Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b8e924ce-a4d8-3177-8faa-833cb9be8b2c.roa
File: b8e924ce-a4d8-3177-8faa-833cb9be8b2c.roa (raw, json)
Hash identifier: RR+deQMhn/tthFpayEV/tUWPqX6sETHPzwj4C17ebtM=
Subject key identifier: 8D:0A:E2:35:27:0C:0B:9F:43:29:B1:A2:3E:6F:46:1C:E3:05:DD:44
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858478026953D5A88DA1C3DFB3480
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b8e924ce-a4d8-3177-8faa-833cb9be8b2c.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3180::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:95:3d:5a:88:da:1c:3d:fb:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=882bac61-296c-4c7a-8889-697a2770ee48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:ae:40:8f:8f:ce:60:f1:8c:43:88:70:3e:
f0:11:1e:39:3d:9b:7e:b6:42:39:5e:73:eb:ce:07:
b3:9e:66:5f:d4:7d:88:99:d6:03:2c:98:68:83:17:
2b:20:1b:98:3f:c7:16:92:dd:c9:28:7b:df:1a:90:
ca:7a:10:41:dd:a2:3f:15:4b:96:0c:07:7a:93:3b:
0e:8e:5c:15:e4:eb:5f:96:7b:15:76:bc:f5:82:1b:
36:15:db:80:5d:c2:fa:66:44:c2:76:70:d0:f2:c6:
b1:d8:05:4e:51:44:39:94:c7:9d:ad:c9:aa:07:f8:
7b:70:b6:f1:e8:ef:44:0f:ed:4e:54:b5:33:22:b4:
62:06:b7:0c:19:49:17:00:fc:76:b3:ab:e1:db:07:
a0:ce:f8:a1:57:84:9b:ff:d4:ad:24:c2:d3:52:5c:
c0:7f:5a:07:63:6e:1a:bc:65:71:45:c1:4d:e5:9e:
c3:26:02:65:da:b0:dc:7e:c8:10:44:f5:af:9c:57:
5c:0a:e8:b2:47:01:92:f2:df:14:91:50:d2:5e:1a:
97:58:63:1e:26:a0:79:a7:50:ee:24:4c:22:21:b6:
01:10:b1:b7:c7:5a:3f:55:9b:6e:ce:a2:37:5a:93:
0c:2c:a5:2b:8c:8c:d0:46:68:d7:19:3d:06:49:40:
cb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0A:E2:35:27:0C:0B:9F:43:29:B1:A2:3E:6F:46:1C:E3:05:DD:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b8e924ce-a4d8-3177-8faa-833cb9be8b2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3180::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:90:7e:8a:0f:47:50:f4:57:da:c3:33:48:96:dc:b6:2d:9a:
b1:c9:e2:10:b7:b6:64:b2:17:cd:1b:df:37:d3:74:82:4c:28:
23:25:02:0f:36:4e:36:d3:43:b0:21:e9:88:2f:6d:ec:fc:68:
4f:7a:14:bd:a6:f4:a1:9f:0e:61:a4:46:a7:12:84:93:0e:ca:
ec:ff:61:17:8c:a6:0d:17:7f:90:6f:2d:2c:92:8c:15:59:39:
dd:cf:83:4f:55:dd:61:76:cb:16:ce:9c:79:31:42:48:5c:5c:
62:c2:cc:15:af:99:73:c9:b4:ec:de:4a:d5:9d:63:2b:de:45:
4c:7a:f4:59:7b:08:5d:4c:39:ba:d7:7a:d4:48:d0:3c:52:2a:
d5:49:57:40:7e:e8:29:64:18:55:15:5b:c9:23:1c:2c:16:9c:
b3:c2:51:97:14:16:d4:66:24:de:79:85:02:2e:14:e2:8d:00:
f2:8f:51:fa:7c:ec:0f:57:f0:6a:ee:ca:9f:bb:5f:aa:d2:08:
32:99:f8:f6:ee:21:19:5d:65:c3:9b:8d:b0:c0:87:1c:00:14:
6b:a7:ab:2e:8c:8f:5f:a3:4e:1e:5d:a6:99:66:62:aa:d8:54:
f0:87:01:16:64:6c:90:86:7c:25:d8:cb:35:c6:58:82:da:9a:
7d:5d:43:2a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJpU9WojaHD37NIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
ODgyYmFjNjEtMjk2Yy00YzdhLTg4ODktNjk3YTI3NzBlZTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq+uQI+PzmDxjEOIcD7wER45PZt+tkI5XnPr
zgeznmZf1H2ImdYDLJhogxcrIBuYP8cWkt3JKHvfGpDKehBB3aI/FUuWDAd6kzsO
jlwV5OtflnsVdrz1ghs2FduAXcL6ZkTCdnDQ8sax2AVOUUQ5lMedrcmqB/h7cLbx
6O9ED+1OVLUzIrRiBrcMGUkXAPx2s6vh2wegzvihV4Sb/9StJMLTUlzAf1oHY24a
vGVxRcFN5Z7DJgJl2rDcfsgQRPWvnFdcCuiyRwGS8t8UkVDSXhqXWGMeJqB5p1Du
JEwiIbYBELG3x1o/VZtuzqI3WpMMLKUrjIzQRmjXGT0GSUDLxwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI0K4jUnDAufQymxoj5vRhzjBd1EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjhlOTI0Y2UtYTRkOC0z
MTc3LThmYWEtODMzY2I5YmU4YjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQDGA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIKQfooPR1D0V9rDM0iW3LYtmrHJ4hC3tmSyF80b3zfTdIJMKCMl
Ag82TjbTQ7Ah6Ygvbez8aE96FL2m9KGfDmGkRqcShJMOyuz/YReMpg0Xf5BvLSyS
jBVZOd3Pg09V3WF2yxbOnHkxQkhcXGLCzBWvmXPJtOzeStWdYyveRUx69Fl7CF1M
ObrXetRI0DxSKtVJV0B+6ClkGFUVW8kjHCwWnLPCUZcUFtRmJN55hQIuFOKNAPKP
Ufp87A9X8Gruyp+7X6rSCDKZ+PbuIRldZcObjbDAhxwAFGunqy6Mj1+jTh5dpplm
YqrYVPCHARZkbJCGfCXYyzXGWILamn1dQyo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:23:44 2025 by rpki-client