Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf7f6b3a-be8a-3dd2-9617-4e82f747b737.roa
File: cf7f6b3a-be8a-3dd2-9617-4e82f747b737.roa (raw, json)
Hash identifier: C3dNJplNxh+PCudJKqJs7MjQlmIcafeYZOeMARaXoXg=
Subject key identifier: 8D:54:3E:CE:65:29:0B:A3:A4:2E:F1:9C:98:E0:03:8C:AF:13:C5:AF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A7403B1AD55CFA6C3B90C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf7f6b3a-be8a-3dd2-9617-4e82f747b737.roa
Signing time: Fri 29 Nov 2024 13:58:44 +0000
ROA not before: Fri 29 Nov 2024 13:58:44 +0000
ROA not after: Thu 27 Feb 2025 13:58:44 +0000
asID: 396605
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:74:03:b1:ad:55:cf:a6:c3:b9:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:44 2024 GMT
Not After : Feb 27 13:58:44 2025 GMT
Subject: CN=a95b2637-fcc7-4eb1-802b-76ce4892a51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:ef:bc:8b:c3:d1:57:a9:f7:e0:f8:05:a9:
8e:98:51:5c:39:27:62:fb:b5:a7:d4:69:92:26:59:
3d:c2:34:33:e1:eb:cb:7e:b8:a1:9c:77:5e:71:d5:
b8:aa:40:9e:32:39:5d:48:c1:c9:55:af:77:60:f8:
04:d6:09:35:03:e9:4a:53:4f:8c:d2:f3:12:e9:53:
c6:04:01:fd:34:b8:c7:4b:3b:06:79:7d:bb:db:1c:
e0:0f:d7:68:89:c1:5f:3d:e4:7e:c5:26:92:95:19:
44:2c:d7:78:00:2f:e3:2c:ad:f2:1a:d8:22:22:15:
81:b4:98:44:c6:2e:72:b5:64:93:55:35:98:3e:81:
d2:4e:cf:81:27:04:70:05:9f:c3:9a:9d:37:44:1b:
46:da:77:b2:26:18:c0:1b:3c:92:8b:f4:91:c6:ac:
8f:dc:c0:be:19:a4:d0:8c:18:84:2c:fa:56:75:4d:
7b:1c:97:b9:23:48:2b:02:eb:ad:85:62:c6:99:d3:
bf:e3:ca:c6:0f:2c:85:54:63:a5:9f:2c:49:73:d4:
9e:2d:2c:8a:d8:11:9e:ba:20:cb:5d:fb:19:8e:1d:
09:ad:d2:e6:22:f6:d9:8f:90:61:88:b6:ce:3f:4e:
cc:f1:07:f4:fd:b7:7e:b0:44:8b:5d:2c:5e:68:9f:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:54:3E:CE:65:29:0B:A3:A4:2E:F1:9C:98:E0:03:8C:AF:13:C5:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf7f6b3a-be8a-3dd2-9617-4e82f747b737.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:b4:80:d2:06:a2:55:f9:c7:98:73:43:cc:43:f7:59:be:e4:
0c:b8:ea:de:f3:72:08:27:9c:ee:f4:45:76:f9:68:83:81:be:
be:bc:74:be:53:46:95:ff:16:e2:f0:ce:1c:69:68:2b:68:f9:
a4:f6:38:6a:a6:ce:a7:f8:6a:11:ac:20:c4:25:2f:b8:07:91:
a5:d7:1a:ff:64:0e:a5:09:c6:7f:f5:6a:b9:17:5c:2f:6f:a6:
e4:1e:9c:4e:3c:51:fe:16:3a:8f:d4:63:9b:e6:30:56:3d:68:
d4:47:7d:43:21:ae:c3:a4:0c:2a:25:05:0c:13:20:c6:55:9a:
35:5e:a6:6e:3f:d6:e5:37:89:87:7c:6a:59:82:a0:d2:a2:26:
a2:0c:4d:0c:9b:1e:d1:5e:3c:b8:93:66:5b:1e:d1:0d:14:a3:
a1:69:14:2e:80:73:35:29:66:ba:65:9c:c0:cb:b5:8e:7a:f8:
d3:50:df:71:69:06:51:59:42:60:60:a4:88:dc:a2:91:38:5c:
31:2c:c9:cd:06:8a:be:b6:26:7e:29:3f:e8:f6:ef:51:22:44:
0d:8e:38:f5:40:a6:e6:f4:75:4e:46:df:ba:4a:dc:e4:0d:5a:
a9:c6:4b:4d:c9:6d:ca:68:6e:d9:da:0b:7f:e7:31:d4:4a:ed:
f4:5a:3c:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgKdAOxrVXPpsO5DAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEyOTEzNTg0NFoXDTI1MDIyNzEzNTg0NFowLzEtMCsGA1UEAxMk
YTk1YjI2MzctZmNjNy00ZWIxLTgwMmItNzZjZTQ4OTJhNTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM/vvIvD0Vep9+D4BamOmFFcOSdi+7Wn1GmS
Jlk9wjQz4evLfrihnHdecdW4qkCeMjldSMHJVa93YPgE1gk1A+lKU0+M0vMS6VPG
BAH9NLjHSzsGeX272xzgD9doicFfPeR+xSaSlRlELNd4AC/jLK3yGtgiIhWBtJhE
xi5ytWSTVTWYPoHSTs+BJwRwBZ/Dmp03RBtG2neyJhjAGzySi/SRxqyP3MC+GaTQ
jBiELPpWdU17HJe5I0grAuuthWLGmdO/48rGDyyFVGOlnyxJc9SeLSyK2BGeuiDL
XfsZjh0JrdLmIvbZj5BhiLbOP07M8Qf0/bd+sESLXSxeaJ+ZzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI1UPs5lKQujpC7xnJjgA4yvE8WvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Y3ZjZiM2EtYmU4YS0z
ZGQyLTk2MTctNGU4MmY3NDdiNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADm0gNIGolX5x5hzQ8xD91m+5Ay46t7zcggnnO70RXb5aIOBvr68dL5T
RpX/FuLwzhxpaCto+aT2OGqmzqf4ahGsIMQlL7gHkaXXGv9kDqUJxn/1arkXXC9v
puQenE48Uf4WOo/UY5vmMFY9aNRHfUMhrsOkDColBQwTIMZVmjVepm4/1uU3iYd8
almCoNKiJqIMTQybHtFePLiTZlse0Q0Uo6FpFC6AczUpZrplnMDLtY56+NNQ33Fp
BlFZQmBgpIjcopE4XDEsyc0Gir62Jn4pP+j271EiRA2OOPVApub0dU5G37pK3OQN
WqnGS03JbcpobtnaC3/nMdRK7fRaPJ8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:36:41 2025 by rpki-client