Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ef08048-01e9-3d8b-b625-d199d207c21f.roa
File: 3ef08048-01e9-3d8b-b625-d199d207c21f.roa (raw, json)
Hash identifier: 79I+yg+84ZucTHzyn3QLVq0ZUWWPKBbyuVGp7VnQhRI=
Subject key identifier: 5F:A1:2B:8F:61:C1:08:63:23:3A:93:E5:04:89:91:DC:5E:BB:AA:2F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73F2F1A94502FD1626E500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ef08048-01e9-3d8b-b625-d199d207c21f.roa
Signing time: Fri 29 Nov 2024 13:58:36 +0000
ROA not before: Fri 29 Nov 2024 13:58:36 +0000
ROA not after: Thu 27 Feb 2025 13:58:36 +0000
asID: 36617
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:f2:f1:a9:45:02:fd:16:26:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:36 2024 GMT
Not After : Feb 27 13:58:36 2025 GMT
Subject: CN=b1e932e4-1d4f-4edb-b78b-1ce1e2ab403b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:88:7c:1b:a3:f2:61:04:87:26:ee:d7:0d:37:
32:c1:cd:89:e5:d3:64:08:27:fd:d8:90:19:18:81:
6b:77:06:a3:9d:ab:db:a8:b7:e4:3c:6f:c4:4c:5e:
a0:7d:4a:84:b7:dd:60:00:83:70:48:14:c9:b1:c0:
bd:03:de:22:5f:0e:1b:6c:19:97:3c:41:15:e1:97:
db:0e:3c:39:fb:c6:43:17:65:f8:fb:e3:2f:21:2c:
9a:28:d7:b3:6d:e6:d3:a2:bb:e6:83:92:37:0c:d3:
cb:7d:7d:04:40:d9:56:43:b6:53:3c:04:b4:04:22:
87:59:bf:2e:a6:a3:b4:6b:72:77:08:0f:1e:b2:68:
aa:3a:68:b8:e5:55:94:31:51:e9:0b:2f:af:ca:07:
a0:67:80:33:b8:b2:13:61:1c:cf:d0:71:b6:66:85:
a0:d1:48:55:14:b3:9f:b2:fe:24:10:54:0e:d9:29:
b1:d8:44:78:da:ed:ce:b1:4a:fd:10:14:18:f5:59:
ae:9f:35:6d:b8:e0:36:89:d5:a5:bb:22:44:2b:8a:
3a:55:cc:26:a7:14:21:ad:7d:eb:cf:f3:38:3f:41:
57:8e:30:83:01:94:14:2a:35:ae:a5:69:e0:88:3c:
aa:d0:60:88:32:dd:17:f4:d2:8a:7b:4c:6e:49:84:
6f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A1:2B:8F:61:C1:08:63:23:3A:93:E5:04:89:91:DC:5E:BB:AA:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ef08048-01e9-3d8b-b625-d199d207c21f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:18:df:5e:f1:88:c3:cf:48:bc:1d:6a:92:9b:6d:99:93:59:
76:c8:9c:4d:f6:77:a6:8b:50:c0:40:f0:32:48:1b:cd:ab:6e:
fb:0d:2e:b6:e0:0f:b3:79:de:80:f8:27:6d:a8:70:a1:6a:46:
28:90:9f:ae:af:5f:c5:c7:eb:de:4f:d2:94:4c:2b:3f:b8:5e:
5d:6d:00:cb:96:c4:26:17:d9:5d:5d:cd:81:6d:e7:fa:19:6c:
40:e9:a7:ef:81:2a:81:b4:8d:68:f3:e9:49:07:74:05:7e:82:
dd:2c:c4:24:1c:b1:95:e2:3b:ee:76:cb:1a:32:80:08:93:42:
b2:df:95:a7:e0:ee:73:79:7a:0d:cd:43:25:74:17:6e:30:7b:
6c:b0:13:78:92:c2:6c:4a:c7:52:fc:aa:16:de:1d:84:d3:81:
69:5a:bb:d2:2c:f3:35:81:ae:67:ae:f0:ac:a3:46:b9:41:8a:
ba:60:5f:a1:45:6c:40:d7:c1:3d:f4:31:9c:3a:b6:bb:23:94:
56:e6:b5:32:94:88:b7:59:ec:36:a3:b3:97:3f:cc:34:0c:58:
40:c7:9f:a7:81:3b:c9:c6:b5:4c:90:5b:f4:4e:76:06:34:85:
ba:7c:f1:49:98:63:ed:0f:65:de:41:f7:d7:55:d3:20:4a:43:
51:1f:50:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:25 2025 by rpki-client