:5b:fd:eb:a2:40:68:be:db:cc:50:c9:54:
c0:9e:30:67:3a:ca:09:e7:1e:a0:b6:08:3c:01:29:31:4e:1b:
a6:97:ec:13:94:ba:37:3a:6c:4b:b3:49:8d:e5:88:d1:7b:91:
8f:be:87:9d:38:26:8b:f7:57:b3:4e:87:2d:34:d9:c6:3c:5a:
71:c1:c0:8c:21:5a:32:b7:2a:82:62:76:9f:ac:7c:90:9a:2a:
5b:db:da:01:54:e1:31:dd:dc:9b:89:f3:c2:e5:de:2d:84:08:
92:02:da:36:25:94:d8:6d:4a:2b:ef:1e:d8:1d:ee:4f:10:40:
b6:86:f1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:39 2025 by rpki-client