Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08f6f295-41f0-3711-ae8a-da42ea6e33e6.roa
File: 08f6f295-41f0-3711-ae8a-da42ea6e33e6.roa (raw, json)
Hash identifier: I1MM1pkoFmZDGFtsxu5f94IOp7j0RAd8ytzN/PfWk4I=
Subject key identifier: F2:41:3D:A6:BB:99:78:10:C0:FB:8F:FB:CC:75:E3:DE:BD:57:60:58
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A740575CCFF225B40F58C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08f6f295-41f0-3711-ae8a-da42ea6e33e6.roa
Signing time: Fri 29 Nov 2024 13:58:44 +0000
ROA not before: Fri 29 Nov 2024 13:58:44 +0000
ROA not after: Thu 27 Feb 2025 13:58:44 +0000
asID: 397202
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:74:05:75:cc:ff:22:5b:40:f5:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:44 2024 GMT
Not After : Feb 27 13:58:44 2025 GMT
Subject: CN=83ce5527-44a6-470e-9629-253ecdc81933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:eb:c1:0d:b9:bb:28:ff:09:ca:3e:0f:32:73:
5c:b0:ac:19:93:e6:52:c6:07:f9:95:af:5d:59:22:
61:b6:3d:5a:17:44:dc:44:59:82:33:a1:42:1c:61:
df:1b:28:70:55:33:4f:6b:c6:5c:e6:27:c3:2b:18:
8c:17:00:7e:f7:02:1d:ed:43:e7:07:56:ee:64:32:
1c:f9:92:3b:bf:03:ee:70:66:10:ca:56:85:52:e5:
fd:d7:a5:ae:07:8d:26:6c:41:dc:fb:16:11:77:57:
6f:e6:86:8a:ee:8f:f4:ce:80:38:70:40:3f:5e:47:
36:8b:68:75:ec:5d:74:2e:79:4b:79:c0:f0:39:8b:
ab:23:8b:2a:28:1e:6b:92:79:e2:38:e2:77:7c:28:
3f:19:42:5c:0d:ca:ac:d7:42:e3:15:d7:7d:6e:11:
03:23:d6:03:3f:ec:19:80:d6:04:8b:6a:82:de:13:
76:61:a6:01:c3:b2:40:b4:d9:2d:ec:44:f8:f9:74:
ab:00:6f:d6:77:88:5a:2d:cc:22:21:a1:0e:89:af:
91:1c:ad:69:9a:ed:36:57:61:e4:6a:f4:70:cd:e8:
78:d2:ee:fb:8e:a9:79:8d:2d:18:96:88:a5:af:6b:
ba:db:7c:09:2f:29:0a:01:e4:cd:ed:e4:1b:41:0f:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:41:3D:A6:BB:99:78:10:C0:FB:8F:FB:CC:75:E3:DE:BD:57:60:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08f6f295-41f0-3711-ae8a-da42ea6e33e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:0f:21:79:c9:d5:44:36:46:a2:12:c5:e6:c7:e7:9d:8e:3a:
a1:8a:38:a0:2f:67:b2:3f:f6:e0:d5:35:bf:54:5c:52:dc:23:
6b:3c:29:92:e4:27:d9:f9:01:ad:76:06:f6:6e:58:e0:00:a3:
56:e6:c9:6e:51:78:dd:80:ed:3d:4b:cb:d2:64:7e:80:b6:cf:
cf:6d:52:ac:4f:00:18:89:70:70:5c:ed:1a:3c:e8:4b:3c:6d:
e3:aa:23:6d:51:9e:16:d6:ec:94:b2:c9:09:1c:3c:44:87:61:
8f:b1:3f:97:4e:10:27:39:24:fc:4e:78:a6:ff:ad:22:17:51:
f1:d7:ef:e3:a2:c6:a6:dc:50:0a:9f:75:71:a2:c5:e0:22:a8:
0c:ed:f9:43:f9:54:9b:37:63:7a:f2:12:ae:25:bb:b5:a0:20:
c9:2b:a1:d1:05:60:9b:74:68:e2:f3:49:6b:58:0d:48:1f:ce:
6a:98:7e:d6:b2:47:ae:df:db:7d:74:b0:91:2c:2a:ed:db:58:
57:a0:b4:a0:99:6d:f3:5d:20:c5:4c:94:78:b1:1c:38:4e:dc:
f8:31:01:57:0b:b7:07:75:bb:67:21:f1:b7:5a:04:04:23:d0:
fe:56:34:30:32:88:72:15:34:c7:b3:be:78:c9:23:e9:bc:27:
8f:b0:19:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgKdAV1zP8iW0D1jAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEyOTEzNTg0NFoXDTI1MDIyNzEzNTg0NFowLzEtMCsGA1UEAxMk
ODNjZTU1MjctNDRhNi00NzBlLTk2MjktMjUzZWNkYzgxOTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgevBDbm7KP8Jyj4PMnNcsKwZk+ZSxgf5la9d
WSJhtj1aF0TcRFmCM6FCHGHfGyhwVTNPa8Zc5ifDKxiMFwB+9wId7UPnB1buZDIc
+ZI7vwPucGYQylaFUuX916WuB40mbEHc+xYRd1dv5oaK7o/0zoA4cEA/Xkc2i2h1
7F10LnlLecDwOYurI4sqKB5rknniOOJ3fCg/GUJcDcqs10LjFdd9bhEDI9YDP+wZ
gNYEi2qC3hN2YaYBw7JAtNkt7ET4+XSrAG/Wd4haLcwiIaEOia+RHK1pmu02V2Hk
avRwzeh40u77jql5jS0Yloilr2u623wJLykKAeTN7eQbQQ+txwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJBPaa7mXgQwPuP+8x14969V2BYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDhmNmYyOTUtNDFmMC0z
NzExLWFlOGEtZGE0MmVhNmUzM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkPIXnJ1UQ2RqISxebH552OOqGKOKAvZ7I/9uDVNb9UXFLcI2s8KZLk
J9n5Aa12BvZuWOAAo1bmyW5ReN2A7T1Ly9JkfoC2z89tUqxPABiJcHBc7Ro86Es8
beOqI21RnhbW7JSyyQkcPESHYY+xP5dOECc5JPxOeKb/rSIXUfHX7+OixqbcUAqf
dXGixeAiqAzt+UP5VJs3Y3ryEq4lu7WgIMkrodEFYJt0aOLzSWtYDUgfzmqYftay
R67f2310sJEsKu3bWFegtKCZbfNdIMVMlHixHDhO3PgxAVcLtwd1u2ch8bdaBAQj
0P5WNDAyiHIVNMezvnjJI+m8J4+wGdw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:24 2025 by rpki-client