Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f4634c73-203b-3902-88a3-dffa1377abfa.roa
File: f4634c73-203b-3902-88a3-dffa1377abfa.roa (raw, json)
Hash identifier: kwvZr6FAk7Keq0popeEnUdAOd0XPKm2moKs6H7SEqI4=
Subject key identifier: AF:21:FB:73:1D:30:BE:AB:83:D4:12:43:96:AE:F3:92:01:63:10:7D
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584780269AB9E4B13B4BAEE9EABC
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f4634c73-203b-3902-88a3-dffa1377abfa.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:3ce0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:9a:b9:e4:b1:3b:4b:ae:e9:ea:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=5ee55ece-7cb1-4e49-baf5-410eae05b56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ba:a3:ce:1e:32:c3:1b:09:48:d3:75:cf:9a:
4e:53:10:b6:d0:be:fd:28:ae:65:a7:0a:87:d7:30:
04:27:4c:bd:8e:95:92:f9:76:bb:ef:44:12:b7:59:
3d:17:16:4e:b4:4e:5f:0c:9e:e0:f1:e5:68:fd:98:
70:1e:a8:46:fd:4f:af:16:e3:98:e9:ed:26:fa:75:
98:b7:c2:0f:f7:ce:13:82:15:8e:9c:9c:23:02:3d:
00:aa:7c:6e:39:03:96:4b:73:bd:24:40:89:23:cc:
2f:cb:b0:7b:83:f0:4f:e3:3e:70:c3:4f:fb:6a:37:
36:9d:5e:d9:c0:8f:94:cb:5e:1c:72:3d:72:a8:e6:
c5:54:5d:9c:be:30:1a:62:83:75:05:cf:66:47:71:
f1:62:95:f0:ea:22:85:b1:3d:36:4a:7e:86:2d:a6:
6b:28:c1:9a:54:df:fe:fe:9e:17:ec:99:03:2e:ea:
90:c4:72:b5:ee:60:cb:f5:16:11:ac:e9:82:6b:cd:
5b:c7:1f:07:70:ab:f7:23:10:88:60:b5:ea:ea:82:
ee:ec:57:0d:d4:16:f3:34:30:da:36:89:f4:d8:75:
93:91:9e:b7:24:92:be:2e:78:37:e7:df:f2:69:3a:
49:3d:74:da:65:ca:9a:2d:e2:a0:d0:98:79:f6:01:
9d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:21:FB:73:1D:30:BE:AB:83:D4:12:43:96:AE:F3:92:01:63:10:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f4634c73-203b-3902-88a3-dffa1377abfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3ce0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:9e:9e:a0:29:d2:e3:4e:69:6c:f5:9a:53:f2:d1:dc:c1:36:
17:17:cf:a8:cc:9f:e4:74:e2:64:ee:45:12:75:e9:19:b1:be:
18:70:16:17:a8:ca:a9:ea:cc:8a:64:f6:ca:16:52:04:86:c8:
04:ba:9f:60:e7:b0:13:5a:db:9f:99:95:d9:f1:25:6f:5f:ed:
48:c1:90:68:f5:d7:9a:b0:15:34:0f:0e:62:ae:47:2b:53:7a:
36:ea:6c:c7:31:c1:7c:db:b3:f5:5e:d5:a4:c6:da:c1:9f:58:
54:58:8c:5b:50:47:06:2a:04:fc:d7:2c:c5:72:db:dd:79:af:
3b:af:38:1a:5d:c6:a3:ff:9e:10:9d:eb:5d:74:24:ad:54:86:
ab:70:f6:0c:43:67:8f:6c:3c:27:6e:b1:c3:1b:c4:a7:41:da:
1a:e7:bf:49:57:6d:50:51:a7:c0:00:c9:41:94:9b:d9:2f:4c:
58:38:cf:ae:67:7e:92:63:ae:ea:74:43:d7:fb:91:b6:37:2d:
40:1a:8e:01:12:fe:21:6a:28:c0:95:66:7e:5a:86:6b:5d:d2:
27:82:46:ae:e9:83:7e:a3:25:90:79:2a:d9:57:11:fb:51:a3:
6d:41:42:77:6d:4e:88:99:04:27:18:01:31:1a:68:91:de:00:
0e:56:fd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:06 2025 by rpki-client