Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fb18f77-a7dd-3205-a178-d45354eeb853.roa
File: 3fb18f77-a7dd-3205-a178-d45354eeb853.roa (raw, json)
Hash identifier: YdgELQVMPbaMAYMnhpYKC+IAtJN5b0tdbY0fduUDrGk=
Subject key identifier: 74:1C:01:72:80:13:8A:FA:C7:FC:33:29:CE:EB:20:79:A7:16:69:B1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73EB27494A552872E62500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fb18f77-a7dd-3205-a178-d45354eeb853.roa
Signing time: Fri 29 Nov 2024 13:58:32 +0000
ROA not before: Fri 29 Nov 2024 13:58:32 +0000
ROA not after: Thu 27 Feb 2025 13:58:32 +0000
asID: 396591
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:eb:27:49:4a:55:28:72:e6:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:32 2024 GMT
Not After : Feb 27 13:58:32 2025 GMT
Subject: CN=b6624097-c96d-423c-b97c-42ff273e65f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:29:72:1d:48:e7:4f:89:ca:66:4d:62:e6:77:
be:b2:cf:5e:6c:ef:dc:2a:07:01:de:37:aa:3c:59:
d8:c7:39:fe:db:92:15:bd:45:b2:71:1e:4d:72:27:
db:6a:42:6c:4b:a0:a8:87:fe:7e:e8:88:ac:e9:5b:
35:60:be:de:6d:70:db:49:5a:5c:10:b6:56:95:fa:
bc:c3:5c:c0:8a:17:1b:59:08:ab:f3:50:0a:e3:cd:
5b:2b:a0:78:07:0b:de:68:6c:05:7a:2d:2c:24:eb:
4e:c9:f3:5f:80:67:79:43:ed:07:29:6e:a4:bc:3b:
7c:d4:3b:37:96:e6:40:4c:62:c0:b1:0b:7b:9c:60:
4c:90:a8:a2:29:d7:7f:a0:77:c5:ee:27:0a:a2:c6:
47:d0:55:ff:1a:4f:9b:7b:2d:4d:dd:92:89:d0:15:
d4:4b:c0:a1:74:29:34:60:60:85:bb:45:16:b1:23:
65:48:bb:6e:11:59:e9:86:ca:f2:43:68:4b:7c:39:
87:49:5c:59:bb:dd:bf:7d:e2:f6:8d:fd:72:e1:d8:
86:d7:2d:8f:ed:8a:02:e7:9d:f3:4b:c4:f7:ae:0d:
31:41:07:fb:22:ba:51:21:24:8e:93:f6:e4:39:4f:
b7:29:1b:b9:4b:bf:74:f4:30:01:14:51:be:f4:b8:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1C:01:72:80:13:8A:FA:C7:FC:33:29:CE:EB:20:79:A7:16:69:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fb18f77-a7dd-3205-a178-d45354eeb853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:62:63:3a:ac:c8:a0:1e:c6:81:3c:9c:a4:6e:e3:b2:55:b0:
24:62:eb:82:0a:a6:26:69:28:ea:35:df:53:15:eb:a5:aa:71:
65:c7:4c:60:ea:ed:4c:e1:0a:7c:4f:de:92:20:82:f9:3d:7b:
a0:f7:4d:07:8f:56:88:c8:95:e5:c1:40:f8:fb:e5:ec:d2:87:
10:77:00:f4:d1:3b:40:cd:e9:f7:cc:b1:34:ab:3d:f6:76:e7:
96:c5:94:98:b5:d3:2a:16:8d:b1:39:17:15:fe:d6:f7:98:57:
85:91:f8:21:43:0b:48:67:17:b0:bd:c1:7c:9e:c0:90:f2:f0:
54:b1:b1:ac:ed:9a:12:7b:6c:35:de:67:09:35:6f:dd:49:12:
14:a8:bf:5c:9c:e2:eb:1c:d7:d5:d3:77:0d:52:6e:b3:dc:b4:
b2:e3:c0:f5:56:e0:4a:53:05:50:01:d2:af:e3:20:f0:2e:2f:
29:ed:aa:fa:c5:b7:1e:7f:96:62:39:91:0b:14:08:bb:ab:3d:
83:46:33:3f:cf:f3:d9:52:90:cc:aa:93:f7:7e:ea:ea:0f:a1:
5f:10:83:ca:90:05:76:b1:b1:9f:57:2c:b1:3d:3f:83:77:d3:
95:e0:34:9d:d1:fe:29:39:03:24:34:11:b9:71:77:12:bb:3b:
ca:17:8e:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgKc+snSUpVKHLmJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEyOTEzNTgzMloXDTI1MDIyNzEzNTgzMlowLzEtMCsGA1UEAxMk
YjY2MjQwOTctYzk2ZC00MjNjLWI5N2MtNDJmZjI3M2U2NWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiClyHUjnT4nKZk1i5ne+ss9ebO/cKgcB3jeq
PFnYxzn+25IVvUWycR5NcifbakJsS6Coh/5+6Iis6Vs1YL7ebXDbSVpcELZWlfq8
w1zAihcbWQir81AK481bK6B4BwveaGwFei0sJOtOyfNfgGd5Q+0HKW6kvDt81Ds3
luZATGLAsQt7nGBMkKiiKdd/oHfF7icKosZH0FX/Gk+bey1N3ZKJ0BXUS8ChdCk0
YGCFu0UWsSNlSLtuEVnphsryQ2hLfDmHSVxZu92/feL2jf1y4diG1y2P7YoC553z
S8T3rg0xQQf7IrpRISSOk/bkOU+3KRu5S7909DABFFG+9LgInQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHQcAXKAE4r6x/wzKc7rIHmnFmmxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2ZiMThmNzctYTdkZC0z
MjA1LWExNzgtZDQ1MzU0ZWViODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH9iYzqsyKAexoE8nKRu47JVsCRi64IKpiZpKOo131MV66WqcWXHTGDq
7UzhCnxP3pIggvk9e6D3TQePVojIleXBQPj75ezShxB3APTRO0DN6ffMsTSrPfZ2
55bFlJi10yoWjbE5FxX+1veYV4WR+CFDC0hnF7C9wXyewJDy8FSxsaztmhJ7bDXe
Zwk1b91JEhSov1yc4usc19XTdw1SbrPctLLjwPVW4EpTBVAB0q/jIPAuLyntqvrF
tx5/lmI5kQsUCLurPYNGMz/P89lSkMyqk/d+6uoPoV8Qg8qQBXaxsZ9XLLE9P4N3
05XgNJ3R/ik5AyQ0EblxdxK7O8oXjo8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:51 2025 by rpki-client