Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b846a96-b878-34b4-b051-3bca83807d21.roa
File: 5b846a96-b878-34b4-b051-3bca83807d21.roa (raw, json)
Hash identifier: cPS1kkRS1YMmgEGwqhXE7Bfj87iAyiNRPXIVlw4FpE0=
Subject key identifier: 54:01:0F:D4:20:6C:AE:C7:60:7C:21:90:4E:E5:68:11:F3:05:DC:CF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73FFE496A86B2A247DEBD8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b846a96-b878-34b4-b051-3bca83807d21.roa
Signing time: Fri 29 Nov 2024 13:58:42 +0000
ROA not before: Fri 29 Nov 2024 13:58:42 +0000
ROA not after: Thu 27 Feb 2025 13:58:42 +0000
asID: 396608
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:ff:e4:96:a8:6b:2a:24:7d:eb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:42 2024 GMT
Not After : Feb 27 13:58:42 2025 GMT
Subject: CN=6d360096-0808-4cf7-893b-43b0b71c954e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f2:d1:b7:ce:f4:4f:fa:9e:31:cd:67:20:72:
5d:f0:ea:8f:34:07:63:f9:7d:af:33:86:2f:ee:e7:
cd:98:3a:e2:52:7a:b9:0a:a1:00:69:84:3a:60:ad:
7e:61:b2:86:49:81:92:bb:81:fc:c7:26:3c:e3:55:
66:15:24:e7:ef:df:a2:94:5d:90:c1:18:c3:bd:88:
53:28:76:1b:27:48:dc:3b:14:45:18:73:2a:23:d0:
86:01:cc:c7:a1:0b:69:d8:dd:9e:2e:1c:83:8b:98:
f8:cf:7f:16:0b:f8:fa:ff:bb:b3:80:59:4e:8e:c4:
2f:3b:41:02:4c:ca:4e:b1:95:d7:00:ac:62:5b:db:
92:06:92:b6:cd:05:c8:f0:6d:71:08:e4:85:5c:9f:
bb:37:8b:3f:4e:d4:73:a2:21:0b:6f:9b:7d:c3:ea:
ac:a1:24:a0:5b:5a:32:37:2d:d5:dc:12:57:1e:14:
d0:f7:a9:23:bc:22:eb:48:ea:a6:7b:ff:61:5c:d4:
0a:f3:a0:60:94:9b:cf:03:ce:98:5c:01:48:75:6f:
42:c5:69:a3:15:6d:29:23:87:07:ef:de:73:c8:64:
1a:bf:1d:37:77:84:4e:82:78:eb:e0:fc:a2:82:ac:
49:d8:9a:be:8d:39:88:2a:5e:1c:35:af:79:e2:96:
33:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:01:0F:D4:20:6C:AE:C7:60:7C:21:90:4E:E5:68:11:F3:05:DC:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b846a96-b878-34b4-b051-3bca83807d21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:cd:0d:10:9d:b3:6b:5a:62:0f:01:fb:b3:61:7a:8a:54:2c:
09:d1:e0:8a:68:a6:22:44:b9:6c:69:66:ab:62:b7:a0:d0:a2:
8c:a8:94:13:6b:cf:36:39:8d:87:26:29:5c:a3:34:91:53:75:
ab:ac:2a:52:61:f7:46:bf:4c:a7:21:ae:78:59:56:7e:be:16:
0c:f1:62:e0:f7:78:10:ed:74:a0:6f:5a:09:d4:a0:bb:47:5d:
7e:7d:6d:56:2c:54:e8:c8:77:4d:5f:9c:c3:cc:c4:34:fe:1e:
5a:44:e9:ec:91:06:22:7d:ab:53:bb:11:d6:fc:50:ad:63:4d:
d8:42:02:f6:54:12:dc:6f:c7:a7:b4:9a:6e:72:f7:49:88:32:
f8:ed:19:e3:26:a4:d5:70:92:b6:3c:14:6e:94:aa:2b:5f:f4:
7a:c1:79:94:25:da:3e:76:b1:3a:85:c3:3d:7c:48:82:c3:fd:
fc:96:5d:a3:21:5d:ed:ed:57:4d:09:bc:bf:db:f8:d2:00:70:
1e:5a:0a:ff:53:70:18:66:ee:bc:b5:13:85:a9:1d:5f:95:26:
a0:bc:4c:5e:31:d5:11:ca:4e:cd:bf:6d:f9:56:04:e4:7d:f8:
c3:cd:03:42:69:bc:7a:12:bd:52:34:c9:b0:1d:be:0c:06:a7:
cc:49:96:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:33 2025 by rpki-client