Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3db8d15a-1518-33be-80cf-38eca7da3704.roa
File: 3db8d15a-1518-33be-80cf-38eca7da3704.roa (raw, json)
Hash identifier: 3p+6ZOqJKLN4/6oTNh0fc5l9DUa9TSWH8TXyOcelYpE=
Subject key identifier: FA:DD:05:8F:45:37:7E:13:1D:F4:3B:3F:64:88:18:B9:5E:F0:67:9A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73E4926CD66C39A7DBECC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3db8d15a-1518-33be-80cf-38eca7da3704.roa
Signing time: Fri 29 Nov 2024 13:58:29 +0000
ROA not before: Fri 29 Nov 2024 13:58:29 +0000
ROA not after: Thu 27 Feb 2025 13:58:29 +0000
asID: 396558
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:e4:92:6c:d6:6c:39:a7:db:ec:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:29 2024 GMT
Not After : Feb 27 13:58:29 2025 GMT
Subject: CN=7e4818ab-da96-4193-816d-fe3bc7555ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:bc:33:be:9c:f9:72:48:4e:d0:9b:5e:bc:
44:2c:c7:ed:a5:07:c6:8a:a2:32:10:24:9c:2f:7b:
4b:05:f0:48:9d:2a:58:74:26:29:f4:8d:c3:a7:a9:
c1:09:b3:65:fb:b7:87:8a:da:a7:ca:a0:61:f0:8f:
c6:24:a9:7a:1d:42:36:94:e0:1d:04:7c:a2:5f:f2:
ea:3f:a9:ea:ab:30:1b:cd:00:f8:29:cb:3b:b0:eb:
cb:88:f1:03:7d:b1:54:6d:e0:5a:b9:b6:a8:aa:56:
90:d6:dd:11:83:3a:51:2f:8a:8d:55:04:50:1e:eb:
05:57:16:c6:d9:f8:12:87:01:b2:40:ab:3f:41:e6:
23:7b:47:f5:b2:37:98:e8:6d:b2:97:bd:45:51:30:
d4:07:89:76:a5:a9:c7:1e:42:ca:52:4b:c6:b9:aa:
75:fe:75:19:2a:68:5f:3f:74:20:cc:27:08:b4:76:
f5:e9:c8:3e:1e:ea:b2:87:17:8a:df:20:14:20:ff:
1e:d9:a4:6a:b8:af:cb:69:aa:b5:81:bf:ae:c5:2a:
2a:a8:30:08:bd:e4:18:4f:87:18:de:e3:d7:08:95:
01:02:7f:4a:65:c4:79:90:dc:85:28:77:5c:83:b0:
2f:ab:08:c3:52:8c:7b:28:77:5d:27:e8:2d:8a:ce:
62:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DD:05:8F:45:37:7E:13:1D:F4:3B:3F:64:88:18:B9:5E:F0:67:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3db8d15a-1518-33be-80cf-38eca7da3704.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:c0:05:4a:13:ed:4c:87:2c:d0:99:27:9d:5c:bd:c9:1e:35:
63:3e:c6:49:f9:1b:7c:fc:d4:fd:b8:1f:44:29:bd:02:af:46:
76:83:b7:d9:ac:ca:60:35:d8:1b:57:7e:6f:6c:25:82:ba:5b:
a8:d6:a0:b8:c7:c4:d3:14:c4:fd:6b:79:65:c4:02:3c:27:15:
75:bc:36:19:df:88:36:4b:dc:b6:3f:2e:22:2b:1e:f8:dd:39:
99:29:7b:c4:9c:ed:5c:b0:78:bc:33:ce:9c:aa:4b:05:f9:04:
47:af:05:71:da:ea:41:9d:58:6f:f9:1c:7c:b4:4d:00:7f:7b:
22:87:50:3b:91:8d:2a:ae:5b:e9:fe:59:eb:48:fa:71:06:9b:
c7:2d:2b:4b:a7:33:41:9f:ce:ad:c5:1b:aa:3e:ef:58:0f:c5:
cb:46:c7:c4:92:0d:8e:41:46:bc:87:9f:63:e9:35:dc:52:a4:
d4:ea:52:23:65:7a:22:b0:58:da:55:09:de:dc:42:94:d7:ab:
58:7d:d4:44:86:67:e1:f8:9f:f4:c4:e1:fa:f2:38:7f:31:a1:
be:4f:fb:25:a5:6a:0b:90:28:49:e5:91:3d:bb:29:30:97:d3:
1b:56:bf:07:ca:05:b5:f6:9b:46:9e:0e:f1:b8:ad:b6:a6:30:
2d:a0:e5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:38 2025 by rpki-client