Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad3a6474-6588-3ef2-ae19-011186f949a5.roa
File: ad3a6474-6588-3ef2-ae19-011186f949a5.roa (raw, json)
Hash identifier: ceAgfZMDyOn3raaRuuTQFuq+qBnySOB9W1mnYjQpxDk=
Subject key identifier: 10:3A:2B:15:BD:06:36:C2:BD:CF:CC:1D:CB:B5:84:14:7D:45:31:A8
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802674DC17F246AFCA47BE00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad3a6474-6588-3ef2-ae19-011186f949a5.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2030::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:74:dc:17:f2:46:af:ca:47:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=061c8bd0-0493-4f09-819b-8ec0827ee9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2a:c0:34:57:dc:3d:43:f4:db:c2:1e:5b:b2:
15:ce:1d:06:f6:de:09:4b:bb:09:f5:ba:b0:10:c3:
a0:fb:3c:72:3c:76:83:42:9c:95:1f:d6:fa:fc:fb:
1a:d5:07:06:96:8e:68:b2:30:44:c2:78:ef:4f:2d:
83:88:95:bc:88:c9:b7:4b:2c:52:75:ff:ce:d6:d0:
5e:12:65:38:fd:df:ba:8a:9f:43:d6:8f:45:45:fb:
46:d0:3d:bb:d5:0f:9e:72:86:45:14:4d:06:c6:49:
38:ae:6c:4c:a5:f9:7f:1a:3c:6f:e0:02:1d:76:e2:
52:6f:db:66:cf:21:7e:e7:3c:41:e7:2c:c2:74:78:
3a:4e:6c:b2:a7:15:12:63:be:de:3d:05:c6:bb:ee:
e7:e6:7d:44:c6:25:74:59:09:71:3d:43:99:1c:54:
4d:c0:8b:e8:2c:b1:1b:32:9d:fa:e8:ad:4a:f2:ea:
43:b5:9e:d8:9c:ac:6c:fc:30:ee:0b:3d:72:45:25:
af:f6:a2:1f:81:2f:ba:25:2e:a6:8a:3d:ac:7f:3f:
fc:d6:c4:b3:7b:f3:3a:38:93:10:59:87:b0:c5:4b:
83:48:17:d2:3a:3f:dc:40:5c:89:0e:cc:0d:a1:13:
f0:bb:80:85:6d:89:c3:03:1e:ab:77:fa:39:75:56:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3A:2B:15:BD:06:36:C2:BD:CF:CC:1D:CB:B5:84:14:7D:45:31:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad3a6474-6588-3ef2-ae19-011186f949a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2030::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:68:7b:32:cd:7b:08:f7:53:1e:53:29:bf:b5:24:d9:15:0a:
3b:7f:09:6a:ed:57:9f:3e:9f:f2:0c:52:31:60:f1:d1:d3:da:
bc:bc:4e:fb:c5:ab:84:cb:de:23:93:fa:c1:48:bf:b6:2b:ab:
7f:e3:21:95:e9:80:63:23:9e:64:b6:ac:17:d3:11:fb:25:79:
d1:29:6c:89:8d:60:39:60:04:a1:50:03:d7:04:ca:78:4f:d9:
e9:6f:bb:31:3f:fd:2e:c1:52:be:3b:e9:52:89:9d:24:1e:b5:
f6:5d:25:36:19:54:d2:0c:c4:34:89:30:d4:1d:90:ad:3d:38:
b5:e3:cc:43:48:da:8b:08:ff:ce:cf:e8:77:60:ea:45:6e:92:
c0:ae:7b:82:ed:5d:bd:40:eb:a9:b3:fe:40:c7:aa:1c:0c:9b:
a5:c9:e4:ba:ff:19:ba:46:93:78:54:29:2b:ea:f0:70:4c:00:
42:e8:27:4e:fc:33:21:5d:ce:20:42:9f:36:b5:6c:94:cf:f6:
65:c0:a3:14:4f:50:a6:97:95:62:6a:79:8a:4d:83:cd:7f:a7:
b8:09:57:81:27:83:73:77:4f:26:cb:57:ef:aa:ce:d5:33:43:
ea:51:ef:7e:48:dd:ee:e1:3e:b6:f3:8d:f5:8a:a1:54:50:fd:
97:34:11:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:56 2025 by rpki-client