Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccb1e20c-531f-3421-b9aa-bbb25463fda4.roa
File: ccb1e20c-531f-3421-b9aa-bbb25463fda4.roa (raw, json)
Hash identifier: Zb+OEDtZNqOD/vzcDjsCnlAjiWNcDqAyVgZa2mqnOUU=
Subject key identifier: 03:73:4C:3F:1E:38:51:BB:2E:54:09:F6:F2:57:51:FF:D9:CE:8D:01
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73E4E3BE942AE3AFF62180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccb1e20c-531f-3421-b9aa-bbb25463fda4.roa
Signing time: Fri 29 Nov 2024 13:58:29 +0000
ROA not before: Fri 29 Nov 2024 13:58:29 +0000
ROA not after: Thu 27 Feb 2025 13:58:29 +0000
asID: 36628
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:e4:e3:be:94:2a:e3:af:f6:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:29 2024 GMT
Not After : Feb 27 13:58:29 2025 GMT
Subject: CN=769e9eca-92d5-493e-b760-86564b607aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c9:98:9f:7e:18:3d:b1:09:89:d4:75:50:eb:
f1:ca:04:07:2e:8a:70:c5:1d:12:11:f9:b7:9e:c8:
89:a8:23:8e:57:a7:e3:f8:21:4e:89:a3:93:c2:99:
ce:84:1b:7a:04:7f:35:7f:32:83:3b:46:54:f1:33:
42:a9:fc:e5:68:0b:a7:e2:20:1c:76:45:57:3c:5a:
06:72:c0:57:65:19:b8:d7:5c:6d:3f:3a:29:4e:ab:
23:96:21:40:8c:1a:92:60:53:e7:0f:af:4a:59:89:
03:ef:23:65:fd:9d:40:23:9e:ae:fa:9b:f4:25:a7:
52:02:78:64:29:4d:89:f9:84:af:be:17:b2:c8:8b:
2f:c5:89:26:71:6f:36:50:41:f5:64:dd:1d:fd:8e:
a8:3d:32:2a:07:5b:2c:8e:c9:a4:f2:7e:d2:24:2f:
bf:e6:6a:53:d6:18:7c:39:c1:e7:34:da:a9:d7:3c:
2a:9e:49:5d:cf:f0:0d:14:1f:e7:9a:84:ec:1b:54:
f3:2d:c6:63:68:9c:c0:df:fd:72:77:f4:5a:d0:fd:
66:17:dd:ef:b3:50:84:59:1a:4a:88:6b:9a:d0:2e:
47:85:b4:f5:38:fe:bc:48:d5:d3:50:9c:7c:cc:ad:
56:d0:28:ce:5f:fb:d4:cd:a9:38:dd:77:e1:15:ac:
c9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:73:4C:3F:1E:38:51:BB:2E:54:09:F6:F2:57:51:FF:D9:CE:8D:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccb1e20c-531f-3421-b9aa-bbb25463fda4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:e7:e6:9b:a2:6d:4f:f7:e8:f3:21:de:bc:72:ad:41:85:93:
7a:2b:5f:eb:5a:a1:ea:25:ee:dc:5f:b1:d7:f7:33:2e:7e:e0:
ea:2c:ac:c9:35:08:f4:d4:3b:61:0b:d3:46:f8:1c:0e:4c:e5:
4f:2c:35:07:f2:20:7c:4a:44:98:09:57:2e:d9:de:25:ac:fa:
da:1f:51:5b:44:0d:65:79:e0:a7:ae:f9:21:25:73:20:6e:b4:
0b:58:cc:43:98:3c:2f:35:52:21:a3:ec:c9:0c:49:3e:fe:50:
08:50:76:e5:08:5f:5f:7c:2b:14:cf:1b:52:15:0e:7b:f3:d3:
9a:b7:c8:42:14:91:7b:c4:33:5a:7c:5d:9d:63:d8:e3:be:6e:
67:a3:b4:ad:01:c9:b8:81:8f:ab:f4:0a:01:2f:24:99:83:88:
04:4c:10:71:ed:7a:e1:70:e9:6f:aa:04:d4:05:8c:30:6b:d0:
ac:c0:ed:37:fa:a7:d6:9c:ee:12:d5:aa:f4:d8:81:e0:d2:6e:
f2:47:56:12:d0:c4:23:66:c2:8a:86:90:b4:cf:a8:6e:51:8d:
95:84:c4:e2:1c:71:d3:2f:ee:07:58:eb:cc:85:dd:26:f2:85:
a2:2f:b4:c1:68:ab:e7:59:95:d1:34:ce:50:25:59:9d:07:d5:
7c:3e:1c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:05:01 2025 by rpki-client