Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fb7c757c-bc39-305a-a182-83e30cdeaf9e.roa
File: fb7c757c-bc39-305a-a182-83e30cdeaf9e.roa (raw, json)
Hash identifier: qi+Oc/y6fXhvvwMUkIKkSM5QTQZh7mSTHMmsgwvA7X8=
Subject key identifier: 1D:23:16:06:B2:FD:70:BC:95:E2:98:EA:30:65:2C:84:DD:43:57:CF
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858478026727C5C746A78FB33EF00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fb7c757c-bc39-305a-a182-83e30cdeaf9e.roa
Signing time: Fri 11 Oct 2024 01:00:31 +0000
ROA not before: Fri 11 Oct 2024 01:00:31 +0000
ROA not after: Thu 09 Jan 2025 02:00:31 +0000
asID: 209242
IP address blocks: 2607:8940:2940::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:80:26:72:7c:5c:74:6a:78:fb:33:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Oct 11 01:00:31 2024 GMT
Not After : Jan 9 02:00:31 2025 GMT
Subject: CN=304ebbf7-efd2-4715-80d0-58b6b35fd094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d4:db:84:e5:5b:aa:3f:cf:d8:9e:c3:8d:ad:
29:57:a7:1d:b2:90:33:ce:2a:70:96:ae:72:a8:94:
92:ff:d8:07:cb:21:20:51:78:a8:3c:03:97:10:48:
d5:6e:55:80:b3:e4:20:84:70:38:cb:98:b3:84:57:
3d:95:e4:49:28:44:cd:36:5c:d0:e6:f4:cf:fc:15:
5b:d4:1c:e2:57:fb:9f:b5:da:a9:f2:ed:46:e1:3e:
11:3c:ae:47:8d:52:fb:a4:58:31:98:83:f1:c3:b3:
cb:50:22:50:9d:97:25:43:16:50:67:80:5a:68:6d:
9d:1e:b0:51:07:87:d0:b6:d4:ac:d1:6e:9a:ca:0c:
de:53:5a:98:dc:f0:61:84:05:db:54:55:a1:f2:18:
3c:2a:04:92:bb:71:ae:35:c3:3c:6e:44:f6:d5:b8:
08:bb:57:ec:02:2b:0f:e3:e1:df:81:bd:b2:64:87:
fa:17:54:4b:b9:d2:17:56:1c:33:45:fe:0d:5c:94:
85:3b:b4:10:c3:d6:1d:59:2f:5c:bc:a2:ca:38:8e:
bc:62:f2:20:8a:10:56:9c:48:25:6c:d1:8d:cb:f4:
db:b2:3a:5a:bd:0c:72:3a:39:4d:e1:ac:17:7d:6c:
ab:4c:a7:90:ec:b5:43:fa:5b:5d:be:28:05:3c:bf:
c3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:23:16:06:B2:FD:70:BC:95:E2:98:EA:30:65:2C:84:DD:43:57:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fb7c757c-bc39-305a-a182-83e30cdeaf9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:2940::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:6d:61:4e:22:41:ea:03:64:ab:fc:15:da:85:76:e8:03:46:
93:bc:1c:cf:43:1e:bf:6c:de:35:02:c4:e4:0e:fe:c4:4c:f5:
7b:5c:f1:fe:35:b7:65:30:73:8b:f3:c3:19:8e:bf:89:f6:5b:
00:42:4e:f5:be:f2:00:f5:d8:03:a8:5c:ff:3a:8e:99:3f:53:
f7:7b:14:f4:04:34:e8:74:61:a7:7e:7f:72:fb:9f:23:fb:33:
03:f7:96:ae:19:e4:c7:aa:c0:c5:0a:f8:9b:5a:87:20:dd:ce:
68:9e:6f:24:f8:73:30:62:9b:73:41:76:62:44:f9:4e:23:0b:
30:57:aa:c8:9d:48:27:b3:54:3e:ed:99:ff:e8:a6:d1:d8:f3:
5a:47:55:93:56:2e:1f:8f:49:b7:f3:3d:c9:7f:66:be:47:c8:
aa:ba:18:e8:f1:8d:e2:44:0c:e4:4d:08:8b:ed:c2:35:af:9e:
3f:30:3a:55:2a:b4:09:a7:11:bf:8f:78:0f:c5:b8:bc:1a:8c:
45:ee:5c:b9:0b:56:95:f8:cf:a3:65:d9:a7:74:df:5e:8b:b9:
d7:fc:79:c1:fe:b6:ab:79:a1:ff:4f:35:57:fc:b1:39:70:ef:
ed:21:1c:1b:d2:37:ab:f7:5e:15:07:93:5a:89:07:42:6c:18:
9e:2c:7a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:29 2025 by rpki-client