Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11230899-9e1e-3639-a1cb-f25267848a40.roa
File: 11230899-9e1e-3639-a1cb-f25267848a40.roa (raw, json)
Hash identifier: 1KI3tDkrTOLmMc0H+seXDLtArZBO7m/9mlmrH8VZgPM=
Subject key identifier: F8:E2:E8:24:58:31:02:42:F2:58:FF:99:38:A7:46:D0:C4:81:1F:0C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73DD73569C7C3329E95780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11230899-9e1e-3639-a1cb-f25267848a40.roa
Signing time: Fri 29 Nov 2024 13:58:25 +0000
ROA not before: Fri 29 Nov 2024 13:58:25 +0000
ROA not after: Thu 27 Feb 2025 13:58:25 +0000
asID: 396616
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:dd:73:56:9c:7c:33:29:e9:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:25 2024 GMT
Not After : Feb 27 13:58:25 2025 GMT
Subject: CN=d4d6cebb-4254-493d-8dd3-e6a99cc8d1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:42:0e:9e:e5:29:cd:d4:7b:f7:1a:0d:75:64:
18:69:d3:9e:34:a5:87:e5:8b:78:e0:ed:08:b9:c6:
22:20:8a:6b:c5:55:ec:4c:2a:ac:35:3d:b4:5d:89:
82:1f:c7:f6:ea:7b:37:45:0e:9a:2c:ad:73:28:55:
a4:f7:92:52:b0:c8:6f:82:cc:2b:03:2d:eb:be:b6:
c4:4a:89:9f:a8:ac:33:93:56:02:81:11:56:49:cc:
ca:d4:70:ff:6d:26:7f:04:90:d4:eb:f0:15:d7:82:
e2:ea:34:c1:b9:7b:8d:31:97:d4:61:ba:12:01:d5:
89:ea:b4:c8:2a:55:0f:6f:39:19:c7:a7:68:a2:df:
33:53:c6:2e:18:35:7d:64:28:29:67:24:6a:b8:62:
97:cb:74:5c:f8:8d:69:89:53:eb:05:2a:6c:52:71:
3a:fe:6a:47:05:2f:61:8e:00:24:09:2b:70:b1:4f:
04:2a:5d:a6:7d:e7:14:1f:0e:24:a0:00:3a:22:a0:
c0:0b:17:e6:7e:ec:31:63:35:3f:22:a5:1d:6a:f8:
a6:e0:76:ee:b2:a8:0c:ae:59:d6:a1:19:62:4f:c6:
5e:3d:60:31:c9:33:2d:de:18:e5:3d:2f:69:64:4e:
0d:79:dc:17:61:7c:ab:4e:9a:60:c1:e7:20:13:26:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E2:E8:24:58:31:02:42:F2:58:FF:99:38:A7:46:D0:C4:81:1F:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11230899-9e1e-3639-a1cb-f25267848a40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:2e:8d:14:56:52:5d:4e:aa:1e:e2:47:4d:3b:aa:c7:b2:54:
bc:6e:b5:f3:d4:bd:ff:18:e2:be:91:18:47:4e:60:de:c7:e1:
32:9d:f2:af:ee:6b:03:36:35:2d:4f:05:cb:45:b9:38:bf:79:
57:7d:84:50:bf:0d:0a:0a:40:54:67:a3:3f:00:99:b0:7d:42:
6a:4e:3f:93:c4:74:9c:f5:17:74:1c:bb:90:1a:92:2f:ae:2c:
32:c7:4c:1b:67:c2:5e:c3:7a:3c:57:89:40:72:b0:d8:e5:12:
a4:4b:39:9e:96:15:aa:b7:62:64:86:53:c1:58:63:45:fc:ba:
30:f9:72:13:35:7c:81:6b:16:ff:ac:56:fa:04:c7:97:f5:70:
0e:3f:bd:c6:7b:82:06:3c:7b:a8:96:f3:8e:86:4c:fe:24:9a:
30:df:94:45:98:6c:96:ca:71:fe:4b:f8:4e:33:85:c0:2c:78:
7b:2b:c9:f5:06:12:ab:c4:fe:05:6a:63:a6:73:86:72:09:8e:
0c:c1:db:55:6e:61:b7:18:48:de:e4:2e:6c:ec:38:87:56:f7:
2a:02:c9:26:11:1b:70:39:b9:4e:30:50:68:c4:0e:f5:c4:3d:
71:f1:ce:4a:d5:46:c5:05:42:40:ef:0d:08:98:81:5e:f2:3b:
5d:be:35:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:58 2025 by rpki-client