Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cad58ea1-1430-328d-a18d-e9fc7366add6.roa
File: cad58ea1-1430-328d-a18d-e9fc7366add6.roa (raw, json)
Hash identifier: zpIKUbZ57NPsKzAfopxtvX0CKjVo3+F1QR6NZGEloeI=
Subject key identifier: 2B:E8:17:B8:0F:98:29:01:5C:8D:77:5E:CD:C5:C9:5A:92:64:C4:21
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858478026735C45D7473E2B8C7E80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cad58ea1-1430-328d-a18d-e9fc7366add6.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2a70::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:73:5c:45:d7:47:3e:2b:8c:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=ceffdf32-a62c-43dd-af50-5096d995306a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9c:7b:15:fe:5c:a7:65:0c:a9:64:8e:dc:a4:
de:20:36:ed:d7:8b:dd:4d:08:77:f4:9e:5b:82:e6:
fb:28:4f:64:3a:08:4e:75:d1:e3:a2:cc:23:7d:61:
d3:d9:14:aa:d5:e6:02:b7:e3:49:ab:25:41:16:2b:
cd:51:e7:cd:ab:ce:2a:5a:5f:71:b2:06:c3:eb:a3:
a5:a8:6a:26:2a:b7:b3:a8:08:ce:55:15:3d:87:ad:
64:de:f4:17:29:8e:f4:51:81:71:76:ac:da:69:3f:
e8:ed:68:4a:b3:ca:f1:f2:ee:2f:f7:42:6e:71:05:
a1:e9:e9:ea:b1:87:a6:08:b8:27:0f:40:b6:ac:98:
33:d8:98:f5:38:cf:6d:95:e8:ec:40:42:87:2d:a0:
e7:23:9e:69:25:de:9b:c2:77:fc:b2:a9:fc:b8:dd:
42:8a:57:7e:10:a0:14:10:39:e3:73:e5:cc:69:12:
b0:fa:83:2f:91:2b:9d:c3:2a:35:df:cd:56:19:ef:
b4:0c:36:e3:a1:77:08:e5:9d:ed:f7:97:63:f0:ce:
c4:8a:1b:75:d5:3e:91:2f:bb:88:99:a7:95:4b:4c:
1b:3a:95:fa:da:e2:62:50:99:62:85:0c:61:ab:d5:
6d:bd:a1:dd:ce:c5:64:14:e2:3d:4e:48:6a:8a:5b:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E8:17:B8:0F:98:29:01:5C:8D:77:5E:CD:C5:C9:5A:92:64:C4:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cad58ea1-1430-328d-a18d-e9fc7366add6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2a70::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:be:7e:62:a5:ef:77:e9:76:88:0c:2c:2f:1b:b3:51:a0:22:
e4:e8:22:95:57:b8:ce:e3:62:93:72:aa:90:50:4c:76:67:49:
cf:c0:f6:f3:ed:61:cf:21:86:99:4e:8a:f4:c1:dd:b7:b5:7e:
ab:01:a7:04:5a:7a:f8:68:d7:e8:99:e1:96:cf:06:66:4f:81:
94:62:4a:28:0a:cc:03:53:8c:d0:ea:94:4f:14:b7:f5:b3:df:
af:65:bc:d5:ee:6f:94:90:44:3f:85:f0:2a:70:88:3a:10:4f:
57:ad:a4:e2:d7:33:17:6f:66:4d:32:d9:a7:95:79:e3:ea:32:
4a:fd:88:21:d8:e0:4f:66:7a:58:ba:06:ce:35:b8:71:e0:d8:
a6:69:fa:d0:56:47:79:31:7f:38:40:ff:4d:56:b6:1f:f5:f6:
1c:41:a5:d7:97:26:12:a1:e2:4a:64:35:14:1c:c0:81:9d:b7:
70:c4:7e:cc:25:db:96:9f:ca:46:bd:19:ce:91:86:41:2f:89:
46:4f:10:9a:2d:0a:21:2a:67:49:a7:d9:37:11:2e:79:94:b3:
4e:77:f9:61:64:db:e8:2a:22:c7:52:74:40:10:d0:f0:d8:0b:
52:ce:9b:21:5c:3f:0c:e6:99:e2:2e:4c:30:38:a5:5f:62:57:
28:6c:c4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:12 2025 by rpki-client