Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fa3e8267-ceec-3040-bca4-65c89be4a886.roa
File: fa3e8267-ceec-3040-bca4-65c89be4a886.roa (raw, json)
Hash identifier: LFxKCqiwufpZtj/JsqD8uGpjBHw1pjSxEEMo/6Xs/M4=
Subject key identifier: 5A:79:71:E6:7C:8E:9F:D9:81:30:50:ED:6F:78:89:98:90:56:E1:B0
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847802676BA3A4C56F72345E880
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fa3e8267-ceec-3040-bca4-65c89be4a886.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2890::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:76:ba:3a:4c:56:f7:23:45:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=4fd29f28-8338-4f48-8949-cad078a7beeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:a9:bf:52:e4:bd:53:8b:cd:d5:a5:24:9c:
cb:1a:fa:7c:98:0a:33:5b:d9:ec:e1:19:8c:fe:2c:
05:cc:46:b5:3e:47:ea:cf:91:be:77:6f:53:08:64:
37:b8:e6:30:4b:d2:6f:79:76:33:8e:02:69:c2:4c:
32:64:9b:63:6e:ba:07:30:55:23:58:f7:3a:aa:68:
c3:fc:c1:83:77:f0:48:c0:d0:0e:4d:6d:d8:e1:3f:
fb:23:76:bd:6e:a3:3a:9c:5e:35:14:ea:67:a2:02:
0a:47:54:e3:20:f9:5b:6d:5c:2a:e3:81:3a:7c:cf:
2e:7f:f0:9a:e2:20:90:23:b8:bd:29:a8:10:b8:1f:
e3:79:d7:56:a2:61:28:e4:66:07:ab:a5:1a:8e:56:
2f:be:95:41:f1:6f:f3:b9:2a:e5:28:07:fb:25:9e:
bc:fc:c5:1f:f1:e1:f3:5b:c6:15:7f:1a:2a:9f:42:
28:fd:85:69:df:06:35:46:6e:4b:92:16:fb:d0:4c:
33:b5:9a:55:8a:aa:88:8d:b9:fc:db:99:63:23:72:
40:cd:63:93:f5:fb:2b:e4:9a:eb:12:0b:8c:05:fa:
d6:94:6c:59:da:3a:75:23:e5:2e:62:99:56:f2:dd:
0c:36:ad:1b:70:fa:82:4c:9b:c6:3e:32:89:42:50:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:79:71:E6:7C:8E:9F:D9:81:30:50:ED:6F:78:89:98:90:56:E1:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fa3e8267-ceec-3040-bca4-65c89be4a886.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2890::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:7a:ea:e1:ed:95:28:b7:29:da:35:f0:20:a1:d1:9e:0d:66:
ae:7e:2e:a2:03:3c:32:00:3b:c7:63:8d:ec:05:a7:0a:de:25:
d4:87:42:3d:d8:72:2f:b1:e6:89:08:79:7b:71:83:42:5c:10:
ba:25:05:19:22:46:26:82:05:1d:f5:51:64:95:66:79:5c:ac:
4d:c1:42:05:ba:f0:b4:da:11:f7:d0:c2:cd:58:e7:2e:31:43:
b4:3f:b2:9d:99:1e:86:a6:5a:9b:eb:6d:a1:7f:53:e2:53:95:
52:6d:35:5b:2f:e6:02:47:40:d9:42:35:f4:db:83:f5:6b:97:
36:f8:c1:88:b7:df:cf:34:8c:20:cb:44:db:f5:c8:b8:dc:59:
5a:39:12:07:cd:5f:33:d1:ee:a7:16:55:02:41:03:fd:31:28:
a6:2a:c0:39:51:76:2a:ff:49:de:92:e5:39:49:03:75:6a:67:
b4:60:9e:bd:3a:45:02:42:51:fb:7c:4c:44:07:76:d2:bd:fc:
65:02:01:62:bc:10:72:8d:9d:a5:01:f4:2a:a1:96:0f:be:d6:
32:40:4a:68:3c:7a:87:c4:1c:2a:fb:4d:6a:97:21:83:e0:f5:
86:6f:29:9c:3b:e3:22:69:0a:3c:41:0d:34:a8:88:ff:8c:72:
05:61:12:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:13 2025 by rpki-client