Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d95f288-edbb-3369-a09b-a3cee443d33b.roa
File: 8d95f288-edbb-3369-a09b-a3cee443d33b.roa (raw, json)
Hash identifier: zimt5YEJYNyzqtnRvBmc+J/1W+55k4QHv6CKrLYwmFg=
Subject key identifier: C5:01:9D:44:FF:C3:13:BB:65:41:99:56:C7:AE:4D:39:13:B4:CD:7A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A74050ECA1B7290EA481680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d95f288-edbb-3369-a09b-a3cee443d33b.roa
Signing time: Fri 29 Nov 2024 13:58:44 +0000
ROA not before: Fri 29 Nov 2024 13:58:44 +0000
ROA not after: Thu 27 Feb 2025 13:58:44 +0000
asID: 396579
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:74:05:0e:ca:1b:72:90:ea:48:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:44 2024 GMT
Not After : Feb 27 13:58:44 2025 GMT
Subject: CN=9964526d-e731-4a8c-af9c-bb0e11dde767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:83:07:ff:46:9f:9b:1f:ab:a0:f2:9e:1f:
48:ba:7b:e1:12:2f:b8:a2:5a:d3:fd:ff:db:52:5d:
56:50:dc:e5:42:69:f3:cc:bc:8b:d4:b5:19:45:bc:
46:29:4a:8b:df:90:3f:af:eb:28:f2:23:60:9d:85:
23:be:79:cf:8e:71:65:a3:40:da:59:08:c5:27:36:
07:bb:f1:46:6a:ac:4a:82:87:9b:f2:bf:6b:69:7b:
ee:12:06:bb:a1:d6:8c:16:72:de:a5:d0:72:d6:95:
aa:bc:ea:5a:86:c6:01:3a:71:34:ae:b3:59:26:ae:
2f:f4:bd:29:a6:d5:f4:6f:55:53:af:d1:bb:14:48:
20:3b:74:03:05:6f:a9:68:4d:c2:d4:b4:82:71:f6:
8b:ce:9f:db:c2:db:d0:f5:fc:5c:cd:07:e4:86:c7:
73:14:cb:7f:07:5e:74:89:d3:f4:ec:93:5b:9c:b5:
bd:ca:85:76:05:b5:ef:07:c5:a8:7c:a0:28:b2:4a:
c5:bf:61:d2:f3:30:3d:77:08:ac:b8:49:e5:ea:3a:
22:6e:3f:5e:9f:b3:51:d4:71:72:10:25:6e:de:2b:
c3:a9:f8:8b:dd:5b:e7:8f:d2:49:45:25:45:71:f4:
19:7a:72:b3:ff:b8:88:f6:f4:43:59:06:bd:81:19:
32:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:01:9D:44:FF:C3:13:BB:65:41:99:56:C7:AE:4D:39:13:B4:CD:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d95f288-edbb-3369-a09b-a3cee443d33b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:70:e0:95:a4:35:f3:f6:c1:9a:ff:21:3f:45:3a:4a:6f:1e:
b2:46:f3:17:d0:3b:02:5e:b6:28:03:84:3a:ee:75:fa:d7:3f:
6b:84:06:e4:75:c0:81:72:ea:52:d9:e4:cc:f6:84:d4:8f:b5:
ea:61:64:e9:07:71:73:2e:b1:ec:cc:61:2c:ed:e1:1c:c8:32:
58:56:83:8c:49:79:ce:1a:19:7c:4c:2b:13:57:b1:a2:2b:a7:
e6:12:0a:9f:40:f7:e1:46:76:48:04:07:9e:17:62:ef:41:7b:
01:df:62:20:97:21:1b:51:9e:d4:3f:7b:13:ff:33:a0:24:19:
41:57:f9:29:dc:29:34:2c:ed:75:f9:05:e0:0b:56:8d:ea:33:
5f:6b:d9:de:c0:75:ab:2b:4d:a9:19:0a:84:37:cf:9e:e4:4b:
88:46:ee:9c:88:d4:d1:80:73:a2:e4:87:d6:09:18:61:61:4b:
58:2c:87:b5:ac:07:fe:fc:6e:87:a5:bf:c8:7f:16:07:fe:97:
4b:87:c5:9c:0c:ea:6e:bb:41:da:a8:bd:6e:49:c8:9e:21:71:
33:de:04:9e:75:17:7f:f0:4d:45:77:47:8f:9d:32:eb:35:ad:
5c:fe:41:70:38:00:23:54:f5:5e:4c:29:42:3c:14:e7:38:47:
ca:6e:60:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:57 2025 by rpki-client