Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ded11dbe-dfe9-376a-bdae-da3efa022422.roa
File: ded11dbe-dfe9-376a-bdae-da3efa022422.roa (raw, json)
Hash identifier: Udpl4OgQSzjFn28aw/s6L6v80x/reK9bXXfq423r3pc=
Subject key identifier: 66:49:60:71:F7:CE:08:FD:97:43:69:40:16:38:34:DE:A6:58:CE:2A
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802679043BCF3DE055A83080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ded11dbe-dfe9-376a-bdae-da3efa022422.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:35a0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:79:04:3b:cf:3d:e0:55:a8:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=e3e08b9e-1333-4ca2-a438-d7bd59961b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:71:1c:92:5c:ec:43:3f:45:db:37:09:dc:0d:
3d:d3:ea:ed:90:75:aa:36:3b:e3:44:08:7d:cb:96:
41:42:98:a7:30:16:28:c5:19:a0:c0:36:46:e8:e0:
b6:cb:8d:b8:5a:b3:1d:27:c6:05:6b:ee:c2:d3:43:
75:e4:cd:24:7d:0b:37:44:4f:5b:63:4e:6f:e2:eb:
c2:72:14:b2:16:f8:87:e5:48:7c:40:88:84:6c:8f:
b2:0b:78:f4:ea:c0:e2:23:3c:b7:44:27:24:68:01:
fa:06:27:7f:6f:99:3d:16:87:df:16:9f:54:b2:7e:
ee:2e:3b:ad:ce:fd:a6:5c:22:95:be:89:f0:6f:2f:
69:01:79:a4:52:56:96:60:44:4e:10:f5:da:a2:59:
4b:bd:3a:cf:c6:a4:c2:a0:9e:df:04:0c:96:45:ab:
40:11:af:ee:fa:42:09:b9:48:66:49:52:86:33:fa:
4f:86:ae:4c:08:08:14:5c:cc:6b:a2:86:d4:eb:4e:
29:85:08:7b:57:86:ac:f8:2f:8e:49:e0:49:8a:1e:
c8:83:07:8e:28:bc:1b:4b:aa:33:12:c1:91:a7:af:
51:af:b6:82:64:e1:f2:f4:52:fa:ee:16:4e:02:e3:
2a:93:2d:6c:3f:91:75:bb:12:b9:a5:fe:97:a8:bc:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:49:60:71:F7:CE:08:FD:97:43:69:40:16:38:34:DE:A6:58:CE:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ded11dbe-dfe9-376a-bdae-da3efa022422.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:35a0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:15:cc:a5:38:58:f6:37:5b:18:d6:e5:93:f4:bb:0e:8e:df:
87:f2:fd:6d:7a:eb:81:a2:a0:f5:e1:d7:2b:00:c0:e7:1e:b8:
b0:8f:ed:22:86:2d:49:86:5b:bd:4c:15:97:5c:a3:93:1c:ce:
34:17:cb:96:b8:2e:7f:ea:a4:fd:a8:a6:6e:f4:ff:10:86:87:
11:99:6b:a1:43:a1:b1:8f:5a:26:74:c5:e5:6e:fb:12:1e:f8:
5b:d9:43:10:9a:de:f9:86:6e:b1:ae:af:36:0c:9d:bf:96:d7:
fd:70:09:5e:aa:be:e8:34:d0:96:d4:fa:2f:df:6e:a9:ab:2c:
41:19:c3:70:5b:ba:01:aa:1e:15:7d:05:cf:2a:8e:fa:c6:52:
7c:23:25:4b:91:ee:e0:39:ba:0c:27:b5:e8:b0:bd:be:1b:cf:
92:15:06:80:92:ad:18:47:33:e1:3a:3d:5e:34:f5:d5:f4:4e:
63:bb:37:f3:d2:da:be:4d:eb:46:40:68:7c:94:5e:0b:a2:6c:
e7:ab:2e:cf:04:b1:2d:57:15:b0:be:3b:65:bd:e2:5c:82:5e:
20:53:21:2a:9e:c4:00:b2:cc:1e:cd:9a:9b:cd:6b:36:b7:1b:
2e:46:61:8b:7a:46:04:2f:16:31:d0:4a:f3:1b:f7:77:53:ff:
69:99:c0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:55 2025 by rpki-client