Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66b3fa42-7f8b-3b0d-b1a8-8ebb47a9818b.roa
File: 66b3fa42-7f8b-3b0d-b1a8-8ebb47a9818b.roa (raw, json)
Hash identifier: ag0cxZ3geQS4hf++Mxd0tOj4OR3CQyvfLoFh0SHj+I4=
Subject key identifier: D9:96:46:6B:99:B5:8B:2F:35:0C:9C:E6:39:91:5C:CE:76:71:C3:11
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73E125DDE429E7C916D580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66b3fa42-7f8b-3b0d-b1a8-8ebb47a9818b.roa
Signing time: Fri 29 Nov 2024 13:58:27 +0000
ROA not before: Fri 29 Nov 2024 13:58:27 +0000
ROA not after: Thu 27 Feb 2025 13:58:27 +0000
asID: 396569
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:e1:25:dd:e4:29:e7:c9:16:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:27 2024 GMT
Not After : Feb 27 13:58:27 2025 GMT
Subject: CN=9f329469-2994-46e1-afa7-cb0f7baa7167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:b6:da:f6:b0:52:09:4f:4c:b8:d9:05:52:
cc:59:c5:bf:91:58:d0:77:1c:31:a3:4e:81:43:dd:
80:68:f1:2a:2b:c2:ff:38:73:5c:96:11:e2:39:70:
89:1f:d8:03:42:c0:0c:ca:c0:41:b4:bd:5e:dc:bf:
49:b8:74:7b:95:f3:3a:50:c2:ff:fc:f2:87:02:18:
6a:b3:31:c6:b6:d6:5e:2c:3a:1a:19:05:0f:af:cd:
9b:43:d8:3f:42:7a:d7:da:16:93:35:d5:45:a2:db:
23:8a:c1:b6:e9:51:cc:e5:4f:eb:d3:0b:28:46:1d:
03:3d:80:a6:62:c7:51:ed:0e:5b:30:c1:4d:c6:be:
70:7e:b4:c9:56:8e:37:8b:cb:09:94:89:4c:74:55:
cb:d5:65:7f:fb:53:97:bc:f8:df:33:05:90:81:40:
06:ca:a6:2b:bf:81:01:0f:8a:83:ba:8c:7d:c3:ca:
ff:2f:d1:6c:09:30:52:7c:6e:7b:d1:7a:67:f4:7f:
94:1c:8f:32:ea:b6:d4:ed:ae:ed:b7:2f:92:64:68:
31:e5:fa:10:ec:70:aa:de:89:9d:78:35:42:b6:e6:
84:65:77:d7:cf:25:3c:48:5a:de:ab:de:ee:b8:49:
92:09:b5:52:1c:d7:46:c8:75:60:8e:1e:30:c8:3f:
9b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:96:46:6B:99:B5:8B:2F:35:0C:9C:E6:39:91:5C:CE:76:71:C3:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66b3fa42-7f8b-3b0d-b1a8-8ebb47a9818b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:9a:86:25:ef:6e:03:77:74:d2:fa:fb:28:bf:72:bb:93:ae:
cc:df:41:24:7a:68:33:ff:6c:0e:14:51:01:82:9f:c8:40:15:
39:85:ba:14:a3:0b:89:e9:8e:59:0e:31:98:19:68:5d:bf:65:
5a:e3:aa:1c:95:3d:bd:eb:38:84:70:79:32:54:1a:15:81:44:
41:5c:f4:76:55:7e:f3:d7:09:b0:ab:5d:03:24:48:22:8d:62:
9a:0b:39:58:20:94:b0:5d:60:22:22:3a:32:f8:2d:20:a6:ad:
07:e2:4b:21:fa:a5:0c:72:00:43:6c:22:d7:9b:3b:a8:85:11:
50:b3:be:56:1d:eb:e7:b8:09:48:5e:b8:0f:43:bc:20:d8:2c:
0c:fc:ed:f9:70:83:0f:7d:7b:4d:ff:17:45:cc:ff:5a:85:99:
b1:54:b3:76:13:82:26:08:2e:0c:5d:72:b4:42:85:d5:b9:9a:
21:f9:18:e4:30:97:5a:a8:b3:aa:fe:57:a9:b4:4a:7d:4f:a9:
21:57:9d:9d:de:6f:94:4d:a7:c4:06:7e:2e:5d:73:8c:de:1b:
f8:83:03:d1:a7:99:a3:9d:d7:75:7f:3b:25:17:32:a3:35:ac:
09:e2:4e:4c:a0:c1:ee:2d:41:f5:4f:00:cb:87:7a:a5:20:33:
5b:0b:6d:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgKc+El3eQp58kW1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEyOTEzNTgyN1oXDTI1MDIyNzEzNTgyN1owLzEtMCsGA1UEAxMk
OWYzMjk0NjktMjk5NC00NmUxLWFmYTctY2IwZjdiYWE3MTY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT+22vawUglPTLjZBVLMWcW/kVjQdxwxo06B
Q92AaPEqK8L/OHNclhHiOXCJH9gDQsAMysBBtL1e3L9JuHR7lfM6UML//PKHAhhq
szHGttZeLDoaGQUPr82bQ9g/QnrX2haTNdVFotsjisG26VHM5U/r0wsoRh0DPYCm
YsdR7Q5bMMFNxr5wfrTJVo43i8sJlIlMdFXL1WV/+1OXvPjfMwWQgUAGyqYrv4EB
D4qDuox9w8r/L9FsCTBSfG570Xpn9H+UHI8y6rbU7a7tty+SZGgx5foQ7HCq3omd
eDVCtuaEZXfXzyU8SFreq97uuEmSCbVSHNdGyHVgjh4wyD+biQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNmWRmuZtYsvNQyc5jmRXM52ccMRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjZiM2ZhNDItN2Y4Yi0z
YjBkLWIxYTgtOGViYjQ3YTk4MThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACaahiXvbgN3dNL6+yi/cruTrszfQSR6aDP/bA4UUQGCn8hAFTmFuhSj
C4npjlkOMZgZaF2/ZVrjqhyVPb3rOIRweTJUGhWBREFc9HZVfvPXCbCrXQMkSCKN
YpoLOVgglLBdYCIiOjL4LSCmrQfiSyH6pQxyAENsItebO6iFEVCzvlYd6+e4CUhe
uA9DvCDYLAz87flwgw99e03/F0XM/1qFmbFUs3YTgiYILgxdcrRChdW5miH5GOQw
l1qos6r+V6m0Sn1PqSFXnZ3eb5RNp8QGfi5dc4zeG/iDA9GnmaOd13V/OyUXMqM1
rAniTkygwe4tQfVPAMuHeqUgM1sLbR4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:15 2025 by rpki-client