Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae71a78d-3ea3-3df1-ab92-638689b17621.roa
File: ae71a78d-3ea3-3df1-ab92-638689b17621.roa (raw, json)
Hash identifier: xjej4Qx4ZOSh6c7nXnzMVfPD+/c1KvqnfX2p3Bdsmds=
Subject key identifier: 2D:E3:4A:37:1C:52:03:30:14:C1:C8:AF:5B:83:32:A0:A4:61:4A:9E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584879FAFCB0166570F429359B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae71a78d-3ea3-3df1-ab92-638689b17621.roa
Signing time: Wed 08 Jan 2025 12:45:24 +0000
ROA not before: Wed 08 Jan 2025 12:45:24 +0000
ROA not after: Tue 08 Apr 2025 11:45:24 +0000
asID: 36617
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:79:fa:fc:b0:16:65:70:f4:29:35:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 8 12:45:24 2025 GMT
Not After : Apr 8 11:45:24 2025 GMT
Subject: CN=1cac78a8-8473-4a9e-9548-09b7461e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:e0:4f:3a:da:7a:e9:44:6d:39:a6:69:ff:
5d:27:2d:06:66:b5:3e:63:19:12:32:07:bd:eb:eb:
1a:8f:92:80:ce:f0:fb:0e:58:d8:a3:f4:f1:a7:93:
05:28:8a:c4:12:7d:80:14:b0:46:c1:8e:46:e6:d4:
9e:4f:56:c5:98:aa:94:3a:69:14:1a:37:3a:cc:29:
ca:62:d9:b3:5a:13:6e:3a:3f:8e:7a:91:cc:7f:6c:
72:e4:16:41:8f:15:99:dd:1e:a2:6a:18:c1:f7:ef:
19:99:8b:57:b5:2b:e7:ce:21:9b:26:ed:59:9c:a2:
08:2b:06:9b:52:ef:48:1d:16:af:70:c7:31:51:2a:
16:cf:27:37:e5:47:77:7b:ea:f1:af:eb:50:0c:cb:
58:99:a2:cf:8a:27:d5:87:ce:74:34:4f:92:38:91:
3c:b7:90:95:12:2e:1c:54:05:b3:1c:04:80:cb:be:
a8:cb:75:73:13:dd:f5:91:4a:0a:b2:27:e5:dc:a2:
f4:a3:5f:f2:d7:e8:37:7f:24:ec:80:d8:ec:25:5d:
98:69:a0:42:4e:5a:bb:e7:9a:61:98:2b:ad:c2:c2:
b0:da:11:c2:5c:34:2e:36:15:89:bc:8d:d8:fd:30:
ff:a8:aa:d1:f8:c3:0e:a2:8a:b8:ed:25:5f:cb:72:
79:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E3:4A:37:1C:52:03:30:14:C1:C8:AF:5B:83:32:A0:A4:61:4A:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae71a78d-3ea3-3df1-ab92-638689b17621.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:a5:cf:c4:c9:f8:ac:99:40:e2:cb:86:4a:9b:73:31:e0:5a:
6f:8e:c2:b9:3c:12:bc:bd:c5:ac:30:dc:f5:fe:95:4b:4b:f8:
6f:eb:b9:c7:8b:79:9b:93:ea:b3:14:24:86:eb:dc:31:4b:ec:
9a:40:21:5f:ae:84:6a:03:28:45:b5:5d:c2:75:a7:38:19:0c:
09:bb:13:fb:b8:3a:f3:e2:24:9b:03:5f:74:20:a8:ce:3f:87:
a9:11:75:37:db:40:82:89:d1:db:6f:d4:07:eb:58:b1:bf:c6:
8a:a5:50:42:ca:89:f6:63:16:85:55:fe:b4:f4:08:37:88:4d:
25:49:20:01:7c:7a:f6:e8:e2:a0:9e:e2:32:51:4d:33:3b:55:
ff:c9:b1:f7:49:01:e1:e5:5e:9f:dc:53:a1:19:c0:1b:e2:f1:
1a:4a:ce:26:08:9b:b9:3e:ed:d7:59:15:5d:5c:da:4b:8b:77:
0e:b8:71:ca:72:13:fd:05:27:1d:b0:29:48:c9:8d:b3:00:d4:
20:5e:09:b1:31:98:3d:44:4e:09:0d:14:2f:d0:e5:75:6a:98:
3a:7b:47:c2:41:6d:cb:ef:4d:ef:b5:5c:23:8e:b9:ab:6c:71:
31:d2:a8:8e:72:e7:bc:22:3c:23:82:65:a3:82:2c:23:53:ef:
79:0a:55:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:04 2025 by rpki-client