Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1be3fbb-6b6b-3419-8f37-f68a4ea5c2eb.roa
File: d1be3fbb-6b6b-3419-8f37-f68a4ea5c2eb.roa (raw, json)
Hash identifier: 1CwcRjQuDdYas6otZxRlq0Nb2jaI+c4c2TtEw3dzJOY=
Subject key identifier: E0:8E:D7:71:94:2A:10:40:C3:BA:B1:DB:43:5B:31:E3:C8:D5:F6:4A
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780268464E5A26F9F3BCCA3EC
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1be3fbb-6b6b-3419-8f37-f68a4ea5c2eb.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3ea0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:84:64:e5:a2:6f:9f:3b:cc:a3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=108f4ef2-cc9f-4cf2-bddf-8dd2f563478d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cf:e1:93:5a:0a:cc:a5:78:11:4d:0f:f9:f8:
49:fa:01:d3:cc:a9:4c:4b:6c:f7:a3:75:d0:00:b7:
7c:21:40:42:4f:67:d8:a1:18:eb:a8:15:46:cc:19:
cb:cc:ad:76:10:ff:ea:4c:88:c1:39:04:40:0b:02:
c2:83:60:8d:ba:18:ce:85:fb:29:d9:95:b4:bd:15:
ee:2c:ff:3b:b7:b1:aa:c0:d6:81:f1:9e:c7:21:0d:
dc:ab:dc:7c:74:c3:15:c1:35:8e:d4:72:20:ea:c9:
e3:6d:c3:9d:50:3a:24:07:5c:88:0a:58:d0:3a:91:
fd:c0:df:21:8a:bc:02:b9:29:ac:fa:f5:7f:92:69:
02:f6:0e:cb:c9:7a:4b:d7:23:22:27:17:14:fb:3a:
0f:a2:3a:40:c1:83:aa:31:a7:04:f2:32:83:5f:0b:
59:82:b0:96:81:ee:2e:5d:46:70:b4:b6:72:a9:b5:
34:02:1c:dd:50:fa:14:34:39:01:a4:68:a2:cd:30:
30:7e:4d:cd:61:4a:11:13:2a:38:c1:7a:4a:f1:f0:
3e:20:a8:86:a5:0d:d5:d6:a2:a7:a1:53:ca:be:92:
95:d5:be:4a:ff:87:9b:44:6c:70:8d:5c:b0:c4:38:
16:02:ac:a6:83:21:21:ab:da:4e:56:ff:60:ee:6c:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8E:D7:71:94:2A:10:40:C3:BA:B1:DB:43:5B:31:E3:C8:D5:F6:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1be3fbb-6b6b-3419-8f37-f68a4ea5c2eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3ea0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:e1:23:87:86:72:3a:2f:35:b3:5a:db:2e:77:35:57:57:f5:
33:f4:03:31:b7:3f:46:f5:b8:7d:ba:bc:6a:2d:dd:d3:46:29:
2e:dd:2b:d8:91:fa:16:94:4b:f2:47:e3:26:2d:9b:a1:56:07:
06:66:13:11:e7:fa:2b:b6:2d:53:48:ee:5b:41:7c:a5:50:6c:
29:18:c8:2f:35:b6:bc:af:ca:6e:a6:44:0a:7f:ab:a4:74:24:
65:93:25:3e:f8:0d:6d:78:81:de:50:99:b3:d3:e8:ef:aa:30:
fc:6e:c5:22:df:b4:ff:e4:74:e8:05:36:d1:0e:bd:84:07:a5:
fb:ae:8c:db:2d:2f:9b:11:f1:9a:46:0b:5f:d5:38:e4:47:7b:
1e:70:1a:27:f4:d5:5c:a8:85:6e:2b:0e:b6:b2:2e:30:82:4a:
1e:74:39:ef:b3:c3:e6:84:37:4b:83:a9:ec:48:0e:aa:b0:54:
62:74:5d:2f:81:bd:d2:b7:c5:f4:28:d1:37:58:bf:de:f3:45:
af:3b:2b:6a:bd:4c:5b:b7:7c:fb:8a:3d:fe:91:40:d4:42:14:
86:2c:45:65:56:b9:ed:cc:ad:ee:30:94:9c:b0:1c:02:d5:c4:
b0:db:f2:7b:ec:8f:51:95:8e:bf:49:64:e9:f2:75:f4:7d:c2:
bb:df:2c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:39:36 2025 by rpki-client