Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1fbf89d-f90e-3e9e-a234-3e0b9a1e0f2f.roa
File: d1fbf89d-f90e-3e9e-a234-3e0b9a1e0f2f.roa (raw, json)
Hash identifier: ELfREQcFx2UiZTQwn4i4GlFqo7SEBXO+3L4L2Ss5wF0=
Subject key identifier: 6C:80:6D:89:F1:CB:1F:BE:CE:5C:49:31:B4:EE:F0:52:F0:82:13:48
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858478026890799029171409A0300
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1fbf89d-f90e-3e9e-a234-3e0b9a1e0f2f.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3e60::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:89:07:99:02:91:71:40:9a:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=2a91f472-f6c8-43ed-ba72-003d57aaa98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:f8:a6:08:c3:a7:9a:61:b7:a1:8a:cb:f6:
8d:20:68:65:ec:63:47:74:4f:cc:ee:5a:51:59:ab:
8f:bd:31:7c:a9:b2:81:32:f0:99:93:f4:65:5a:94:
b4:a2:bb:f9:77:b6:27:28:b3:c6:ca:b3:df:2a:ce:
4a:2a:40:33:28:90:c2:32:61:0f:24:ca:d9:fa:9d:
45:21:39:39:6f:18:e6:35:4d:01:91:5a:d2:f8:0e:
09:db:1e:1b:ba:96:63:14:a2:ef:60:97:a4:d3:92:
14:60:3d:c8:7c:f2:75:6e:38:d6:97:4c:e7:23:01:
5c:3d:19:d1:92:46:f7:62:46:12:e5:83:a5:46:9a:
6a:7d:68:85:e7:f6:16:a9:cd:21:5a:1c:ab:c9:76:
34:a9:21:64:9c:60:12:10:a0:f9:d9:5a:be:7e:83:
61:ee:72:34:6f:31:0e:57:d5:80:37:1d:92:09:00:
7e:07:73:3c:9f:b2:f1:73:8d:1a:e9:97:1e:c1:1a:
45:61:d6:60:d0:33:37:d8:0e:48:67:35:fd:5a:f1:
11:70:df:ed:aa:25:c8:c3:63:ae:34:3d:84:83:49:
64:5e:7f:2c:c9:a5:27:8d:39:b6:fb:d3:a8:83:63:
dd:4e:6f:29:bb:f5:03:25:a8:e2:de:93:97:a7:6b:
b8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:80:6D:89:F1:CB:1F:BE:CE:5C:49:31:B4:EE:F0:52:F0:82:13:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1fbf89d-f90e-3e9e-a234-3e0b9a1e0f2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3e60::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:40:11:8a:b6:41:cb:a9:9d:9c:f4:5d:78:3c:a1:06:a8:1c:
3e:ee:2a:8b:0c:2b:7b:14:c3:77:50:a2:b2:9a:a7:1f:65:59:
7d:01:af:09:82:97:64:b8:f4:65:d6:cc:9f:e1:7b:aa:03:40:
54:a1:3f:e8:f3:98:da:b5:01:88:ff:a7:84:f6:93:42:7f:24:
e4:ee:ab:f5:56:ea:d2:15:23:10:4c:d5:00:41:c9:fd:51:e7:
97:92:13:f7:86:82:d6:c1:2a:f1:16:f7:b5:6d:5a:a8:ce:e8:
97:05:7c:de:06:9d:84:8a:b5:25:3c:ac:6d:16:fa:62:c7:c4:
0f:4f:4a:77:6e:2e:2f:91:46:b8:01:f7:ed:6e:2e:f2:50:0b:
11:e4:ab:60:8b:92:5a:7a:6b:0a:bf:b3:c4:e5:28:13:28:1a:
c0:e7:a9:7a:51:ae:1b:a7:1a:b9:7c:34:8f:20:ef:cc:04:bd:
04:ed:f1:13:d1:d2:e9:e3:a0:ee:77:ee:3e:e4:31:82:11:3b:
fd:4b:49:bf:18:86:8d:b3:4e:ca:ec:81:15:10:8e:f6:57:24:
62:87:d7:25:5f:3d:21:44:15:2e:57:d5:18:0f:9d:8f:48:c7:
2c:e8:e7:63:90:45:39:b0:7d:c7:eb:dd:6d:22:3a:a4:7f:51:
43:98:be:5c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJokHmQKRcUCaAwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
MmE5MWY0NzItZjZjOC00M2VkLWJhNzItMDAzZDU3YWFhOThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY74pgjDp5pht6GKy/aNIGhl7GNHdE/M7lpR
WauPvTF8qbKBMvCZk/RlWpS0orv5d7YnKLPGyrPfKs5KKkAzKJDCMmEPJMrZ+p1F
ITk5bxjmNU0BkVrS+A4J2x4bupZjFKLvYJek05IUYD3IfPJ1bjjWl0znIwFcPRnR
kkb3YkYS5YOlRppqfWiF5/YWqc0hWhyryXY0qSFknGASEKD52Vq+foNh7nI0bzEO
V9WANx2SCQB+B3M8n7Lxc40a6ZcewRpFYdZg0DM32A5IZzX9WvERcN/tqiXIw2Ou
ND2Eg0lkXn8syaUnjTm2+9Oog2PdTm8pu/UDJaji3pOXp2u4ywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGyAbYnxyx++zlxJMbTu8FLwghNIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDFmYmY4OWQtZjkwZS0z
ZTllLWEyMzQtM2UwYjlhMWUwZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQD5g
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABtAEYq2QcupnZz0XXg8oQaoHD7uKosMK3sUw3dQorKapx9lWX0B
rwmCl2S49GXWzJ/he6oDQFShP+jzmNq1AYj/p4T2k0J/JOTuq/VW6tIVIxBM1QBB
yf1R55eSE/eGgtbBKvEW97VtWqjO6JcFfN4GnYSKtSU8rG0W+mLHxA9PSnduLi+R
RrgB9+1uLvJQCxHkq2CLklp6awq/s8TlKBMoGsDnqXpRrhunGrl8NI8g78wEvQTt
8RPR0unjoO537j7kMYIRO/1LSb8Yho2zTsrsgRUQjvZXJGKH1yVfPSFEFS5X1RgP
nY9Ixyzo52OQRTmwfcfr3W0iOqR/UUOYvlw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:02 2025 by rpki-client