Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/af7900ca-e23f-343d-ad08-d04ca77a4739.roa
File: af7900ca-e23f-343d-ad08-d04ca77a4739.roa (raw, json)
Hash identifier: 2sk5vCMHSpZflbugwDvJbKYbKZ7syaRdEff4wCZ6Yfc=
Subject key identifier: 15:81:BD:EB:FB:05:CA:50:FE:6B:EB:91:24:49:8C:25:B7:5E:2D:63
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858478026647B711C0AE955331C40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/af7900ca-e23f-343d-ad08-d04ca77a4739.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:28b0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:64:7b:71:1c:0a:e9:55:33:1c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=bb1f61d8-d557-4ab4-b912-c98f53ef38e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b8:2c:6d:f9:3a:11:36:82:f3:eb:f7:ab:f3:
7e:bd:44:b8:02:83:f7:d0:d2:6f:cf:7a:6c:76:85:
59:91:90:d7:b5:5f:a3:4f:c8:1a:32:cd:18:02:04:
62:8e:f8:02:88:90:fa:c6:e1:74:39:0b:25:6c:1b:
69:6e:b9:31:3a:20:45:0c:26:cc:9f:7b:28:85:72:
75:71:7a:61:98:7a:5e:ee:13:13:61:8e:0d:b5:11:
0a:ba:f3:29:9b:bb:53:72:2d:dc:95:d5:63:f4:8d:
43:e5:66:17:ec:82:73:76:20:0f:2e:5e:6c:14:83:
99:19:fd:10:cf:43:9b:28:f3:92:6d:08:cb:68:4a:
f2:28:78:b3:81:43:9a:07:79:79:86:27:83:d9:6f:
71:87:67:ae:f6:2c:d3:e5:86:9d:d2:3e:20:db:e3:
44:95:58:47:46:d4:bd:6e:35:d3:23:ca:dc:bb:47:
73:4d:3b:e4:41:55:89:35:56:75:ad:b1:ca:b1:20:
1d:31:b7:f9:36:fb:29:c0:90:4d:5f:e1:f0:ac:3f:
b4:33:9b:c4:5a:a4:3d:c4:4b:91:d8:8a:b6:0f:51:
e7:71:c0:42:ac:82:e3:a8:92:b1:fc:71:09:bb:f0:
a4:b4:ce:12:fd:94:c6:fe:87:a4:14:2a:86:34:b1:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:81:BD:EB:FB:05:CA:50:FE:6B:EB:91:24:49:8C:25:B7:5E:2D:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/af7900ca-e23f-343d-ad08-d04ca77a4739.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:28b0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:16:4e:6a:98:13:aa:f5:14:9d:17:fb:8f:81:77:37:fd:30:
83:be:67:76:90:ae:63:c1:f8:b1:89:c4:d9:0e:45:62:6d:d3:
d1:77:a4:03:85:a9:dd:47:35:2c:1c:a3:07:c0:a0:ff:0f:3e:
a8:6a:ad:24:e8:5e:22:3e:8f:9a:97:80:26:e6:da:ff:82:21:
5b:79:df:49:50:7f:55:8d:fe:1c:92:dd:94:80:32:7c:ce:57:
35:fe:68:92:13:d3:41:af:f6:78:aa:83:8c:6e:71:9d:f5:94:
43:af:0a:95:12:af:1e:4a:88:0e:6c:42:cb:26:28:02:58:ce:
e9:b7:88:31:5b:67:8c:0b:89:1b:a2:2a:fc:fe:f2:4b:c1:04:
d3:25:7b:84:f8:1a:4e:f3:9d:db:05:96:a6:53:b3:bb:4e:9c:
b7:8a:72:69:23:6e:1f:53:d6:d4:e8:0a:6a:e6:d7:6f:b7:40:
21:5b:6b:da:9d:c6:f4:dd:0d:0d:6b:55:d7:2a:b3:01:12:ad:
48:b9:f0:1a:da:d6:3b:2d:75:3d:c8:ee:69:e1:48:0f:36:3b:
bb:8e:77:4b:75:bb:57:48:36:9f:7d:4d:c3:00:9c:1e:50:55:
5f:7c:92:6d:77:16:36:9d:ed:1e:d6:86:1e:8b:87:5e:66:68:
89:ae:69:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:56:06 2025 by rpki-client