Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cce6513c-007f-3e56-94ee-b522d864a232.roa
File: cce6513c-007f-3e56-94ee-b522d864a232.roa (raw, json)
Hash identifier: inQSTP4fQkwOFM2JGFyieR4oHc3FgnP4kLdukjsQehA=
Subject key identifier: 9C:72:32:53:0A:98:95:0F:87:60:C5:A3:E1:CC:73:90:2D:30:FF:6F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73FDEF2AE1E6F8AC351C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cce6513c-007f-3e56-94ee-b522d864a232.roa
Signing time: Fri 29 Nov 2024 13:58:41 +0000
ROA not before: Fri 29 Nov 2024 13:58:41 +0000
ROA not after: Thu 27 Feb 2025 13:58:41 +0000
asID: 396541
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:fd:ef:2a:e1:e6:f8:ac:35:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:41 2024 GMT
Not After : Feb 27 13:58:41 2025 GMT
Subject: CN=67b76a3a-def6-4d92-90db-763c87cd26c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:c0:6f:c0:23:5c:32:9e:d0:4a:90:04:a6:
1c:75:9c:16:74:09:d9:37:44:41:8e:43:fc:fa:a5:
c1:86:23:f3:35:47:8c:9b:a6:59:00:d0:93:d6:58:
7f:32:cb:c8:87:f0:6f:42:99:df:be:0f:56:41:6c:
0b:30:ba:93:e3:5d:93:25:b5:c9:45:e9:12:01:08:
5a:04:09:95:2c:8e:53:15:a0:4d:aa:fd:8d:53:26:
b9:b4:ec:07:a2:4d:ca:ec:bb:ae:73:fc:d4:ae:84:
20:1f:ce:4c:a9:a0:b0:74:53:3c:ce:ed:d4:2a:05:
61:5b:6d:fb:7a:7c:fc:5d:81:d0:41:76:cf:fb:58:
8a:eb:92:04:8c:7e:3b:b5:d9:6a:32:6c:03:f5:fd:
5c:b0:2c:3a:a8:bd:98:bc:29:e9:61:76:5e:ea:6d:
93:10:62:0b:18:77:d5:f2:44:f5:29:86:c7:2f:fb:
d6:70:73:93:84:b7:91:02:2a:96:a8:1f:02:73:26:
c1:18:63:c5:ab:7a:ef:cb:c2:93:d6:19:76:32:ce:
35:70:af:1f:96:9e:26:d3:0a:f7:9f:bb:c8:3c:a1:
98:7e:08:09:8e:37:0b:5b:9f:a9:44:e2:22:55:5c:
52:53:0b:01:4d:41:ae:fe:1b:a8:f0:5c:ff:20:90:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:72:32:53:0A:98:95:0F:87:60:C5:A3:E1:CC:73:90:2D:30:FF:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cce6513c-007f-3e56-94ee-b522d864a232.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:e9:d4:16:aa:16:88:31:17:0a:8b:f1:0c:1a:d1:a1:46:ec:
48:44:d3:3c:22:2b:31:1d:ec:8e:21:23:9f:3e:89:86:d2:90:
10:71:00:de:16:7c:90:91:90:54:fe:9c:6b:d9:03:e0:03:33:
34:13:c7:6e:d4:09:3d:c8:9d:f6:f6:c8:ed:a9:61:7c:57:b1:
76:11:e6:c2:fc:ba:5c:49:4b:3b:f3:32:a2:76:27:e3:b7:e4:
84:cf:a4:1d:5d:45:e7:50:3b:9b:ff:b1:6d:97:c5:b0:70:e5:
d6:e3:4e:ce:cd:ae:18:dc:12:00:33:a0:7d:cb:46:07:b2:fe:
8d:7d:d6:03:6f:13:3b:06:70:79:e7:f2:11:13:8a:7c:10:e5:
88:5b:37:66:3c:b2:f7:12:c8:ea:d6:c1:0c:d0:98:99:bf:80:
a3:d4:96:a4:0e:f6:9f:7a:a1:e7:c2:57:f1:f8:be:8c:75:cb:
ab:4a:04:26:ee:50:10:7a:e8:55:49:9f:ee:b3:74:9c:54:2d:
17:2a:52:66:4f:11:ba:c1:a9:8a:97:bd:84:1d:8f:f3:84:84:
24:7d:2d:ec:b8:7e:94:c2:8d:a7:d0:7b:97:2f:9f:05:f9:86:
96:ce:bb:08:94:86:12:b4:f0:6d:86:87:50:9a:f9:13:95:65:
76:9f:4f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:35 2025 by rpki-client