Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f009982a-319a-3c95-ba90-193c5124a0f3.roa
File: f009982a-319a-3c95-ba90-193c5124a0f3.roa (raw, json)
Hash identifier: HIAoFAEbiM8SycqpR0PSB5CLK5esnsXlUgzi7Xx3R1s=
Subject key identifier: 14:2B:85:7F:BD:08:10:1A:9F:A1:54:8A:A0:04:6B:90:91:01:07:63
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858478026923F5D1DA28A2DFF0F00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f009982a-319a-3c95-ba90-193c5124a0f3.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:33d0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:92:3f:5d:1d:a2:8a:2d:ff:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=c9ea6097-1cfe-49b4-aed7-dee26bac4c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:ea:7d:c5:1f:5f:7b:c8:00:75:59:5f:a4:
89:56:aa:2b:d4:6d:1e:51:03:fe:d4:23:e1:b0:80:
9b:e6:c4:56:ed:0c:e9:88:a3:52:db:91:9f:e8:7b:
9e:dd:2b:11:47:86:9b:90:b3:f3:1f:f9:1d:78:ac:
6b:fe:24:0d:40:1d:06:af:c8:b3:a3:64:23:b5:0e:
d1:5e:7d:07:42:8f:0e:6e:c7:38:2b:7c:5e:7c:86:
64:9b:f4:98:1c:d2:37:0a:c5:01:be:f0:ce:ff:b5:
c9:4a:f7:16:a3:51:e9:b5:04:2f:a8:1a:85:42:7f:
d0:e8:d3:34:1c:46:5e:3b:e8:7d:26:51:4d:80:29:
95:79:2d:00:41:b8:c1:fe:a3:cd:a8:bd:b6:54:f2:
8f:f5:d6:ff:46:17:4a:7b:90:d7:6b:6e:46:60:2f:
f5:31:de:27:80:92:23:4e:9a:b4:3b:8d:ae:19:4e:
7e:dd:88:33:d2:5a:35:9c:5e:a3:86:cc:67:11:a5:
a1:ab:22:cb:52:d6:75:1a:58:71:52:5e:07:0c:81:
75:93:21:28:38:76:47:b9:b6:1a:1c:97:9b:3c:be:
1a:48:95:f4:f9:53:af:ff:c4:fd:77:26:06:6b:ec:
76:f5:0a:0f:bb:23:b1:da:4d:03:de:e8:39:d1:4f:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2B:85:7F:BD:08:10:1A:9F:A1:54:8A:A0:04:6B:90:91:01:07:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f009982a-319a-3c95-ba90-193c5124a0f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:33d0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:e4:92:5a:e9:85:bd:06:d9:65:53:de:ab:d5:c6:72:3c:8c:
14:54:4c:d0:df:96:28:a7:11:45:ad:79:93:0b:4e:a3:b7:f7:
4f:4b:9c:9f:d0:bf:8b:2b:f3:3d:dc:dd:c6:ba:00:8d:e9:3a:
fd:91:40:1c:ad:41:b3:52:d5:dd:ae:f5:65:9c:c7:09:ea:06:
ad:88:60:f9:99:37:a7:35:bc:f1:ec:cb:f3:c2:ff:40:98:b2:
d7:2a:c8:fe:02:3a:b8:3f:ce:d8:a2:0a:ab:a2:79:be:13:27:
50:51:6f:37:d4:a6:7e:08:c8:e5:94:63:d1:3c:d7:88:31:e6:
ea:69:d5:3f:79:c1:50:f6:12:9a:47:47:74:32:fd:46:4b:69:
8d:b6:92:3a:f4:9b:74:03:49:f6:8f:d7:9c:93:fd:c6:92:9e:
57:11:16:58:ce:1c:32:b5:d0:38:c0:86:de:34:bd:ee:fc:3e:
16:36:3f:75:3d:50:37:89:2c:d2:60:16:ef:a2:6d:43:b6:c3:
6a:ab:0a:0f:ce:b6:fc:dd:61:83:67:27:be:4c:6e:3c:cc:0b:
c3:f3:0e:02:69:6b:66:48:52:e6:a5:97:3b:c8:83:b7:90:db:
20:cc:59:6a:ba:25:5d:c2:12:0f:40:96:be:5e:7e:53:56:aa:
88:9a:25:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:37 2025 by rpki-client