Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f37f4af1-dfff-3321-8616-855b871cd011.roa
File: f37f4af1-dfff-3321-8616-855b871cd011.roa (raw, json)
Hash identifier: 1cNGPZ5wmHI9I/qZm5eE7z7A37FtlpyaV5l45CdkoOY=
Subject key identifier: 0F:98:C2:E5:EB:1D:AF:24:4F:4F:E7:B8:66:0C:57:44:E8:04:69:C7
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858478026702E8FFFFF22C8C53180
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f37f4af1-dfff-3321-8616-855b871cd011.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:39e0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:70:2e:8f:ff:ff:22:c8:c5:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=ac23aca6-5291-4804-a499-394ce1113be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:64:88:89:a0:aa:13:90:b0:a5:78:2e:71:e3:
f4:ef:49:a6:29:09:ef:73:fe:a0:54:a2:ed:08:de:
e3:cd:9e:89:aa:20:71:fa:df:d2:a2:9b:7d:7c:9f:
44:66:22:39:e4:ff:ed:77:de:00:98:49:b6:89:f3:
7b:c3:5b:70:c8:13:0c:aa:2c:98:5e:e3:e2:f3:28:
61:4a:0e:41:b6:89:ea:bf:28:db:de:cb:14:0a:b5:
c1:d6:38:d8:4e:7c:ce:09:66:c2:e8:ef:65:f3:f0:
e5:dd:6d:a8:59:c8:63:fd:7a:c1:d3:7e:09:f8:63:
f0:f5:62:c1:bb:34:24:8f:37:c3:b8:35:93:eb:8b:
8c:05:8e:96:6d:c0:c5:55:4d:ff:9a:32:bd:40:8e:
16:ad:ae:10:32:2c:48:f1:e9:4d:e0:ba:c1:bb:a6:
02:54:b3:e1:9a:78:58:10:5b:5b:49:41:68:f0:f6:
b3:19:0d:d5:d8:90:40:94:c8:24:b9:ab:2a:e6:6a:
59:ca:99:99:83:5c:08:27:41:c2:99:16:56:38:83:
ae:c3:58:ef:ad:8f:fd:b2:c2:56:bc:19:8a:09:b3:
9b:d8:a1:0a:22:64:46:0d:03:ce:5f:ad:f0:80:80:
c0:c6:5a:31:50:46:d4:2c:61:96:20:2a:d9:17:74:
d5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:98:C2:E5:EB:1D:AF:24:4F:4F:E7:B8:66:0C:57:44:E8:04:69:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f37f4af1-dfff-3321-8616-855b871cd011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:39e0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:9c:cc:66:2c:e1:9a:95:22:af:ae:20:be:3d:e3:f9:eb:e5:
c1:9f:57:46:5a:c0:5d:98:ae:4c:99:bc:87:8f:8d:74:dc:f7:
62:99:65:1a:d3:67:04:2b:d6:48:89:37:24:dc:af:49:64:76:
be:f7:42:cc:8a:11:75:3c:04:84:8d:06:f9:7d:06:fb:7f:f0:
01:ea:77:57:8a:30:ab:8d:af:ec:42:7e:ee:aa:85:cd:81:4c:
c0:e6:83:dc:23:23:44:e3:79:89:37:14:9e:2c:2d:ac:1e:0b:
50:dd:49:71:b5:be:63:d1:6f:27:c2:61:d7:23:74:22:70:b2:
14:25:a5:d3:f4:29:bd:0b:72:3f:8c:d8:3b:d6:68:1d:34:dd:
e7:b8:33:31:bf:a4:1c:d9:f8:4b:95:9c:ed:1a:6d:04:a4:51:
7d:72:68:e3:9e:07:bb:70:70:45:15:4c:55:62:70:64:1d:10:
d3:06:7d:53:9d:22:04:73:d0:2f:a8:e8:30:f1:d6:22:01:63:
12:7f:b1:65:fc:43:c1:0b:03:10:ca:b6:68:d4:11:3d:4c:81:
97:28:c5:6c:90:bd:97:35:0c:7d:4f:53:52:22:b7:b0:14:64:
97:d6:25:dd:9a:df:8d:c7:c6:c8:82:97:be:3a:8f:ee:3a:d1:
b5:69:97:01
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJnAuj///IsjFMYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
YWMyM2FjYTYtNTI5MS00ODA0LWE0OTktMzk0Y2UxMTEzYmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmSIiaCqE5CwpXguceP070mmKQnvc/6gVKLt
CN7jzZ6JqiBx+t/Sopt9fJ9EZiI55P/td94AmEm2ifN7w1twyBMMqiyYXuPi8yhh
Sg5Btonqvyjb3ssUCrXB1jjYTnzOCWbC6O9l8/Dl3W2oWchj/XrB034J+GPw9WLB
uzQkjzfDuDWT64uMBY6WbcDFVU3/mjK9QI4Wra4QMixI8elN4LrBu6YCVLPhmnhY
EFtbSUFo8PazGQ3V2JBAlMgkuasq5mpZypmZg1wIJ0HCmRZWOIOuw1jvrY/9ssJW
vBmKCbOb2KEKImRGDQPOX63wgIDAxloxUEbULGGWICrZF3TVlwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA+YwuXrHa8kT0/nuGYMV0ToBGnHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjM3ZjRhZjEtZGZmZi0z
MzIxLTg2MTYtODU1Yjg3MWNkMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQDng
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAACczGYs4ZqVIq+uIL494/nr5cGfV0ZawF2YrkyZvIePjXTc92KZ
ZRrTZwQr1kiJNyTcr0lkdr73QsyKEXU8BISNBvl9Bvt/8AHqd1eKMKuNr+xCfu6q
hc2BTMDmg9wjI0TjeYk3FJ4sLaweC1DdSXG1vmPRbyfCYdcjdCJwshQlpdP0Kb0L
cj+M2DvWaB003ee4MzG/pBzZ+EuVnO0abQSkUX1yaOOeB7twcEUVTFVicGQdENMG
fVOdIgRz0C+o6DDx1iIBYxJ/sWX8Q8ELAxDKtmjUET1MgZcoxWyQvZc1DH1PU1Ii
t7AUZJfWJd2a343HxsiCl746j+460bVplwE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:39 2025 by rpki-client