Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a50843d5-8e44-326f-9630-bf8c2ef9e3ad.roa
File: a50843d5-8e44-326f-9630-bf8c2ef9e3ad.roa (raw, json)
Hash identifier: Iy41Gtj/P8F3AZeL5jcvS0HOZIXSUqPAwLbqchekpmM=
Subject key identifier: 25:3B:CE:15:02:CB:C4:A0:8E:7C:A1:47:C5:1C:2B:66:5E:C4:7D:B5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73EF24934E89D726EF4E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a50843d5-8e44-326f-9630-bf8c2ef9e3ad.roa
Signing time: Fri 29 Nov 2024 13:58:34 +0000
ROA not before: Fri 29 Nov 2024 13:58:34 +0000
ROA not after: Thu 27 Feb 2025 13:58:34 +0000
asID: 396554
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:ef:24:93:4e:89:d7:26:ef:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:34 2024 GMT
Not After : Feb 27 13:58:34 2025 GMT
Subject: CN=edb7df69-fce8-4718-8ae3-b33690201f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ed:f6:f9:1e:fc:e4:e4:10:ca:18:8d:ed:29:
a0:f8:ce:4f:ce:44:ef:50:c4:18:8f:62:42:56:81:
59:9d:5c:a2:2e:9f:61:a7:06:82:85:ff:72:2e:51:
00:f9:2d:fd:07:63:78:a5:46:3f:d8:e7:b4:72:de:
9c:b2:71:95:23:9e:e5:2c:e0:67:78:a9:d3:50:db:
7a:1d:21:b7:af:5a:6f:15:d3:1a:90:f8:e0:10:d8:
83:9e:99:17:70:6e:5d:38:83:e8:ea:5c:16:42:0b:
fe:18:23:c0:c8:9d:c5:be:d6:12:27:df:bf:00:50:
db:45:d6:c6:76:f1:29:bf:fa:d6:5f:c4:4f:4e:cc:
33:26:bc:d0:27:55:16:40:44:9f:8b:d6:c2:c9:04:
39:1f:9b:81:29:ac:f2:e5:80:d8:4b:e4:44:3d:d5:
37:56:69:55:f2:97:bb:3f:cf:2b:56:04:ff:0a:21:
00:0e:dd:00:c5:54:6a:c3:b8:02:93:97:c5:bd:4b:
cc:e7:91:d1:05:99:7b:4a:ae:ed:1e:fb:34:35:eb:
4c:69:42:b5:29:2b:47:ce:a5:ce:ae:d2:ed:67:91:
9b:7d:c2:0e:49:37:4f:ed:2e:31:e8:03:49:8b:67:
85:9f:8d:3b:d7:71:42:fc:6c:83:04:84:9b:99:09:
a0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3B:CE:15:02:CB:C4:A0:8E:7C:A1:47:C5:1C:2B:66:5E:C4:7D:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a50843d5-8e44-326f-9630-bf8c2ef9e3ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:0b:12:40:65:dc:83:dc:7b:bb:f4:ad:7c:ca:59:16:8e:1e:
f2:c4:d5:3e:32:d2:e1:14:b1:ea:de:c7:29:a7:d4:85:2d:e7:
97:b7:80:be:d3:77:d7:90:c4:eb:84:5b:f8:9a:ff:c3:04:91:
cd:f5:ac:cc:d1:a6:6e:06:2b:cc:08:9e:d4:32:94:bc:b4:c1:
1c:d7:30:74:52:d3:47:df:f0:7d:8e:21:6a:e1:40:b3:06:97:
86:02:a5:2a:62:1b:dc:02:2c:e2:c1:2d:1c:63:e1:59:69:0b:
91:97:1f:61:4f:2f:e0:35:43:95:8b:f3:cd:2a:b4:71:ae:84:
c1:bc:bc:0e:33:92:28:0c:a9:77:02:f7:a3:63:98:60:51:fd:
8b:d2:3a:23:93:9a:48:e6:1b:89:54:9c:1b:85:4e:3b:82:55:
22:26:89:04:5e:4d:a8:96:0d:e5:b4:60:07:8d:5a:4f:75:c3:
15:45:51:74:df:78:88:fe:55:64:3e:70:29:29:98:ef:03:44:
59:e8:f1:7c:e7:41:64:10:06:cd:90:25:c2:aa:df:aa:a9:01:
89:57:93:68:fc:aa:0a:0e:56:16:c5:f0:6f:96:e9:65:c8:c0:
cf:11:87:17:86:1d:bf:50:7d:8d:29:09:6a:8a:be:17:d3:25:
bd:61:63:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:35 2025 by rpki-client