Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdee2e13-0d61-307d-b2d3-c3362e80d7b3.roa
File: bdee2e13-0d61-307d-b2d3-c3362e80d7b3.roa (raw, json)
Hash identifier: 9yV3PliBvSGVrZboCG+eoL/F8/4rRiBhOLO4Gjz8hlI=
Subject key identifier: 9C:BF:54:F8:6F:2A:99:FC:51:AC:5D:95:74:67:45:87:51:84:49:17
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73F4A4FEE9DA19BBAC4380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdee2e13-0d61-307d-b2d3-c3362e80d7b3.roa
Signing time: Fri 29 Nov 2024 13:58:36 +0000
ROA not before: Fri 29 Nov 2024 13:58:36 +0000
ROA not after: Thu 27 Feb 2025 13:58:36 +0000
asID: 396559
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:f4:a4:fe:e9:da:19:bb:ac:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:36 2024 GMT
Not After : Feb 27 13:58:36 2025 GMT
Subject: CN=d6733710-cc08-4df0-8217-776a996a3906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:66:6f:ca:a8:60:a5:ae:bd:38:19:5b:5a:bb:
d7:18:31:0f:34:3e:e8:a8:da:9e:23:92:b8:f4:ae:
75:1f:5f:68:3f:0e:e8:4a:f1:ec:1e:48:00:6a:4d:
b3:e7:fb:02:c4:63:6b:7f:5e:4a:ac:a7:b0:46:2c:
b5:b3:8a:2d:c8:e9:24:d5:ef:a8:f3:aa:cd:ef:6c:
50:2d:2e:98:e1:32:c9:e9:29:84:cf:4d:d5:9d:dc:
85:13:b4:bc:cc:49:e4:c1:d3:db:ab:65:1e:ff:e5:
2b:5c:c2:60:c7:46:2d:26:c3:28:82:fc:48:55:4c:
11:a3:6f:16:56:97:37:4e:e6:aa:27:c0:2f:21:c3:
e8:cf:f1:29:9f:2d:c6:8a:25:b0:b9:03:2c:08:0a:
01:a5:a6:31:b4:1b:dd:3c:23:96:8d:18:fc:e2:33:
1b:56:f9:8d:c5:23:7d:18:f8:16:7c:a0:78:16:78:
af:9d:f4:39:9f:bb:04:f9:23:27:22:7a:a7:12:f5:
ec:85:ce:07:c0:eb:a0:b7:6c:79:6f:6d:98:fd:fc:
8a:c5:f0:31:36:6c:5e:d1:19:62:89:82:27:3b:a2:
e8:1e:8c:f8:48:c6:84:01:46:f8:bd:da:af:ad:18:
9e:53:c0:ff:52:7a:8f:2a:8e:2b:36:51:51:20:95:
e8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BF:54:F8:6F:2A:99:FC:51:AC:5D:95:74:67:45:87:51:84:49:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdee2e13-0d61-307d-b2d3-c3362e80d7b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:51:09:96:0d:04:fc:e3:93:1d:2e:2a:6d:e3:dc:14:77:c5:
87:12:af:3d:68:f5:d8:61:9b:5e:71:a9:70:00:fd:7d:b2:af:
a1:52:6d:a2:66:ca:86:bc:c5:ad:e1:bb:98:11:c9:da:6f:23:
60:2a:48:88:90:74:6f:e5:b8:e4:67:96:d5:7f:5a:d5:3d:9a:
81:62:82:06:a5:1c:eb:d9:04:06:a1:b5:a8:43:cd:5c:9e:0d:
ce:77:93:57:3e:eb:54:23:2e:0a:a8:e3:31:3c:8b:3e:cb:18:
b9:9c:7a:6d:f7:6d:79:13:de:f7:1e:fb:cb:ee:fa:77:c9:bc:
cc:65:62:af:e8:69:47:80:69:0e:3c:f7:00:f1:cb:87:07:88:
ab:99:93:23:b1:db:92:f5:00:d0:84:82:a5:f2:eb:f4:7f:9a:
b0:13:76:49:19:c9:e3:8e:df:dc:b0:69:4e:6b:e2:65:07:e3:
ae:91:12:22:b1:4c:a5:83:d7:d8:0a:00:31:6f:8e:2d:03:7d:
2c:62:b7:0a:b1:65:ed:18:4b:46:c0:c8:b0:43:74:4a:f7:2a:
0d:91:82:69:18:99:d1:93:ba:02:d7:b2:3b:dc:95:98:e5:bf:
b4:7b:ed:31:55:f8:c1:83:ba:20:6f:5d:a5:09:a4:0c:d2:54:
c4:a2:f7:f1
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgKc/Sk/unaGbusQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEyOTEzNTgzNloXDTI1MDIyNzEzNTgzNlowLzEtMCsGA1UEAxMk
ZDY3MzM3MTAtY2MwOC00ZGYwLTgyMTctNzc2YTk5NmEzOTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmZvyqhgpa69OBlbWrvXGDEPND7oqNqeI5K4
9K51H19oPw7oSvHsHkgAak2z5/sCxGNrf15KrKewRiy1s4otyOkk1e+o86rN72xQ
LS6Y4TLJ6SmEz03VndyFE7S8zEnkwdPbq2Ue/+UrXMJgx0YtJsMogvxIVUwRo28W
Vpc3TuaqJ8AvIcPoz/Epny3GiiWwuQMsCAoBpaYxtBvdPCOWjRj84jMbVvmNxSN9
GPgWfKB4FnivnfQ5n7sE+SMnInqnEvXshc4HwOugt2x5b22Y/fyKxfAxNmxe0Rli
iYInO6LoHoz4SMaEAUb4vdqvrRieU8D/UnqPKo4rNlFRIJXoZwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJy/VPhvKpn8UaxdlXRnRYdRhEkXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmRlZTJlMTMtMGQ2MS0z
MDdkLWIyZDMtYzMzNjJlODBkN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAeUQmWDQT845MdLipt49wUd8WHEq89aPXYYZtecalwAP19sq+hUm2i
ZsqGvMWt4buYEcnabyNgKkiIkHRv5bjkZ5bVf1rVPZqBYoIGpRzr2QQGobWoQ81c
ng3Od5NXPutUIy4KqOMxPIs+yxi5nHpt9215E973HvvL7vp3ybzMZWKv6GlHgGkO
PPcA8cuHB4irmZMjsduS9QDQhIKl8uv0f5qwE3ZJGcnjjt/csGlOa+JlB+OukRIi
sUylg9fYCgAxb44tA30sYrcKsWXtGEtGwMiwQ3RK9yoNkYJpGJnRk7oC17I73JWY
5b+0e+0xVfjBg7ogb12lCaQM0lTEovfx
-----END CERTIFICATE-----
Generated at Wed Apr 16 01:55:38 2025 by rpki-client