Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d758bd13-f17f-359f-9066-ba8ec614c5be.roa
File: d758bd13-f17f-359f-9066-ba8ec614c5be.roa (raw, json)
Hash identifier: 3lI/f6jU4EnL5RDkej4gwyl/PR/rPPnRYIfmbcwzKQA=
Subject key identifier: C9:43:3D:1A:8D:60:C4:B0:E8:02:C5:A0:F8:C0:CA:3B:BE:28:D4:1E
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858478026747486FAD1B180F22F00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d758bd13-f17f-359f-9066-ba8ec614c5be.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2fc0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:74:74:86:fa:d1:b1:80:f2:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=1de27f2b-c69a-488d-96b5-bb6d67d0a205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:47:da:a8:2d:84:46:15:20:5c:17:79:f3:f9:
72:1c:fb:c5:35:14:2a:2e:09:fd:c0:b9:55:b4:aa:
fe:4d:1f:32:b0:79:70:b1:b1:95:19:40:01:75:f2:
01:79:96:72:9a:7a:ff:d3:00:68:f2:f6:b1:79:69:
c4:bb:75:8f:2e:8d:79:fb:95:3c:dd:c4:69:83:1e:
61:89:3f:cd:8c:ea:37:17:6f:49:21:3b:98:94:e0:
c2:a8:91:af:a9:6c:54:e6:c5:1e:f7:f6:f1:26:0f:
2f:7a:4b:25:af:76:29:bb:95:21:d3:40:ae:c1:d4:
72:b6:a3:79:29:54:17:77:e3:51:6a:93:81:f0:e1:
08:88:60:59:20:6b:a8:05:54:0c:31:1b:90:02:34:
81:4e:60:41:c5:99:e5:3d:1d:0f:71:3a:41:09:2a:
fd:d9:b3:a0:c5:39:64:50:70:d1:6f:0d:fc:13:bc:
9c:30:15:74:25:cb:6d:f8:04:a5:06:f1:55:b6:c3:
bb:b6:08:8b:91:b0:8e:91:73:6d:df:3f:55:13:ad:
06:36:24:fe:ce:d8:ed:e8:bd:c9:24:9f:9b:38:ed:
ba:1b:17:fc:65:76:5a:1f:54:0a:4c:48:a6:58:7c:
ed:00:1d:0b:93:77:3b:df:b8:e8:10:cd:46:1a:90:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:43:3D:1A:8D:60:C4:B0:E8:02:C5:A0:F8:C0:CA:3B:BE:28:D4:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d758bd13-f17f-359f-9066-ba8ec614c5be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2fc0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:fb:e1:af:c7:a3:3f:e7:55:e2:4b:53:54:49:70:5a:e9:e2:
28:5d:55:36:e4:30:a2:94:a5:fe:72:64:37:c8:47:45:71:ba:
8d:75:58:c7:cd:a1:f9:e5:81:40:b3:98:cf:fe:61:0b:a7:ad:
96:ed:1e:60:2c:3c:dc:a7:57:33:fd:5c:4a:22:9d:f9:01:9a:
46:1e:49:e3:aa:fd:ef:f1:41:5c:41:7e:ed:34:d4:3e:61:60:
c7:4d:2b:78:e2:f5:cf:70:2c:5e:07:da:a6:1e:6c:4f:7f:bd:
58:c9:69:4b:0b:5d:0a:23:98:42:3d:c0:20:1d:7e:d0:55:49:
93:02:3b:82:7e:d9:4e:d7:ce:f5:c9:81:5b:12:e7:1f:37:a4:
ba:fc:70:16:ce:e6:c5:63:f5:a7:10:c6:3b:70:7c:49:2a:d0:
9b:33:51:85:c9:f9:8a:52:3c:95:3c:7d:60:73:57:32:01:5a:
3c:c6:43:fd:ea:e3:55:1d:27:73:d0:b8:ca:b8:a8:7f:ec:e3:
c1:eb:8b:bc:af:a2:5b:a3:47:3a:a5:ed:34:68:9f:b3:a4:a6:
db:ab:7b:4e:7b:fa:7b:3f:cf:9d:c2:6e:04:d2:03:90:b3:7e:
bf:64:fe:1a:d6:4b:f5:5f:14:3c:f2:7f:ba:5f:89:49:75:3e:
ee:1f:dd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:57 2025 by rpki-client