Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cd0e139-9e70-31b4-99cd-27bff559929f.roa
File: 3cd0e139-9e70-31b4-99cd-27bff559929f.roa (raw, json)
Hash identifier: /dvQvFyvdyl6ZdYG770ZX8PL4KAYcaUWNDDEFuS9Cq0=
Subject key identifier: 6C:D5:1F:D8:FA:CF:BA:15:79:EE:23:59:57:0A:D5:30:5F:71:8F:7B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73FA4783040DCFB7931280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cd0e139-9e70-31b4-99cd-27bff559929f.roa
Signing time: Fri 29 Nov 2024 13:58:39 +0000
ROA not before: Fri 29 Nov 2024 13:58:39 +0000
ROA not after: Thu 27 Feb 2025 13:58:39 +0000
asID: 396599
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:fa:47:83:04:0d:cf:b7:93:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:39 2024 GMT
Not After : Feb 27 13:58:39 2025 GMT
Subject: CN=08ec9dce-5cde-46ec-96bf-48fae60bc97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:82:2b:fd:97:ae:56:e3:1f:2a:fc:54:30:
6a:ce:86:20:ab:87:c1:45:f6:3c:e0:4b:b0:b3:ea:
a6:2c:79:59:3e:02:77:76:ec:fe:bd:ed:e5:3d:03:
55:7b:41:66:24:c7:53:78:54:89:51:f4:f3:62:f4:
4d:87:a8:60:19:ff:c4:08:14:95:42:4c:d1:ff:83:
bc:14:d3:46:3a:9d:22:81:c6:16:24:e3:18:c2:39:
d5:fc:e8:1e:7e:22:4b:75:76:f8:d5:4e:49:41:db:
8f:ea:e0:ef:9c:29:af:c4:c0:e4:3d:04:be:f2:2e:
98:d7:dc:ba:5c:90:c4:f8:7d:29:de:25:da:fc:11:
5e:46:c6:90:1e:2d:64:a9:18:50:0a:bd:33:36:77:
69:ee:b2:68:0e:1d:e0:28:3a:ba:37:61:af:83:58:
7a:5e:95:76:58:88:69:d5:ad:9b:0c:c9:ac:a6:67:
43:4b:12:34:47:8e:a6:fc:5e:d2:85:82:47:5b:4e:
87:c8:83:40:8d:23:19:bf:eb:17:71:ba:f2:09:45:
e3:64:00:92:db:85:76:6e:fd:25:9d:7d:7a:cd:37:
e9:13:08:9d:29:4b:fb:5c:c4:18:dc:a0:0a:14:99:
4f:8e:6f:d0:d1:15:5e:e1:0b:25:6d:d0:a3:f0:fc:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D5:1F:D8:FA:CF:BA:15:79:EE:23:59:57:0A:D5:30:5F:71:8F:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cd0e139-9e70-31b4-99cd-27bff559929f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:3b:c4:ef:5e:a3:c3:a6:e1:37:0c:6d:4e:04:92:59:43:53:
c3:f0:90:09:8a:a2:91:1f:bd:13:dc:8b:9f:bf:53:a2:c2:0b:
7b:33:54:e5:81:be:7f:e9:74:7e:af:74:25:9e:6b:7e:2f:61:
26:30:b2:e8:87:ce:8d:a6:86:66:74:47:f3:41:84:45:8b:67:
61:f9:92:05:36:c4:f1:d0:58:ad:12:d0:4a:62:b5:c1:7b:09:
24:52:a1:bd:ab:c2:b2:be:7a:29:d3:70:1f:54:e5:a6:14:08:
6a:27:69:af:58:de:d3:6c:05:3d:d2:81:32:b7:ad:a0:83:fd:
e8:a4:9a:b6:37:97:ad:78:28:ff:58:e6:5d:07:a6:cc:fe:bf:
bb:13:79:05:47:2b:d4:51:88:48:b2:09:99:e0:10:df:d0:56:
42:2b:e7:2a:cc:f3:5a:dc:45:7b:eb:13:99:bd:ec:08:19:da:
9f:60:6b:fe:84:e0:15:14:7a:60:f7:c9:f0:a7:a7:eb:0d:80:
2e:4b:41:e9:4a:56:fe:71:81:93:be:83:c0:c9:15:33:02:06:
2e:4f:60:55:8e:7e:9f:5c:b1:29:a0:fb:74:47:ab:10:83:17:
dc:3b:09:2c:9f:89:48:29:cf:2f:98:4a:60:f0:86:9d:7d:81:
a8:af:db:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:22 2025 by rpki-client