Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0358ad3d-e42f-3bf4-9325-9f5a65650ae6.roa
File: 0358ad3d-e42f-3bf4-9325-9f5a65650ae6.roa (raw, json)
Hash identifier: 6LswTh19HV+mQAnMiQs7oOnH5SRYipzsyb8bpkfCeZw=
Subject key identifier: A2:A4:E0:77:F6:E1:9E:74:AD:28:68:94:EC:B2:0C:CD:EA:0A:9E:3C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73DD2BC61BBB56B087F840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0358ad3d-e42f-3bf4-9325-9f5a65650ae6.roa
Signing time: Fri 29 Nov 2024 13:58:25 +0000
ROA not before: Fri 29 Nov 2024 13:58:25 +0000
ROA not after: Thu 27 Feb 2025 13:58:25 +0000
asID: 396583
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:dd:2b:c6:1b:bb:56:b0:87:f8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:25 2024 GMT
Not After : Feb 27 13:58:25 2025 GMT
Subject: CN=0c6eeaf1-30fb-4b9a-a282-79a241f6d0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:94:21:bd:e7:c4:01:63:7f:b4:2b:1d:7d:
a5:7f:75:ec:af:87:21:f6:52:8e:2b:31:2d:83:a5:
64:44:3e:90:7c:70:20:cd:dc:b5:8c:35:6f:7a:4d:
c8:d2:22:1d:f9:2c:3c:32:42:5b:23:98:b9:45:d4:
23:64:5b:ec:e5:48:0e:00:da:28:3e:09:6c:3e:01:
11:1e:18:72:4f:18:6d:97:83:f0:6e:91:44:e1:72:
f1:18:d0:9b:fa:51:b4:a6:2f:ad:90:83:28:49:a6:
12:7a:6f:e3:be:9f:df:7d:5d:ac:7e:ba:91:53:ec:
45:21:10:8c:6f:9d:6a:8b:97:05:ba:41:a8:74:21:
45:a0:c4:26:01:5b:bb:7e:e8:7a:b3:55:cb:70:e0:
cc:31:00:17:2e:b6:e0:d7:c3:ed:df:f1:3b:64:38:
47:3f:0c:d0:90:cc:ae:56:d3:73:f6:ac:35:ef:21:
13:e2:51:44:43:b5:3c:a7:90:8f:1b:ee:b6:fe:7c:
f4:53:ad:08:ed:5b:24:41:db:64:ef:15:ce:fe:f0:
11:7e:f8:5b:7c:e6:e1:6e:d7:d4:1c:13:bd:3b:70:
cc:98:37:2b:7d:8d:7f:75:5e:c9:5f:62:2b:f3:fb:
eb:fa:12:cd:f0:bd:27:a7:31:9f:30:d7:02:83:a7:
2b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A4:E0:77:F6:E1:9E:74:AD:28:68:94:EC:B2:0C:CD:EA:0A:9E:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0358ad3d-e42f-3bf4-9325-9f5a65650ae6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:97:18:a1:c0:19:f1:34:60:6b:2c:8d:2e:b5:c1:b9:0a:3a:
91:0f:75:96:53:e3:80:95:50:ec:de:6a:99:fb:f4:a1:f6:d0:
e6:5b:4c:1b:83:15:ea:3d:05:6c:1c:63:f3:8e:cc:98:68:66:
cd:c5:01:f5:94:45:df:52:40:4b:9d:79:f4:eb:54:69:6a:f0:
9b:37:af:7c:9e:72:92:38:03:c4:97:81:ca:69:3f:8d:d4:da:
ed:23:f0:47:0c:45:fd:50:ca:81:ed:35:76:29:c2:db:93:26:
44:3d:74:b1:f6:86:be:81:0e:c1:1a:97:b4:de:44:de:b9:02:
7a:41:2f:30:ca:e4:68:f2:08:eb:ce:61:9a:cc:d9:7a:8f:86:
8e:7f:fb:ab:a9:c4:8c:b6:6a:3d:24:24:3b:fe:64:15:08:35:
49:04:28:2a:6a:77:b6:70:d4:9d:e3:de:08:94:52:f4:5f:ee:
cc:5f:45:3f:55:41:08:e2:5c:26:aa:ac:f3:0e:42:76:94:0a:
4d:2e:9f:85:6a:6e:28:0f:d8:bc:d3:2f:bf:62:06:5b:1d:6e:
0d:e3:3e:8f:ee:64:07:e0:2c:36:67:97:5c:c3:0c:ca:f7:90:
f7:ff:5f:3b:56:a1:c2:5d:fe:0b:16:52:78:35:54:32:4c:65:
88:79:31:93
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgKc90rxhu7VrCH+EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEyOTEzNTgyNVoXDTI1MDIyNzEzNTgyNVowLzEtMCsGA1UEAxMk
MGM2ZWVhZjEtMzBmYi00YjlhLWEyODItNzlhMjQxZjZkMGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxyUIb3nxAFjf7QrHX2lf3Xsr4ch9lKOKzEt
g6VkRD6QfHAgzdy1jDVvek3I0iId+Sw8MkJbI5i5RdQjZFvs5UgOANooPglsPgER
HhhyTxhtl4PwbpFE4XLxGNCb+lG0pi+tkIMoSaYSem/jvp/ffV2sfrqRU+xFIRCM
b51qi5cFukGodCFFoMQmAVu7fuh6s1XLcODMMQAXLrbg18Pt3/E7ZDhHPwzQkMyu
VtNz9qw17yET4lFEQ7U8p5CPG+62/nz0U60I7VskQdtk7xXO/vARfvhbfObhbtfU
HBO9O3DMmDcrfY1/dV7JX2Ir8/vr+hLN8L0npzGfMNcCg6crLwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKKk4Hf24Z50rSholOyyDM3qCp48MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDM1OGFkM2QtZTQyZi0z
YmY0LTkzMjUtOWY1YTY1NjUwYWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBYlxihwBnxNGBrLI0utcG5CjqRD3WWU+OAlVDs3mqZ+/Sh9tDmW0wb
gxXqPQVsHGPzjsyYaGbNxQH1lEXfUkBLnXn061RpavCbN698nnKSOAPEl4HKaT+N
1NrtI/BHDEX9UMqB7TV2KcLbkyZEPXSx9oa+gQ7BGpe03kTeuQJ6QS8wyuRo8gjr
zmGazNl6j4aOf/urqcSMtmo9JCQ7/mQVCDVJBCgqane2cNSd494IlFL0X+7MX0U/
VUEI4lwmqqzzDkJ2lApNLp+Fam4oD9i80y+/YgZbHW4N4z6P7mQH4Cw2Z5dcwwzK
95D3/187VqHCXf4LFlJ4NVQyTGWIeTGT
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:41 2025 by rpki-client