Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ae13bd9-2771-3fdf-ae61-00e04d6db2fe.roa
File: 9ae13bd9-2771-3fdf-ae61-00e04d6db2fe.roa (raw, json)
Hash identifier: r58ZBCdbQafzkcKeTUNDndomwK3ZjbV9TQE3Kuf0W+s=
Subject key identifier: 39:C4:C6:62:1A:88:FC:D0:24:8C:4B:E6:B1:3D:2F:B9:70:B5:E6:02
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73DF650255C02BF7807B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ae13bd9-2771-3fdf-ae61-00e04d6db2fe.roa
Signing time: Fri 29 Nov 2024 13:58:26 +0000
ROA not before: Fri 29 Nov 2024 13:58:26 +0000
ROA not after: Thu 27 Feb 2025 13:58:26 +0000
asID: 396547
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:df:65:02:55:c0:2b:f7:80:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:26 2024 GMT
Not After : Feb 27 13:58:26 2025 GMT
Subject: CN=87b76729-829b-4e11-a625-bc6f8e3e9e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:4a:1d:a7:2f:70:36:e9:94:f7:6c:63:6a:
d8:73:cb:d8:3f:7c:90:ef:c2:4d:2d:92:3e:ba:cc:
2b:eb:cd:f7:cd:0b:ca:44:a3:8a:f7:64:36:93:0c:
21:df:59:9c:8a:c9:fc:d0:6d:03:1d:30:39:d9:d2:
f2:44:5e:76:4b:74:f3:00:6e:f8:db:b0:5e:78:e1:
41:dc:70:3a:20:8e:a9:3e:54:80:79:44:b3:69:66:
32:66:01:bb:08:9d:82:aa:89:f0:1e:0a:84:52:1a:
e4:d8:19:30:34:a5:46:dd:07:00:56:38:98:79:3a:
6d:12:3d:ae:96:12:6e:44:b9:56:2f:61:04:f5:6c:
ae:e0:9c:48:b6:a2:b5:f9:b0:12:f0:62:6a:24:0a:
ed:54:2c:6c:66:00:88:a4:2e:8e:a7:3f:5e:b5:99:
76:5c:91:27:cd:8d:cc:e1:ee:a1:b2:7d:87:0d:75:
f9:98:ee:45:34:bc:07:20:c1:52:0b:c3:dd:b0:00:
21:1a:31:d9:13:ff:4a:bc:92:fd:ae:ec:e7:0c:7d:
84:bf:f9:73:a0:89:24:b2:a5:5c:a3:c9:93:db:c6:
ed:0a:ad:ae:4a:82:8d:2e:99:5e:28:ac:65:3f:e1:
ab:15:92:76:4e:fa:2d:61:17:c3:dd:52:e4:fe:7a:
eb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C4:C6:62:1A:88:FC:D0:24:8C:4B:E6:B1:3D:2F:B9:70:B5:E6:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ae13bd9-2771-3fdf-ae61-00e04d6db2fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:ea:21:10:6f:8f:15:47:f3:c1:ce:81:ed:01:c8:88:23:5b:
7d:4a:57:46:ef:49:dc:7a:40:14:3b:f2:41:24:31:9e:a4:58:
f6:1c:30:05:08:3b:e9:32:a9:e4:c4:5c:4d:e6:62:da:9a:14:
e8:7d:4f:4b:78:ee:36:50:2c:65:54:73:e2:d6:ea:74:73:6a:
bd:29:8d:b0:4f:82:16:fa:af:56:4f:c4:1e:f5:7f:a7:06:4d:
4c:e0:97:db:5f:7c:71:c5:ab:d5:60:4a:71:21:d7:cd:48:06:
13:0e:57:c9:b7:36:30:f3:dc:a2:cf:c9:dc:d8:ee:f3:f6:c6:
9e:46:d2:e4:91:09:36:aa:e8:da:c7:ff:2b:e8:c4:eb:5d:3c:
a7:49:b5:88:ca:55:85:9d:43:43:28:08:4e:47:87:c8:3f:90:
1c:7a:5a:de:c3:f7:18:d3:77:2d:2f:cb:d5:a6:e0:37:e8:67:
0c:5e:39:be:1f:eb:4d:08:71:4b:20:5d:8b:3f:02:fb:ea:a7:
d9:94:ac:da:97:07:dc:1a:b0:c4:39:cb:c9:ab:9c:fc:4f:2d:
37:41:12:ec:c5:bf:be:ad:1b:81:a2:98:74:86:30:3c:72:f3:
27:21:91:00:9d:d2:43:29:14:75:84:8b:f9:6b:03:21:5f:d9:
db:39:6b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:10 2025 by rpki-client