Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba447ff7-9c24-388a-a10f-96c79bcf19d9.roa
File: ba447ff7-9c24-388a-a10f-96c79bcf19d9.roa (raw, json)
Hash identifier: +GslAopBEvcs1FYz25hMPIMJ11iArwv4Cymiw65MY40=
Subject key identifier: 35:52:26:31:D3:6C:61:35:12:C5:77:BE:45:60:88:B3:08:21:FE:52
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73F5023BB378717C2FE000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba447ff7-9c24-388a-a10f-96c79bcf19d9.roa
Signing time: Fri 29 Nov 2024 13:58:37 +0000
ROA not before: Fri 29 Nov 2024 13:58:37 +0000
ROA not after: Thu 27 Feb 2025 13:58:37 +0000
asID: 396595
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:f5:02:3b:b3:78:71:7c:2f:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:37 2024 GMT
Not After : Feb 27 13:58:37 2025 GMT
Subject: CN=b7e9d38e-50eb-4380-9e41-ac8fae6e1353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2a:8e:04:6a:ed:70:6d:15:7a:67:79:3e:f0:
09:d4:fe:b7:9c:c0:07:9a:1d:bc:ee:d5:88:ea:29:
17:a3:3a:f2:73:4f:b8:28:d6:7b:60:32:c2:48:e2:
49:6a:42:75:78:aa:1f:66:f9:50:82:6d:9b:25:0b:
e2:df:53:a5:87:97:ab:75:3f:10:83:93:cf:c5:54:
7f:64:9c:a9:4f:d0:31:f3:cf:db:7c:03:4b:4b:61:
d3:04:42:98:ae:83:5e:5b:d1:1b:ca:cc:0a:68:02:
89:6e:28:94:a3:55:51:ff:7d:7e:99:6e:07:22:37:
5f:8f:24:ed:ca:b5:8a:41:69:0e:8b:fd:cf:82:50:
cc:fb:50:e7:b0:12:ec:87:10:e5:06:43:68:af:0f:
d0:95:6a:ad:c7:4f:35:b4:d3:08:34:0c:31:fb:4f:
eb:82:13:34:5b:5d:72:77:74:65:e5:7f:e0:a8:57:
ad:a3:06:29:49:cb:45:83:b6:d2:9a:08:d0:c2:e2:
c3:53:70:2a:79:76:94:7b:dd:70:0e:de:a1:03:66:
b8:54:07:59:98:5b:43:73:c1:14:d2:4c:a7:63:58:
7b:11:87:fc:89:75:c2:f3:58:1b:c0:d8:df:8b:4c:
9c:4b:67:d2:85:39:57:70:0d:e6:eb:f1:96:a1:3d:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:52:26:31:D3:6C:61:35:12:C5:77:BE:45:60:88:B3:08:21:FE:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba447ff7-9c24-388a-a10f-96c79bcf19d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:03:75:82:0b:e9:83:a0:9f:85:12:93:4b:7f:fb:49:e8:27:
a6:92:ea:c0:0f:16:7c:a4:db:f2:cd:29:03:a8:71:6d:9c:2c:
06:be:56:0a:e9:dc:01:da:c0:c4:e6:76:ac:23:4b:bb:cc:87:
de:13:4a:cc:63:71:11:c7:17:3d:dd:5f:38:89:47:b3:a5:1d:
47:36:9f:d8:15:db:c3:79:48:7f:12:6b:fe:ef:de:69:35:5b:
12:fe:fd:d0:9f:9d:1a:e7:9c:82:56:2e:5d:7b:64:1d:ef:31:
24:97:fa:a7:3d:50:e5:29:0f:9f:c9:de:86:25:55:98:20:c2:
75:f5:6b:66:3e:08:83:bb:8d:47:49:f2:ff:33:f0:08:28:d3:
0a:36:4c:c2:e1:79:1f:8d:f6:66:34:1a:15:bc:52:5f:99:94:
3a:58:f5:f1:6b:0a:77:4d:9e:ce:55:d1:ab:ab:c6:bb:72:ad:
22:30:5a:44:c0:2c:dd:f4:38:35:53:ae:54:24:04:2b:8f:c3:
89:50:3c:29:d2:39:f5:58:d7:8d:2a:01:23:db:4e:82:80:16:
a8:c2:57:3c:18:98:09:be:83:55:67:c0:b3:3a:10:7e:a2:71:
dc:66:58:26:fc:cd:95:e4:34:1c:c5:9e:81:5c:ca:4d:df:7b:
9f:6f:1d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:44 2025 by rpki-client