Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3680b9c9-bf95-3631-9df6-02b899221cb1.roa
File: 3680b9c9-bf95-3631-9df6-02b899221cb1.roa (raw, json)
Hash identifier: tEOxCetS3h5bcFyi0qeWBEjJGUb6uBWfMJrO7cAKb2I=
Subject key identifier: 59:EF:30:6A:F3:E4:1D:63:F6:3F:0E:E5:EE:2A:56:40:BE:E8:E3:20
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A740528D31845A66FD95F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3680b9c9-bf95-3631-9df6-02b899221cb1.roa
Signing time: Fri 29 Nov 2024 13:58:44 +0000
ROA not before: Fri 29 Nov 2024 13:58:44 +0000
ROA not after: Thu 27 Feb 2025 13:58:44 +0000
asID: 396551
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:74:05:28:d3:18:45:a6:6f:d9:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:44 2024 GMT
Not After : Feb 27 13:58:44 2025 GMT
Subject: CN=db6e37cd-a23a-4bb6-8a43-11b4d76aec6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:29:0c:c0:9d:9c:e6:20:83:e4:6a:04:0b:83:
3c:37:10:5c:fe:6c:94:60:d7:6b:41:ab:9b:6b:79:
69:6b:c7:55:b5:cb:73:ca:d0:6a:fb:0d:a1:eb:68:
ef:e6:8e:d9:ae:83:fb:9a:0c:eb:d7:10:b3:73:96:
89:ff:1a:c0:ff:37:ff:5c:57:d4:98:5b:7e:24:a6:
5c:b6:fc:5b:0c:aa:88:be:8c:45:21:de:0c:77:38:
a9:a1:68:4d:a3:10:75:0b:25:43:20:70:11:07:5f:
b2:4b:3a:84:51:92:5f:ba:98:ef:d0:70:91:83:82:
c4:bf:2b:b9:bd:53:5a:f0:7c:ae:96:dc:57:2c:3f:
20:14:d4:50:0c:33:c9:86:84:a0:a4:20:43:c2:93:
6a:f4:0e:7d:39:79:13:75:62:39:91:c9:8a:89:27:
63:08:34:0a:82:58:d2:ca:02:c4:e2:82:65:65:fa:
54:2a:73:28:a1:10:30:fa:62:14:2c:eb:28:7d:9b:
2f:5c:bb:aa:75:4a:14:b6:65:e0:d2:6a:31:e7:30:
ee:a5:e3:b2:fa:10:62:93:66:92:18:8a:c6:18:22:
09:79:2c:81:ff:86:c9:2f:28:58:92:19:7a:05:63:
1f:21:07:d3:9b:6c:2b:93:e7:3d:42:ad:fe:ea:fc:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EF:30:6A:F3:E4:1D:63:F6:3F:0E:E5:EE:2A:56:40:BE:E8:E3:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3680b9c9-bf95-3631-9df6-02b899221cb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:2e:25:fa:7b:a5:aa:0d:e3:bc:ac:0b:bc:ff:7b:8e:4e:48:
51:2a:fa:aa:b7:77:9b:ac:c7:ca:bc:d1:f2:a5:bf:ae:e8:44:
5c:dd:15:96:c0:7a:29:e4:47:ff:1f:3b:b2:fe:8b:7e:86:cf:
1c:24:55:41:15:47:34:e0:23:bb:4f:cd:ff:1e:10:d5:e0:3b:
b4:29:0a:1f:d8:e0:65:b2:4b:82:ec:52:f6:9b:23:f2:c1:ae:
e8:ea:86:78:24:d6:a0:48:51:bb:0f:e0:db:c1:df:75:a1:87:
1b:94:84:98:12:47:d1:a0:c7:7d:0f:8c:1a:a8:a3:48:d0:6b:
96:e4:92:6e:23:1b:35:49:0a:0f:73:03:ce:c9:8e:72:42:4f:
c4:3b:db:96:82:4a:b1:55:7f:31:bb:b2:b6:5c:3b:dd:a9:f2:
4a:bb:e6:0a:21:06:67:c2:c6:1e:65:bf:80:64:b8:34:e2:1d:
3b:cf:d5:d3:8f:49:49:49:9b:c6:fb:ff:ff:d0:0f:cc:5a:a2:
91:1a:c0:eb:62:36:5f:88:ac:66:51:62:2e:6f:5e:d6:9d:67:
75:27:35:40:22:16:f3:96:bc:59:32:e9:34:c8:28:5f:f4:7e:
40:c4:8b:e1:b5:3c:9d:d6:bc:b0:df:2a:29:4d:3a:22:e3:08:
72:5a:39:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgKdAUo0xhFpm/ZXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEyOTEzNTg0NFoXDTI1MDIyNzEzNTg0NFowLzEtMCsGA1UEAxMk
ZGI2ZTM3Y2QtYTIzYS00YmI2LThhNDMtMTFiNGQ3NmFlYzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCkMwJ2c5iCD5GoEC4M8NxBc/myUYNdrQaub
a3lpa8dVtctzytBq+w2h62jv5o7ZroP7mgzr1xCzc5aJ/xrA/zf/XFfUmFt+JKZc
tvxbDKqIvoxFId4MdzipoWhNoxB1CyVDIHARB1+ySzqEUZJfupjv0HCRg4LEvyu5
vVNa8HyultxXLD8gFNRQDDPJhoSgpCBDwpNq9A59OXkTdWI5kcmKiSdjCDQKgljS
ygLE4oJlZfpUKnMooRAw+mIULOsofZsvXLuqdUoUtmXg0mox5zDupeOy+hBik2aS
GIrGGCIJeSyB/4bJLyhYkhl6BWMfIQfTm2wrk+c9Qq3+6vz+tQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFnvMGrz5B1j9j8O5e4qVkC+6OMgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzY4MGI5YzktYmY5NS0z
NjMxLTlkZjYtMDJiODk5MjIxY2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQuJfp7paoN47ysC7z/e45OSFEq+qq3d5usx8q80fKlv67oRFzdFZbA
einkR/8fO7L+i36GzxwkVUEVRzTgI7tPzf8eENXgO7QpCh/Y4GWyS4LsUvabI/LB
rujqhngk1qBIUbsP4NvB33WhhxuUhJgSR9Ggx30PjBqoo0jQa5bkkm4jGzVJCg9z
A87JjnJCT8Q725aCSrFVfzG7srZcO92p8kq75gohBmfCxh5lv4BkuDTiHTvP1dOP
SUlJm8b7///QD8xaopEawOtiNl+IrGZRYi5vXtadZ3UnNUAiFvOWvFky6TTIKF/0
fkDEi+G1PJ3WvLDfKilNOiLjCHJaOdQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:29 2025 by rpki-client