Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b2e897b0-b3a5-3e8e-bb48-a5fc413a1bc6.roa
File: b2e897b0-b3a5-3e8e-bb48-a5fc413a1bc6.roa (raw, json)
Hash identifier: JmCpXAwur4oYGd/9WyXB43cWgt+eagz2ZcQ3Y5Dp0/I=
Subject key identifier: 39:39:33:60:56:62:C7:A6:1B:4E:32:A1:27:0B:98:AE:C1:FD:89:21
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780266406ECD1B38E604DEE80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b2e897b0-b3a5-3e8e-bb48-a5fc413a1bc6.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:29a0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:64:06:ec:d1:b3:8e:60:4d:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=daacec05-9935-47ed-87e0-056854dec8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:22:cc:20:db:ed:c6:f4:7e:b0:5e:61:22:d2:
b0:5d:85:4e:f0:16:58:b2:bc:03:9f:0d:f6:4d:d5:
ec:25:97:17:d5:f4:c0:5f:46:3a:4c:3a:f3:ea:d6:
5a:d8:0e:52:44:03:fa:af:cb:28:02:4f:08:5c:37:
bd:b6:0d:29:7f:24:40:70:d0:67:8e:99:30:ad:bc:
95:cc:28:80:08:f4:2f:a9:c6:06:e6:90:2b:e0:d1:
74:11:b2:39:a3:bc:6e:56:d7:4f:dc:0d:79:f9:a1:
5a:09:d4:1e:5c:93:c2:9c:1d:d6:d9:12:a2:7a:c0:
87:6b:57:02:a4:7b:52:50:f1:d0:3b:70:6d:45:90:
28:a2:99:01:46:3d:df:35:bc:76:15:c7:75:ee:05:
f2:37:ea:1c:0e:15:95:1e:ac:7d:b0:87:45:3c:7d:
50:d5:ba:6e:b0:81:df:60:07:cf:23:bd:38:29:30:
88:b1:c5:a6:fa:45:86:87:73:ce:1e:e0:61:dd:f7:
f6:cd:f1:fe:49:3f:89:16:3b:9a:24:7e:68:d6:62:
c4:08:fc:e1:20:05:21:ab:5a:53:bb:55:50:40:fe:
22:b9:f0:35:04:64:de:d6:09:77:a7:46:07:50:4a:
8d:6e:1c:b2:a1:30:cd:d1:95:bc:e2:bc:0a:78:82:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:39:33:60:56:62:C7:A6:1B:4E:32:A1:27:0B:98:AE:C1:FD:89:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b2e897b0-b3a5-3e8e-bb48-a5fc413a1bc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:29a0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:17:3a:12:f3:1a:82:97:21:fa:15:82:e6:ec:dc:66:58:c4:
b6:3a:26:5a:0a:d6:84:ff:81:6a:98:0c:4a:5b:7b:14:2b:d5:
95:cb:29:45:c9:e7:68:60:f0:6c:4d:26:78:b9:78:a6:f9:ae:
5f:83:92:31:fc:b6:a8:d2:1f:40:4e:93:9d:ca:8c:e2:db:11:
5a:b7:17:a5:57:af:fc:7c:ac:fa:3c:57:9e:e9:d2:5a:df:13:
80:e3:8f:b7:23:64:60:79:09:cf:4e:12:a0:75:d5:d0:6d:4c:
be:0d:fe:9b:92:28:c8:e1:8f:28:31:fb:ad:e2:8e:eb:b6:8a:
e9:c2:c5:d8:9f:ca:83:37:56:f9:24:67:3b:c2:8d:9b:20:96:
c3:f8:3a:28:6b:e9:3c:3d:74:56:69:f6:df:c8:db:11:48:29:
c1:07:22:63:b1:14:37:34:bd:71:4b:55:81:b4:2d:8e:94:02:
1e:52:d9:1b:18:a8:4e:ea:32:9b:79:17:44:15:86:78:d2:89:
6d:0c:81:d1:f3:91:5b:a1:cf:3c:37:88:87:73:55:c4:5e:4d:
99:21:1b:b0:96:73:6f:7e:c9:e7:81:fc:14:14:00:c5:24:8a:
53:40:9a:a4:05:63:82:ad:48:03:16:f1:b6:19:cf:25:e8:65:
8e:36:db:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:56:00 2025 by rpki-client