Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb3f4ff6-cd88-3e26-8c64-3210f5dc79d7.roa
File: cb3f4ff6-cd88-3e26-8c64-3210f5dc79d7.roa (raw, json)
Hash identifier: 9wQ9GW1ydx0sTxos3OAgSO9cjYWdqaZCuRbr20tJ86k=
Subject key identifier: D0:0B:C1:A1:6F:02:47:95:6C:B3:29:C2:DE:D2:C6:2E:86:F5:A9:31
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B9444C67BF6C364442080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb3f4ff6-cd88-3e26-8c64-3210f5dc79d7.roa
Signing time: Wed 11 Dec 2024 15:18:01 +0000
ROA not before: Wed 11 Dec 2024 15:18:01 +0000
ROA not after: Tue 11 Mar 2025 14:18:01 +0000
asID: 36623
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:94:44:c6:7b:f6:c3:64:44:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:01 2024 GMT
Not After : Mar 11 14:18:01 2025 GMT
Subject: CN=c71d087c-080b-4dfe-bc68-ebd5e025fb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:7f:55:08:bf:d2:ec:7f:62:9a:46:8d:28:
cb:04:aa:1a:2d:5a:35:5f:38:2a:d5:86:fd:68:ae:
ae:14:0c:7f:be:2f:2c:1e:0d:02:28:94:83:5d:54:
36:57:31:fe:43:33:98:af:1c:f6:1c:ec:a2:40:fe:
6e:3f:28:bf:9e:c9:f7:b4:97:51:6a:fd:9c:48:60:
3b:3e:48:bc:9e:09:ff:e0:1d:8a:7a:d6:8e:9a:4d:
c3:03:b0:bf:ed:ee:c8:4f:4e:cd:9d:ab:a1:06:29:
4a:c0:f1:02:9e:a5:39:95:b0:11:39:7f:b0:43:4c:
ae:69:d7:48:6b:9f:47:9f:8f:af:74:a6:3f:03:8c:
3e:75:35:e8:c6:95:ac:d3:eb:aa:36:c7:87:f3:ed:
19:02:8f:1f:cc:a5:bc:d0:93:da:56:85:4c:f4:e1:
a7:ba:48:9f:e3:1c:d7:34:7f:25:15:bc:ff:87:e9:
dd:f9:cc:fb:21:6f:bc:da:b6:c9:6b:76:92:f8:80:
87:d4:76:da:74:02:47:94:81:04:f7:75:75:4e:08:
b8:44:16:78:24:32:ca:bf:17:30:19:f9:22:ec:b3:
4a:d7:38:a9:6b:9b:f9:98:f5:d1:cc:3a:a6:05:4c:
a6:05:7c:95:99:45:cd:2e:ec:ea:97:a6:e1:b1:53:
d8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0B:C1:A1:6F:02:47:95:6C:B3:29:C2:DE:D2:C6:2E:86:F5:A9:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb3f4ff6-cd88-3e26-8c64-3210f5dc79d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:03:38:08:2e:7a:a7:94:68:19:b6:8e:33:b4:ab:6e:3c:04:
be:81:41:8f:00:46:2c:6c:a2:80:6b:fe:df:19:e0:06:38:29:
aa:aa:c8:dd:15:53:2b:42:3c:23:31:13:b3:8d:bf:ac:6b:d8:
c0:0a:aa:7d:0f:1d:4e:71:a8:dc:5b:3e:35:9e:2a:a8:bf:c9:
88:09:40:c5:7f:62:6a:b0:32:1b:3d:f1:d1:c3:e5:dc:a0:9c:
d2:7b:1e:00:5a:40:d6:03:40:25:56:dc:4c:a7:af:fe:68:8b:
be:a2:5b:d1:49:24:37:9b:53:bc:01:77:fe:77:a1:8d:d1:13:
89:fa:91:6b:ea:47:25:2a:78:f3:82:9d:65:9c:d6:86:d8:95:
b4:4e:4c:40:0a:7c:8b:1e:f8:d7:a0:ad:5b:7a:3d:c9:af:98:
05:37:7a:96:d3:a4:eb:da:92:ee:ff:67:16:ea:db:56:b3:da:
86:80:cb:44:cb:6a:92:5c:52:13:9e:e9:52:83:06:1b:8b:20:
66:ab:69:f9:bb:00:da:94:9a:76:03:03:49:e7:1c:4a:60:c5:
3c:0a:5a:b8:42:c2:f8:01:c7:b9:f7:c9:3e:78:99:3d:cb:0c:
e9:ee:60:bc:53:09:be:9c:86:fe:14:24:35:0a:19:c8:8d:61:
1c:7c:38:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:17:10 2025 by rpki-client