Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba20ee47-d261-3861-a484-928846f07efb.roa
File: ba20ee47-d261-3861-a484-928846f07efb.roa (raw, json)
Hash identifier: bgCYmG0sBV02befJh7TNa5M8NKMsfg+Eir56o8iGIQU=
Subject key identifier: 80:5E:0A:46:40:7B:73:2F:C2:C5:AF:06:02:E5:60:A8:F8:8A:91:F5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73F6313F1EFB9B06CFDCC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba20ee47-d261-3861-a484-928846f07efb.roa
Signing time: Fri 29 Nov 2024 13:58:37 +0000
ROA not before: Fri 29 Nov 2024 13:58:37 +0000
ROA not after: Thu 27 Feb 2025 13:58:37 +0000
asID: 397210
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:f6:31:3f:1e:fb:9b:06:cf:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:37 2024 GMT
Not After : Feb 27 13:58:37 2025 GMT
Subject: CN=0d1ebcac-1821-4765-ab40-4d7e207c27a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:20:e5:7c:cd:d1:0c:25:03:ec:14:cb:52:14:
81:9d:13:4c:f1:41:14:15:d2:b9:5d:9d:92:75:96:
d1:2d:16:77:0e:74:6c:f2:c6:27:64:89:dd:d0:e0:
fb:c4:84:d8:95:d0:94:f7:a6:0f:2a:46:18:e2:94:
1f:c7:64:04:c5:2e:51:dc:a0:e3:5d:d4:48:bc:20:
69:33:d1:56:0a:3e:68:d9:eb:bf:bd:9d:2c:1d:93:
ec:00:4a:3b:3c:a2:b1:93:02:fe:d3:8e:56:a7:9c:
42:cd:2b:83:57:dd:2b:c9:c6:61:f5:56:29:55:2a:
02:b6:2f:97:9c:7a:7e:d4:33:f5:83:be:d9:10:f9:
6e:df:e7:ed:d9:35:4e:20:5e:98:29:ca:c8:fe:53:
21:e0:89:97:68:1c:93:66:38:01:ab:e6:bf:62:b7:
f9:10:ef:75:aa:a6:8f:1a:84:35:70:6e:ba:2f:c1:
58:1a:49:2c:31:bd:4e:54:96:c3:4e:86:22:5e:cf:
5c:22:73:f4:a6:3c:e8:a9:f0:01:8f:78:b5:cc:c8:
41:18:80:05:3e:07:34:d8:e9:0f:46:04:3a:c9:5a:
97:26:d8:27:9f:32:d9:80:69:fb:f3:04:b0:d6:84:
7f:79:07:83:36:d8:4f:8f:ef:f6:f2:0c:a0:63:a1:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5E:0A:46:40:7B:73:2F:C2:C5:AF:06:02:E5:60:A8:F8:8A:91:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba20ee47-d261-3861-a484-928846f07efb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:3a:4c:6d:f2:b1:28:16:11:1f:bd:4d:64:12:ea:41:76:d5:
2e:0c:30:98:ff:09:ed:fc:83:90:c6:ff:bf:4e:1d:61:07:21:
98:53:f0:5b:a8:7e:b6:bc:79:9f:61:f2:0d:f8:69:93:29:91:
48:98:a1:08:c7:8a:09:6a:4d:b0:98:7e:b7:83:bc:d1:dc:da:
63:44:11:8e:6e:94:d1:e7:ed:ce:6e:bf:1f:54:9d:ec:b8:0a:
0c:85:40:fc:74:ab:95:5c:90:76:21:7f:f2:63:4b:ee:4b:66:
22:9f:d0:e1:86:2d:7d:08:aa:90:11:b6:43:31:be:fc:ab:ec:
cd:5c:c3:e1:77:5d:2a:7d:a7:03:e2:16:87:48:f2:3f:42:49:
83:01:47:a4:48:9c:84:b5:41:ec:0b:7b:f3:73:08:4c:c2:66:
a4:2e:98:e3:97:eb:cd:fd:aa:93:e9:b1:58:3b:3e:9f:33:33:
2a:84:b3:c3:d9:81:33:4f:9d:88:51:f0:f7:97:22:bc:0b:5f:
4c:16:a3:9d:5a:ee:56:d4:ab:79:54:d9:ff:69:ab:1e:76:37:
74:bb:32:40:23:d6:82:31:4b:eb:a2:25:55:d6:f7:69:2c:61:
52:22:9d:d1:51:c8:34:12:fa:bf:2a:77:48:6e:cb:8d:bb:a0:
bd:29:e1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:10 2025 by rpki-client