Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfd6a48b-f9f8-3af5-b651-08807f038759.roa
File: bfd6a48b-f9f8-3af5-b651-08807f038759.roa (raw, json)
Hash identifier: BBWN9rgu1SbuQ0JsXgywF3iuxRX28EMoWp+kx87IbHU=
Subject key identifier: 0C:7B:DA:02:AB:8D:12:3D:A6:77:F8:DA:F3:F9:13:36:F9:13:86:23
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858478026643AF46CA65B8DB8B600
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfd6a48b-f9f8-3af5-b651-08807f038759.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:29b0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:64:3a:f4:6c:a6:5b:8d:b8:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=dc94a088-6eea-446c-931d-757c3c762217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:25:e1:95:b9:8f:54:12:e8:ca:30:3c:ea:2e:
76:0f:9d:e2:13:7b:26:f4:3e:c7:51:aa:09:b8:f4:
85:78:93:27:df:60:49:de:e7:d0:af:25:f6:e9:0e:
0b:36:9c:f8:36:ee:c6:13:68:4c:c0:ac:60:bf:41:
80:de:bf:d9:31:d4:cb:9a:8d:63:c1:15:c3:9b:71:
a4:9c:37:df:8d:7f:9e:f3:47:1c:88:94:8d:42:5f:
1d:6d:ae:06:7a:4a:ce:f2:2d:36:69:68:47:09:5b:
67:57:6c:06:8c:2a:7a:4f:5a:c6:57:f4:18:47:01:
4f:eb:f0:c1:ac:f1:89:22:27:5b:55:95:a2:5e:65:
10:75:b5:94:75:75:fc:ad:f5:da:48:70:fc:71:f0:
62:54:f7:14:e3:24:09:73:08:76:1b:9e:f0:50:6d:
a8:98:84:a3:cc:7e:7c:5f:12:9c:7a:d7:51:99:7d:
34:26:d2:9d:94:03:d7:4e:29:9f:3b:c2:6a:8f:f8:
f0:ac:ee:45:ea:3e:84:e8:8e:ed:af:b8:fd:cf:93:
a7:a3:dd:eb:ca:bf:41:dc:af:e1:b3:7a:1e:a7:5e:
45:b8:c4:93:68:94:07:d9:cd:19:30:aa:69:73:e7:
5a:09:16:7c:3e:72:5f:28:88:d5:06:e9:7f:b5:a1:
09:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7B:DA:02:AB:8D:12:3D:A6:77:F8:DA:F3:F9:13:36:F9:13:86:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfd6a48b-f9f8-3af5-b651-08807f038759.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:29b0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:fb:cd:42:75:5d:80:4c:41:04:a5:81:0b:69:8b:e1:9e:d3:
35:bc:11:1e:53:a5:29:3e:78:98:e5:56:3a:26:c1:a4:68:18:
44:17:7c:5e:86:2b:5d:ec:c0:0c:e4:42:6f:d2:f6:65:cc:bd:
99:6b:e0:f0:2a:51:15:e0:98:1f:ac:7b:8e:c2:52:0d:85:32:
bd:d1:ea:03:52:97:e8:c7:43:ea:2f:f3:23:5a:ed:3d:c1:0a:
1b:bc:5d:9c:df:f4:c8:47:48:60:8c:fd:61:4e:99:aa:88:22:
c1:0c:31:2d:0d:18:08:8b:34:4a:e5:32:45:8f:a8:ab:2b:b2:
4d:a0:c6:23:4f:a4:86:04:35:c6:b9:73:e5:fd:5f:c2:eb:09:
d9:e4:b0:e6:3e:d3:4e:5c:bf:7d:1e:8e:e5:f4:a0:fa:1a:ac:
f4:02:cf:23:d0:5c:69:2d:2f:9f:fe:23:bc:c4:f5:af:54:3c:
82:f1:25:e0:52:e0:c3:b5:26:54:40:29:ad:65:70:7b:c0:c1:
f9:5c:81:bd:b2:b5:1a:68:5f:34:c3:d7:a8:30:d4:ef:a4:01:
ef:93:38:18:84:aa:83:04:9c:15:8a:dc:a6:f3:ee:7c:b6:6c:
65:35:3e:37:cb:7c:69:90:ea:a0:60:52:06:d8:04:ba:a8:55:
14:61:39:11
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJmQ69GymW424tgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
ZGM5NGEwODgtNmVlYS00NDZjLTkzMWQtNzU3YzNjNzYyMjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCXhlbmPVBLoyjA86i52D53iE3sm9D7HUaoJ
uPSFeJMn32BJ3ufQryX26Q4LNpz4Nu7GE2hMwKxgv0GA3r/ZMdTLmo1jwRXDm3Gk
nDffjX+e80cciJSNQl8dba4GekrO8i02aWhHCVtnV2wGjCp6T1rGV/QYRwFP6/DB
rPGJIidbVZWiXmUQdbWUdXX8rfXaSHD8cfBiVPcU4yQJcwh2G57wUG2omISjzH58
XxKcetdRmX00JtKdlAPXTimfO8Jqj/jwrO5F6j6E6I7tr7j9z5Ono93ryr9B3K/h
s3oep15FuMSTaJQH2c0ZMKppc+daCRZ8PnJfKIjVBul/taEJ7QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAx72gKrjRI9pnf42vP5Ezb5E4YjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmZkNmE0OGItZjlmOC0z
YWY1LWI2NTEtMDg4MDdmMDM4NzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQCmw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGH7zUJ1XYBMQQSlgQtpi+Ge0zW8ER5TpSk+eJjlVjomwaRoGEQX
fF6GK13swAzkQm/S9mXMvZlr4PAqURXgmB+se47CUg2FMr3R6gNSl+jHQ+ov8yNa
7T3BChu8XZzf9MhHSGCM/WFOmaqIIsEMMS0NGAiLNErlMkWPqKsrsk2gxiNPpIYE
Nca5c+X9X8LrCdnksOY+005cv30ejuX0oPoarPQCzyPQXGktL5/+I7zE9a9UPILx
JeBS4MO1JlRAKa1lcHvAwflcgb2ytRpoXzTD16gw1O+kAe+TOBiEqoMEnBWK3Kbz
7ny2bGU1PjfLfGmQ6qBgUgbYBLqoVRRhORE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:29 2025 by rpki-client