Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e2934aa-2da0-3e20-b36a-c33ea2fd639c.roa
File: 6e2934aa-2da0-3e20-b36a-c33ea2fd639c.roa (raw, json)
Hash identifier: MzCOs69RXjnTwLK/Yur+2mjqRAw19Rjb0z/pCl7b3cM=
Subject key identifier: 94:C1:6D:94:CD:B1:54:02:40:40:48:40:3C:CD:00:BD:A8:AC:99:B4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73E2F2145529A1246368C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e2934aa-2da0-3e20-b36a-c33ea2fd639c.roa
Signing time: Fri 29 Nov 2024 13:58:28 +0000
ROA not before: Fri 29 Nov 2024 13:58:28 +0000
ROA not after: Thu 27 Feb 2025 13:58:28 +0000
asID: 396546
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:e2:f2:14:55:29:a1:24:63:68:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:28 2024 GMT
Not After : Feb 27 13:58:28 2025 GMT
Subject: CN=aa2c21ac-1e28-4104-bd79-b420d5d04f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:aa:c2:d0:40:c2:9d:c0:36:5f:9d:22:04:
ae:25:bf:8e:88:0e:f7:76:ff:83:58:12:ec:ed:99:
17:c7:96:b8:19:57:7f:dc:b7:1f:68:4c:f8:a9:17:
5a:e2:fc:de:71:cf:a9:e4:de:6b:fe:ea:f0:a4:ee:
97:a6:ca:2d:eb:5a:9b:39:a2:26:48:70:2c:cc:02:
9e:1f:ad:d8:bd:27:1b:b1:9f:60:07:43:31:e2:2c:
c1:c4:98:58:a2:6b:36:59:dc:3b:00:2e:b7:f8:c7:
24:74:36:28:b5:ef:de:fd:99:00:b2:9d:bf:52:3f:
c7:53:11:bb:ef:61:84:2f:b6:b9:a5:8e:e3:b9:21:
88:1a:ef:5b:fb:39:fe:c0:2a:bb:db:7d:c8:67:da:
7c:d8:13:3c:31:0b:d0:4d:bc:ca:91:7b:de:83:00:
61:97:7d:0c:f5:43:5d:de:ee:ed:26:57:6e:09:ee:
97:6e:e6:79:40:91:3d:69:af:a7:f1:68:b5:21:6d:
11:88:8f:47:00:e2:60:e8:3b:56:e7:18:38:4e:b4:
e7:c8:ec:3f:4c:0d:9a:2e:95:b0:9c:e1:ac:be:6d:
f0:08:56:6c:c3:a8:aa:b6:15:35:48:80:f2:37:30:
8f:41:a1:7d:0b:7c:8a:b8:2d:75:11:bf:b0:a6:aa:
6d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C1:6D:94:CD:B1:54:02:40:40:48:40:3C:CD:00:BD:A8:AC:99:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e2934aa-2da0-3e20-b36a-c33ea2fd639c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:f1:8b:b8:ee:76:84:e6:79:54:19:59:d6:87:91:a9:6b:33:
de:d5:a9:47:be:87:5e:e1:2c:db:30:56:67:3a:77:10:df:69:
52:64:3c:d8:fa:98:77:dd:f5:97:08:cc:98:37:64:5d:92:e6:
1c:e1:be:0c:cc:ea:52:e1:35:4c:68:fd:88:64:ed:8b:42:ee:
f4:3f:38:f1:31:60:c4:5a:fa:34:74:2b:73:cc:aa:04:dc:18:
c5:10:71:bb:f8:4a:6c:c4:34:19:7a:f9:cc:bb:e7:26:f1:a2:
b7:ba:86:1f:a1:86:c5:e3:f8:be:98:fb:42:a6:75:7b:cc:85:
ab:12:93:fc:09:d9:64:0d:2b:34:21:d3:22:8a:9a:b5:1a:fd:
fc:22:da:b2:21:1f:ae:23:b6:59:8a:08:77:e8:b9:eb:b8:8e:
b5:a4:20:4f:e0:93:0f:00:57:c0:1f:62:13:3c:fc:e2:0e:7c:
ec:8a:34:0b:78:12:61:3b:a8:f8:3d:3b:c7:51:82:1f:93:55:
53:0f:19:22:d4:71:a5:8e:5e:dd:ce:25:02:f3:eb:83:6f:48:
c0:8f:4b:d5:08:1e:e4:3e:36:1d:f3:31:92:3f:41:a6:e9:62:
94:e8:11:fd:66:81:aa:f1:a9:8e:d5:aa:96:f9:a9:90:b5:32:
b9:c6:b0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:36:02 2025 by rpki-client