Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ae6a3552-1ed0-3405-ad76-462b8ed2394a.roa
File: ae6a3552-1ed0-3405-ad76-462b8ed2394a.roa (raw, json)
Hash identifier: S2bm4OO7r8cj+3QwANtlqs776rZeXTqWHAi3lEAPXpY=
Subject key identifier: B3:7B:D7:10:55:88:4B:C5:78:16:12:E4:CA:82:7B:7A:BD:6A:49:08
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780269905854BD90FA02B1F00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ae6a3552-1ed0-3405-ad76-462b8ed2394a.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2a20::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:99:05:85:4b:d9:0f:a0:2b:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=561692d8-f679-4c72-a730-0517838d6105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:d4:5e:0d:5a:f0:54:b1:88:bd:42:45:b9:
f8:2e:94:4e:dc:e8:66:f3:15:43:24:bf:a8:63:00:
39:62:61:13:05:d9:b2:42:f2:2d:e2:72:1a:52:e0:
c8:59:bb:08:fa:1e:c0:ae:f3:51:22:49:48:e7:85:
4e:9b:03:1e:d1:6c:c3:dd:f3:22:20:50:4c:91:73:
59:bb:f9:f2:96:5c:d1:10:b5:b7:58:c4:4f:40:81:
e1:d3:d6:81:83:7f:81:97:eb:95:74:4b:47:64:99:
6b:e8:ac:8d:53:d0:fa:13:89:00:de:ab:9f:c3:0a:
eb:aa:57:01:5f:33:a7:fe:fd:fa:c7:6d:e5:20:cf:
58:d8:2c:02:6b:c7:3b:53:7c:a6:d7:d6:16:80:a2:
2f:7f:d9:b0:ba:5b:c2:d0:9e:99:2b:12:c6:d4:1a:
c9:4a:0e:40:7a:be:eb:96:62:14:a1:b3:f3:5e:0c:
24:69:e2:26:14:9c:b0:2e:97:0b:c0:91:b5:45:72:
34:7e:4c:c2:6b:c6:c0:e2:bf:75:37:bb:b4:74:cc:
ae:33:c0:66:93:50:34:e3:80:2e:97:fd:23:71:84:
80:be:98:bb:29:c7:36:86:a0:ad:fb:1f:28:29:bc:
43:19:7a:04:de:60:6b:89:7d:12:be:42:84:98:cc:
b6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7B:D7:10:55:88:4B:C5:78:16:12:E4:CA:82:7B:7A:BD:6A:49:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ae6a3552-1ed0-3405-ad76-462b8ed2394a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2a20::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:6f:ac:a0:16:a2:83:b4:ea:19:94:25:28:d0:d7:5a:9c:73:
f5:c6:3a:fe:01:d6:16:ee:3e:51:e8:1f:a4:a0:03:49:b5:f9:
d0:57:45:fe:85:d7:d4:44:f7:7e:54:56:42:2b:a8:6b:12:ec:
11:2d:7d:fa:65:be:58:ac:72:db:b9:ad:37:56:c6:d1:e4:63:
46:c1:91:3f:7a:49:51:30:bf:f2:aa:e8:9c:fe:00:a6:6f:0a:
0a:20:44:e4:54:2b:01:1a:bf:b6:85:a6:df:e1:38:2f:dc:0a:
6f:f2:f0:81:11:f5:45:24:ab:a2:68:c6:02:67:38:f4:83:05:
98:15:1d:a3:b0:3d:f8:fe:27:78:92:ad:c7:89:b9:44:99:51:
52:8a:e2:56:8a:bf:aa:89:b3:4a:16:b3:a3:ed:c1:92:c6:c0:
de:6d:ab:e7:5e:12:ac:85:2d:47:87:ed:07:5b:e7:16:60:1b:
8e:11:83:40:02:dc:28:f8:8a:55:b7:0d:f0:74:8d:81:e8:35:
cc:68:36:6f:dc:42:d5:2e:46:46:10:02:71:4d:c1:d8:75:71:
5a:ca:41:85:66:43:6b:8f:e5:3e:da:64:9b:c3:81:f1:e3:97:
ba:67:fb:5c:11:3b:7a:c0:bb:bb:03:e4:e8:6c:6d:c4:76:7d:
1d:da:12:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:00:26 2025 by rpki-client