Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca3b45b4-0343-3c4d-b42d-a79ae12c2e03.roa
File: ca3b45b4-0343-3c4d-b42d-a79ae12c2e03.roa (raw, json)
Hash identifier: 3CA+R+1WcsDxMjnYHaYSLOnGz08xhMEUhV4gOTBWPr8=
Subject key identifier: 00:86:8B:7A:44:88:0D:DF:9F:B9:D8:09:B5:F1:B2:40:C0:12:DF:46
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858478026628EB2687354B917A180
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca3b45b4-0343-3c4d-b42d-a79ae12c2e03.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2300::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:62:8e:b2:68:73:54:b9:17:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=d4ce5299-d448-45a5-ad14-840122f6449f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:72:ed:b0:ce:aa:d0:3f:b6:dc:7a:ea:78:43:
b7:9c:ca:5e:6e:1c:62:15:58:d3:34:0c:8c:a4:df:
f1:6d:c2:bc:3a:f8:51:6a:7b:be:6f:6b:68:a2:06:
14:06:ba:7a:07:b3:7f:0b:97:25:af:7e:35:af:32:
d6:15:d2:46:09:94:46:26:e5:91:06:c4:0a:7e:74:
cf:9b:38:4d:24:08:0e:bb:8f:0a:0d:4c:8c:4d:c1:
ab:c4:5e:67:e6:86:65:b7:bf:ca:bb:3e:02:e3:d3:
88:e6:00:2a:e4:ce:76:04:26:0f:8f:23:e2:10:c7:
64:59:6c:22:81:ec:bb:72:5c:6c:08:7b:88:2b:3b:
33:ad:74:79:25:62:7e:ae:1b:04:10:a4:64:c4:40:
e9:63:17:22:9f:95:cd:89:a0:fc:b0:4b:43:30:96:
52:b8:6f:a4:82:48:5e:1d:07:08:49:48:e2:b2:78:
55:c8:2b:07:ef:eb:c0:1e:d1:e2:a1:4d:f4:20:1f:
c4:b9:21:47:7e:2c:7c:31:7d:fa:27:71:1f:22:e3:
bc:d3:08:07:a5:53:24:2e:ac:70:20:77:f6:82:ee:
90:b7:0f:66:e8:2e:4f:c7:c4:b7:e2:c8:6b:ce:c1:
22:85:1b:34:c1:6d:f7:cc:ea:99:d8:79:c7:a7:0b:
83:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:86:8B:7A:44:88:0D:DF:9F:B9:D8:09:B5:F1:B2:40:C0:12:DF:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca3b45b4-0343-3c4d-b42d-a79ae12c2e03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2300::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:be:ba:04:38:ef:cf:7b:c5:3a:1e:c0:5b:c3:d4:80:7b:fe:
e9:54:85:f6:f3:ba:84:05:da:3c:39:45:ee:a2:51:72:07:f3:
9e:f7:6e:ff:d0:3a:1d:fd:bf:0d:69:13:29:8e:89:c2:bd:f1:
aa:05:cc:54:b3:b4:9e:1d:7d:22:c8:e5:77:41:f4:eb:6e:cd:
f7:97:7c:a0:2f:79:87:37:d4:f6:33:be:d6:b6:79:bd:70:74:
ff:9d:5d:65:d8:d7:fa:6d:d1:a0:7a:8f:04:c4:17:13:ab:26:
69:6e:93:fb:ef:2c:d4:be:c0:7f:38:32:1d:6d:f3:12:89:75:
f7:7d:64:6a:3e:34:71:48:96:ad:8f:43:a2:8c:84:25:f9:17:
26:c7:8b:2e:f1:96:e0:9f:7e:ab:d8:dc:51:f3:34:42:06:76:
df:2b:43:7c:f4:ad:a2:58:fc:24:1e:24:ad:9f:94:48:c8:2d:
e0:c5:fe:97:b0:11:3a:46:57:62:e7:f7:ed:6b:04:2b:22:c7:
fa:cf:df:48:f9:ba:f7:80:3f:52:f9:96:a8:80:88:10:4e:9c:
d4:99:17:92:8b:f0:91:44:36:27:d5:55:b2:dd:8a:ed:31:c9:
10:06:f1:70:3e:06:ba:c9:ba:d7:f9:d0:c9:61:22:cc:6c:a6:
14:b7:07:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:45 2025 by rpki-client