Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0c54f55-b921-3806-98c9-c4be169e7d72.roa
File: f0c54f55-b921-3806-98c9-c4be169e7d72.roa (raw, json)
Hash identifier: esds8l3PcBv7nNH/raUpxDprdJdwZhy3/AoyucNVZ5g=
Subject key identifier: 4E:D1:94:72:48:C6:AF:0E:C7:57:91:05:A3:9F:45:25:EB:69:8A:1B
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780266B4FBBACD552586F80C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0c54f55-b921-3806-98c9-c4be169e7d72.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2e40::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:6b:4f:bb:ac:d5:52:58:6f:80:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=efebcea9-8b70-4dc5-9845-5d591f0b13af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:b1:a8:f7:2d:bb:df:ad:ca:83:ba:e3:ec:
2a:24:56:fa:c0:b6:d1:5e:af:2e:5f:15:7b:d1:0a:
f8:65:98:c6:c6:b7:c1:63:c7:fe:0a:b8:18:3b:a6:
7c:e2:b4:56:00:54:1a:6f:d3:6c:44:3a:f1:28:e2:
a0:a6:46:d6:28:ea:e8:7a:5b:77:dc:2d:c2:90:39:
eb:5c:4a:3e:0e:4c:db:64:65:ff:d8:56:d0:4f:93:
e1:68:6d:0f:99:78:d2:6a:35:d3:51:bf:3e:84:de:
f6:55:57:45:81:77:2b:31:1f:a7:ab:2d:28:60:58:
bf:3d:44:65:ac:7e:28:2f:64:17:af:73:4a:9e:37:
48:45:39:d9:d2:05:ff:d7:a8:d3:ff:00:f3:3d:47:
74:d6:3a:de:df:61:d9:9c:53:fb:5b:71:cd:fe:9b:
34:33:6e:8b:39:b5:45:d6:7e:bc:20:47:cd:1f:ef:
d6:a8:73:5a:05:c8:2f:50:c5:24:7f:11:db:47:3b:
4c:fc:bf:1e:2d:88:ca:a9:42:6d:da:4e:f1:87:07:
20:10:c7:3d:44:73:e9:3f:f7:5b:1a:30:b2:25:20:
6c:62:31:ae:e5:2f:95:23:95:99:85:73:fa:cb:a7:
c3:a5:cd:56:a3:c5:a4:3c:60:32:21:63:cf:36:2e:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D1:94:72:48:C6:AF:0E:C7:57:91:05:A3:9F:45:25:EB:69:8A:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0c54f55-b921-3806-98c9-c4be169e7d72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2e40::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:f0:e4:cb:6f:2a:68:4f:8b:9c:f5:9f:2a:b4:3b:2e:65:ae:
3b:c3:49:14:9f:5d:77:90:7f:ee:07:3b:ce:01:5c:e0:23:fa:
73:6f:4e:45:7b:58:c4:1d:b3:5a:48:f4:e2:56:8a:df:97:7c:
09:c5:b8:7c:4a:c0:0c:0a:6f:56:60:03:e0:c8:0b:ec:c6:69:
a4:c5:73:e4:24:c9:4f:d1:1e:79:e9:64:6b:ff:2b:8d:0a:0f:
e1:a6:1d:06:69:01:6c:e0:7e:bf:18:9a:6e:b4:3f:95:82:e7:
69:cf:b6:dd:6b:07:78:c0:12:c3:d9:88:b5:29:49:22:58:0b:
a5:f1:50:37:1c:b2:c2:58:63:75:1a:d3:8c:03:68:cf:d9:ae:
83:64:4a:8c:34:49:d4:c7:0e:31:7f:92:f6:6c:e7:ce:9f:fd:
4d:49:c8:22:ac:e0:81:60:10:f1:47:5f:e2:2c:56:48:9c:d0:
d5:98:80:67:3b:35:5b:19:20:af:eb:da:2c:c2:3b:da:c5:5b:
04:dc:29:8f:22:73:d5:e4:45:40:44:dd:27:00:a8:50:95:e0:
09:90:43:e2:7b:02:4e:e3:83:6f:a3:ce:17:15:b4:65:ed:41:
65:e5:bd:18:c9:ef:10:5c:a8:a9:fd:5c:70:e4:bb:35:cf:91:
0a:cb:91:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:37 2025 by rpki-client