Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/646c2152-452b-3602-8f0e-5cbfa9a68ea8.roa
File: 646c2152-452b-3602-8f0e-5cbfa9a68ea8.roa (raw, json)
Hash identifier: zVF0DMndUukip0XIBgAj7lj8PV4bmEDpoSDQVDyTsEI=
Subject key identifier: C0:FF:5B:76:C5:E0:7C:43:86:3B:22:2D:6A:16:4F:93:49:6F:7E:AE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73FD738CF0186C29D42480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/646c2152-452b-3602-8f0e-5cbfa9a68ea8.roa
Signing time: Fri 29 Nov 2024 13:58:41 +0000
ROA not before: Fri 29 Nov 2024 13:58:41 +0000
ROA not after: Thu 27 Feb 2025 13:58:41 +0000
asID: 397196
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:fd:73:8c:f0:18:6c:29:d4:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:41 2024 GMT
Not After : Feb 27 13:58:41 2025 GMT
Subject: CN=80ef6eef-3a8b-4d9f-8e2f-a8f73defb256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:60:61:6c:82:be:2f:50:94:b9:e0:8e:b0:
8a:55:36:16:7f:e0:88:e4:2f:0a:76:78:43:e7:9e:
78:d3:d9:7e:8b:f0:6e:5a:f1:2b:3e:a9:9f:7b:03:
be:94:ef:60:51:e5:3c:c5:43:79:83:4a:f4:03:63:
38:85:e0:44:cb:e2:a6:86:16:7d:0a:ce:60:ad:ed:
2c:83:fc:cc:be:83:87:49:76:b3:48:37:05:70:16:
b9:66:90:3f:9b:ee:c4:c4:f9:8a:56:a4:8a:28:56:
b3:00:b2:7c:0f:0e:4d:3a:a6:21:06:3f:c4:e6:29:
5a:39:6c:c8:e8:39:d2:c9:57:cc:5e:24:ef:87:bc:
d0:ab:66:d3:db:95:6b:50:76:02:67:5d:ef:e0:41:
99:24:3b:18:1f:35:c5:81:bb:fb:b0:87:25:fa:87:
cb:af:67:64:6b:6c:51:71:59:dc:07:8c:b0:5a:50:
a4:8c:d3:60:78:5d:24:b1:79:86:54:50:1e:93:69:
5a:32:ad:56:9c:ef:86:ef:50:10:de:d8:a8:a5:ec:
fa:76:8d:93:d0:3b:fd:a4:00:24:33:16:74:73:d4:
95:77:d1:51:1a:0b:05:2c:8d:a6:c5:f9:6d:5b:9c:
88:fc:8c:20:8c:42:2a:37:a6:f3:eb:34:1d:3e:eb:
75:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FF:5B:76:C5:E0:7C:43:86:3B:22:2D:6A:16:4F:93:49:6F:7E:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/646c2152-452b-3602-8f0e-5cbfa9a68ea8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:bc:45:61:29:22:95:bd:23:5c:dd:b6:cb:3c:af:4d:2d:82:
65:0e:d9:a9:83:83:3a:5b:30:ad:65:9b:f8:bd:0a:83:1c:31:
bb:e5:cc:23:c9:7d:c4:a6:75:6a:56:db:54:6e:d7:ef:85:67:
bc:d2:d3:24:12:b2:05:ee:fa:f2:e9:6f:c1:39:2d:b4:3c:cc:
e0:8b:a5:46:90:54:05:47:72:ec:7b:ea:0e:d7:95:4b:f5:8d:
fa:c7:b1:4e:6a:0b:e3:7e:7c:bb:98:aa:c1:6e:4a:26:9f:af:
2d:3d:1f:4f:8b:7e:19:1a:af:92:ea:dc:38:77:db:2b:30:d1:
f4:f3:49:4e:fa:de:88:12:66:36:f1:f6:f2:45:67:e7:53:4c:
28:f6:63:c9:6c:0a:4d:e4:12:e8:8c:bb:79:6e:83:be:56:48:
e8:da:68:b3:e3:61:66:12:50:b1:26:ff:79:54:f3:eb:a6:be:
97:81:f2:f7:32:ff:bb:cd:5a:06:bf:e9:61:84:29:93:d9:f4:
55:f1:5c:d6:4d:84:75:f5:aa:1b:8a:15:6e:02:40:8b:24:67:
67:93:c1:56:78:c9:22:b3:1e:f9:cb:77:62:99:de:80:55:25:
07:d3:d3:17:7b:1a:c8:39:78:1b:94:25:73:ed:b8:8c:d7:62:
5c:8c:b3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:26:56 2025 by rpki-client