Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dc6a849b-ef41-37aa-9a75-04ae382fa065.roa
File: dc6a849b-ef41-37aa-9a75-04ae382fa065.roa (raw, json)
Hash identifier: LokA5RlRsG9r9KkuWWg47dSIuD/zZ2IzccW5UxnIgM8=
Subject key identifier: 9D:2B:6C:B2:EA:00:0C:B9:42:33:81:3B:14:B2:4E:0E:75:D7:76:FA
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802695A341CC67658BAF6A00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dc6a849b-ef41-37aa-9a75-04ae382fa065.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3320::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:95:a3:41:cc:67:65:8b:af:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=e74a13f6-956a-4c28-b64b-a6a09e812e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:93:f8:c8:0a:fa:cf:6b:9f:91:d3:09:a5:
4a:53:ff:0c:e7:d7:d3:95:28:28:66:ea:bb:0d:64:
59:58:c0:61:18:7f:11:2b:a9:83:97:05:6f:31:1b:
c2:66:f1:d7:cd:c5:5e:4c:e7:71:f0:8c:b6:15:4c:
4a:90:db:63:43:df:fd:ae:31:ff:72:c3:c9:34:b0:
79:32:fd:56:c1:79:44:21:ab:52:db:9a:9d:b2:89:
b3:34:5c:2e:de:43:bd:1d:67:7b:77:86:1b:7a:c4:
9f:7f:a2:cc:88:87:7e:ac:c8:fb:db:9b:55:a1:fb:
a0:5c:37:70:8f:2e:d1:b5:d8:f7:01:57:be:8e:d3:
76:0b:40:cb:66:ef:25:c5:f7:ee:f7:53:e8:56:98:
5e:55:a2:b8:ed:6d:59:8c:9c:b9:d2:fb:c2:40:b0:
5d:c5:8f:ad:75:25:37:fc:58:f3:10:8c:ac:05:eb:
29:03:f5:32:79:e3:02:b6:59:eb:27:95:c9:b8:c1:
27:96:b1:7f:ee:e9:0b:cf:98:1b:79:fb:28:b7:d2:
6c:05:bd:49:49:23:14:f1:17:4e:2b:3c:bf:dc:b7:
14:71:3a:fd:54:9a:e8:63:ee:50:0d:a0:c2:be:16:
f1:21:1b:45:ec:03:47:41:bf:0b:eb:6d:31:75:c4:
7a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2B:6C:B2:EA:00:0C:B9:42:33:81:3B:14:B2:4E:0E:75:D7:76:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dc6a849b-ef41-37aa-9a75-04ae382fa065.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3320::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:29:50:3e:7c:e4:b5:3c:ae:e4:6c:bd:cd:7d:96:79:4e:3a:
bc:60:9a:29:75:26:28:9a:a6:99:e5:a8:a0:77:0e:73:ad:1d:
29:94:2b:7b:66:e5:f8:c7:a2:c0:a7:d0:6f:a9:d5:a9:0f:97:
a1:62:35:8b:29:b1:4e:d5:94:f1:36:58:2e:16:7c:9c:43:e2:
bb:cf:c8:f3:09:7e:29:78:66:02:1f:0e:d8:64:2d:a2:89:4e:
50:99:8f:eb:e6:53:d1:90:e5:98:47:dc:b3:bb:8e:e4:6e:b6:
09:03:69:6e:bc:7d:2b:81:e4:ba:ae:69:d6:27:ba:eb:e1:15:
71:78:59:f1:44:53:e4:17:c8:69:2e:e2:89:5b:b1:79:17:94:
6d:8f:02:46:d3:2e:b4:fe:df:9d:b4:c0:c3:30:d4:00:a3:c6:
92:d2:7c:49:53:66:14:61:15:42:26:de:2a:a8:1d:2b:4e:3d:
db:0c:ee:38:b1:c6:f9:91:19:58:7c:d2:89:f3:d2:86:56:a2:
82:0a:ea:98:bf:83:f8:63:73:3e:57:d8:21:c5:01:87:75:ee:
8e:4f:56:de:8f:f4:62:20:03:37:30:6b:ed:34:20:f0:19:4a:
78:b8:9b:5f:56:03:92:43:c6:f6:3f:f2:de:85:b8:b5:cb:ae:
6b:0e:51:f4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJpWjQcxnZYuvagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
ZTc0YTEzZjYtOTU2YS00YzI4LWI2NGItYTZhMDllODEyZTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo2T+MgK+s9rn5HTCaVKU/8M59fTlSgoZuq7
DWRZWMBhGH8RK6mDlwVvMRvCZvHXzcVeTOdx8Iy2FUxKkNtjQ9/9rjH/csPJNLB5
Mv1WwXlEIatS25qdsomzNFwu3kO9HWd7d4YbesSff6LMiId+rMj725tVofugXDdw
jy7Rtdj3AVe+jtN2C0DLZu8lxffu91PoVpheVaK47W1ZjJy50vvCQLBdxY+tdSU3
/FjzEIysBespA/UyeeMCtlnrJ5XJuMEnlrF/7ukLz5gbefsot9JsBb1JSSMU8RdO
Kzy/3LcUcTr9VJroY+5QDaDCvhbxIRtF7ANHQb8L620xdcR6/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ0rbLLqAAy5QjOBOxSyTg5113b6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZGM2YTg0OWItZWY0MS0z
N2FhLTlhNzUtMDRhZTM4MmZhMDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQDMg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACQpUD585LU8ruRsvc19lnlOOrxgmil1JiiappnlqKB3DnOtHSmU
K3tm5fjHosCn0G+p1akPl6FiNYspsU7VlPE2WC4WfJxD4rvPyPMJfil4ZgIfDthk
LaKJTlCZj+vmU9GQ5ZhH3LO7juRutgkDaW68fSuB5LquadYnuuvhFXF4WfFEU+QX
yGku4olbsXkXlG2PAkbTLrT+3520wMMw1ACjxpLSfElTZhRhFUIm3iqoHStOPdsM
7jixxvmRGVh80onz0oZWooIK6pi/g/hjcz5X2CHFAYd17o5PVt6P9GIgAzcwa+00
IPAZSni4m19WA5JDxvY/8t6FuLXLrmsOUfQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:51 2025 by rpki-client