Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa7381d4-b6c0-3d2d-b2ae-c021a414dc93.roa
File: aa7381d4-b6c0-3d2d-b2ae-c021a414dc93.roa (raw, json)
Hash identifier: 46zmGj8FwlJwaSOVRrP67aWU3vYUG7SNfwiseIDd8/s=
Subject key identifier: F4:32:46:C9:9C:C0:2B:D8:25:BF:B3:0E:A6:EC:75:B3:BA:A2:D7:61
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A7404DD7BA7B0F182850900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa7381d4-b6c0-3d2d-b2ae-c021a414dc93.roa
Signing time: Fri 29 Nov 2024 13:58:44 +0000
ROA not before: Fri 29 Nov 2024 13:58:44 +0000
ROA not after: Thu 27 Feb 2025 13:58:44 +0000
asID: 32651
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:74:04:dd:7b:a7:b0:f1:82:85:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:44 2024 GMT
Not After : Feb 27 13:58:44 2025 GMT
Subject: CN=c992fa7a-e214-40b7-be88-11d32154fa0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:71:9a:26:ef:3a:b8:55:93:3f:fb:86:b2:
d8:18:7d:fe:db:37:2d:07:a0:68:95:7c:d2:2f:29:
b0:e6:f5:af:f3:86:c9:b6:2f:78:20:24:00:75:63:
2b:4a:1d:7e:89:9c:15:51:04:90:e3:72:0f:18:4d:
d6:99:48:6b:65:42:68:d2:07:54:d4:9a:0a:e0:b2:
6a:ee:f3:86:dd:94:31:c4:9b:c1:47:0a:26:f0:35:
be:59:79:8e:9a:70:5d:c1:9b:a6:e1:77:6c:10:73:
4d:16:ec:25:1f:0e:3f:6f:93:6f:48:0a:f7:56:37:
39:3d:0f:9a:9a:29:ad:57:81:f7:44:ed:cd:61:ab:
e1:87:75:1d:ab:1f:c1:22:df:e6:84:a4:25:9a:dd:
41:8d:7a:32:4e:9e:4f:df:79:ca:8c:9e:40:b9:ab:
34:a3:54:d0:1b:30:32:10:bf:b7:e8:24:7c:ea:ea:
e6:18:f9:d7:af:a4:47:24:66:13:95:bb:8f:98:8c:
b2:cb:82:e7:92:07:91:ab:49:58:20:d9:a2:2b:48:
bb:36:04:4d:b1:26:1b:ef:01:4d:5a:58:65:ec:86:
d5:dc:e0:e3:e2:0a:d0:15:d5:62:91:6a:1b:6d:19:
2b:4c:7b:a4:8a:33:c5:41:01:65:38:de:25:c7:4f:
29:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:32:46:C9:9C:C0:2B:D8:25:BF:B3:0E:A6:EC:75:B3:BA:A2:D7:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa7381d4-b6c0-3d2d-b2ae-c021a414dc93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:4f:20:69:4a:9f:58:b6:45:95:77:42:b6:86:e1:1b:7a:50:
d3:f0:dc:b7:6c:ec:d2:17:e9:4a:03:9d:f8:2a:0f:99:06:cb:
9a:94:48:9d:d7:0f:a2:49:01:9d:13:ff:1a:24:d2:19:94:e8:
a9:fa:32:c6:9e:d6:64:31:40:7e:e6:60:ee:fa:cf:20:9f:ae:
4d:6a:31:8f:52:92:1a:5a:70:72:52:26:1c:63:92:2f:95:0a:
f3:a0:d0:05:3c:7e:a2:b9:7d:d6:b4:16:24:96:98:a2:9c:5c:
f1:2c:48:5b:11:60:04:eb:eb:51:11:83:77:0b:0a:b2:02:33:
08:3b:4d:63:09:ce:21:85:04:ec:46:6f:7f:b8:cc:64:f0:6d:
10:cc:a5:9e:e3:bb:e3:ca:fa:bb:b8:3e:d1:16:4f:66:4d:25:
15:eb:73:57:9c:94:b4:de:d6:74:58:90:2b:c3:8a:cf:36:a7:
60:5a:ae:7e:95:ef:8c:fc:2b:78:8f:e7:6b:06:75:19:11:2d:
f4:fa:a0:b9:45:34:45:82:88:3d:28:77:7e:de:6a:a3:9e:f4:
2f:b5:81:9d:3f:b3:bd:0c:17:97:2f:98:ea:d3:ef:2e:dd:24:
38:7d:96:de:4a:b3:fb:14:02:b9:eb:81:5b:63:65:6a:19:2c:
d7:5c:c3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:07 2025 by rpki-client