Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be2dbf09-27cd-3199-9c65-ab101f62e933.roa
File: be2dbf09-27cd-3199-9c65-ab101f62e933.roa (raw, json)
Hash identifier: VX6VI97WAde3y7TcGxUNAdC2rZUeIy94yj44xERPt6g=
Subject key identifier: F1:66:54:62:B8:DA:5A:47:3C:75:26:94:DA:86:90:F2:2D:14:82:9D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73F973019CD2DD63588C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be2dbf09-27cd-3199-9c65-ab101f62e933.roa
Signing time: Fri 29 Nov 2024 13:58:39 +0000
ROA not before: Fri 29 Nov 2024 13:58:39 +0000
ROA not after: Thu 27 Feb 2025 13:58:39 +0000
asID: 396581
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:f9:73:01:9c:d2:dd:63:58:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:39 2024 GMT
Not After : Feb 27 13:58:39 2025 GMT
Subject: CN=bcfb0260-f8be-44e0-96f2-96fb0e030866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9f:7b:ee:e5:ae:23:32:8e:db:08:61:a8:ce:
e2:0e:f7:d1:f3:92:60:ba:a5:ef:d8:2f:ca:c8:b0:
bb:52:19:04:b5:c3:88:16:0a:8d:a8:fb:42:e1:06:
7b:2b:31:7f:b8:c8:18:1a:dd:79:69:58:fe:58:bc:
d7:13:bb:76:75:92:37:ad:e2:47:0a:6b:bc:83:01:
e5:ac:6a:44:7d:9d:9c:fa:b4:ad:47:51:bb:ec:f9:
da:7a:aa:b7:85:72:e2:47:e0:cc:91:97:be:49:04:
0c:d7:29:ff:b5:3c:21:25:37:7f:76:3d:74:08:4b:
91:4a:a6:cd:be:f1:ee:fa:33:f2:b8:ca:61:02:cc:
b1:65:5f:5a:be:7a:48:1f:0d:c7:15:28:2a:cf:9a:
c0:95:a8:ba:e2:14:25:ee:69:28:ce:91:be:4f:9a:
6a:3c:53:bb:4e:d8:5b:c8:3c:22:24:44:92:6b:f2:
5e:57:87:86:dc:94:63:41:bf:aa:65:a1:1c:08:3b:
4e:e7:b7:d4:b1:20:47:46:d6:fd:35:44:cc:30:4d:
06:4e:a2:1e:59:31:35:07:1c:fd:84:3c:e3:e7:3f:
a5:03:7f:49:f0:b7:22:3e:ee:2c:22:60:78:3d:58:
ed:9e:ca:6c:10:3d:64:68:a0:c9:38:cc:cf:51:55:
74:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:66:54:62:B8:DA:5A:47:3C:75:26:94:DA:86:90:F2:2D:14:82:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be2dbf09-27cd-3199-9c65-ab101f62e933.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:e6:a1:5e:d7:c6:ee:92:b9:c2:c8:0f:a2:b2:12:06:17:70:
08:3e:e2:d2:14:de:5a:c8:4a:e3:e6:f6:37:57:ec:c9:a2:a4:
4e:72:4d:0d:03:1b:7a:7b:76:9b:f5:da:89:f9:17:4d:99:fc:
28:ca:c0:a0:6a:13:9d:7e:3b:39:20:15:7b:4d:d5:4e:84:83:
13:4d:b2:93:21:3e:63:81:f2:12:74:4d:ff:2d:57:6e:92:00:
1d:16:8c:55:e6:b5:5d:96:2d:19:63:e9:76:a1:c9:80:d3:07:
a8:a9:81:44:b1:7e:48:5d:81:fc:0b:ca:f1:a4:6d:1f:38:52:
80:e0:c4:c0:00:ad:23:ec:6c:d0:2e:0c:26:65:2d:a4:03:6c:
41:23:e2:6d:88:81:b3:0e:97:a1:32:a4:0d:ef:8a:79:78:22:
c8:9b:14:d6:03:65:31:ec:88:29:3f:b9:16:9b:79:9a:ac:80:
03:d6:2a:9f:f7:6b:96:70:2a:71:35:b4:8b:9f:5e:54:24:94:
30:58:cf:54:09:af:49:a6:3e:ee:c7:78:76:3e:43:ee:4e:ab:
7e:f8:8c:9a:7e:84:ce:25:f0:ef:93:24:83:d9:ea:ab:f8:2c:
cb:a5:bc:0c:56:de:23:ee:a6:59:9c:27:e6:4f:8b:ce:d2:c1:
35:b2:06:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:36:07 2025 by rpki-client