Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f10f6b07-f38b-3fbd-9789-e0d50a022c8d.roa
File: f10f6b07-f38b-3fbd-9789-e0d50a022c8d.roa (raw, json)
Hash identifier: tIwhk7/BtsHspkCU0mpt9IaejqM+6XRn/y6Hfhr5y2U=
Subject key identifier: E1:A4:82:78:70:D7:66:0D:19:12:3B:3B:95:AA:A3:00:AA:4E:EC:7A
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802665A36E1FE1C4667AE080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f10f6b07-f38b-3fbd-9789-e0d50a022c8d.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3810::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:65:a3:6e:1f:e1:c4:66:7a:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=7b9e287f-2e18-4031-bf46-48e525824e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:44:8a:b8:32:40:15:8a:26:b3:2b:4c:c3:
53:5c:1f:ee:87:5b:47:d6:34:c1:dd:a0:9f:25:1e:
7b:6b:d7:3c:ac:c6:58:0d:34:fe:5b:13:78:ec:48:
32:9a:32:0b:c5:4a:c8:55:1f:01:64:2c:89:9e:a6:
fa:9a:d6:9f:6e:52:7c:a2:25:cd:7d:1a:48:c4:6f:
5f:9e:67:fc:99:a1:12:cd:8d:5d:f3:2d:f4:45:dd:
d1:d8:65:e8:ee:76:e0:6c:5c:4a:a1:19:ba:a2:ff:
09:c4:18:a0:48:84:5c:a5:45:ba:32:23:97:25:97:
ab:f3:48:af:a6:c1:d7:ee:e6:26:d6:89:43:e0:c7:
15:0c:bf:3d:c2:78:d0:51:69:c3:7d:7b:02:c6:14:
43:1c:95:f4:be:06:92:07:c3:5f:69:f6:51:04:e1:
f8:e2:6c:66:05:f8:50:af:90:bf:51:b8:70:95:f7:
6b:3e:36:22:ec:22:c8:4d:e6:bb:fa:3f:ab:39:22:
ba:ac:d3:e4:1a:73:79:55:0b:21:20:00:53:75:d2:
bc:5e:67:19:2d:30:62:1a:2d:f6:91:c1:02:91:f1:
4c:ec:b1:cf:3c:d1:98:46:a6:11:88:4d:72:8e:90:
d1:ee:10:47:40:fc:4f:fd:8d:ad:a7:e1:0f:77:80:
01:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A4:82:78:70:D7:66:0D:19:12:3B:3B:95:AA:A3:00:AA:4E:EC:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f10f6b07-f38b-3fbd-9789-e0d50a022c8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3810::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:55:b0:7c:79:79:0c:80:05:35:22:ce:56:58:15:fb:af:a4:
38:da:3b:ae:64:07:57:89:be:48:53:cb:6a:e1:39:7f:99:78:
26:e8:eb:c8:81:90:1b:c7:b7:86:f7:5a:81:ae:2f:f0:74:94:
31:d0:59:e1:83:0e:95:4c:7d:f1:7d:fd:e3:ad:64:8d:02:41:
39:34:62:9d:9f:b4:34:50:b3:41:ce:62:7f:b5:c3:f6:24:fb:
c3:79:9e:05:8b:e2:53:f0:ee:c5:a8:4c:87:c0:2c:16:40:2a:
fd:7c:68:b2:86:51:01:65:dd:2f:7b:eb:69:20:c7:65:19:34:
57:71:15:e7:1f:f1:a9:66:58:a7:05:f8:bc:7a:af:e4:69:1d:
09:c5:48:2d:12:0d:9e:c0:ae:80:26:b8:0b:5a:8a:ce:cf:b4:
6a:ad:5f:4f:61:9a:55:06:30:46:94:1b:ca:4c:96:c9:fe:8c:
be:47:8f:4d:9d:1e:8a:e4:ec:a3:8e:de:13:29:9c:f3:91:4c:
16:59:27:23:98:67:8f:b4:b7:9d:29:16:ad:17:20:bd:a2:ab:
73:02:af:8f:f7:67:05:8c:ef:5b:85:35:40:e8:b0:69:1c:12:
c3:b1:f8:06:bd:e9:46:75:ed:38:c7:92:a0:f3:24:7e:ba:c2:
1d:99:35:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:07 2025 by rpki-client