Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d11a11cb-a553-3bc5-812c-f77f3f3535f9.roa
File: d11a11cb-a553-3bc5-812c-f77f3f3535f9.roa (raw, json)
Hash identifier: k8UT3b6S7P3ttWOwcrr+VMZjuWm5JtIdplJK9QJ0NvE=
Subject key identifier: CD:A1:82:03:74:4B:F6:A9:9D:5B:D6:80:CD:8A:9E:89:F9:A7:FF:2D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73E353A849BB9C39ED1F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d11a11cb-a553-3bc5-812c-f77f3f3535f9.roa
Signing time: Fri 29 Nov 2024 13:58:28 +0000
ROA not before: Fri 29 Nov 2024 13:58:28 +0000
ROA not after: Thu 27 Feb 2025 13:58:28 +0000
asID: 396572
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:e3:53:a8:49:bb:9c:39:ed:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:28 2024 GMT
Not After : Feb 27 13:58:28 2025 GMT
Subject: CN=8716b488-e4e7-48f9-aefc-22a5b13c98af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4a:c7:ba:f6:e0:be:71:db:51:07:7f:23:f4:
fe:c8:d1:76:28:e2:15:c0:7b:4d:28:a1:47:26:0c:
af:03:d6:5a:2e:0e:2f:0c:d7:49:10:cb:b0:ff:96:
c2:8c:a5:58:4a:fe:04:ac:72:89:2f:ab:74:29:f1:
ef:54:2a:47:eb:cb:bf:56:77:56:0b:d1:ec:dd:bf:
7b:f4:12:c4:1e:ee:b2:00:66:03:d7:35:28:1e:a5:
ad:2d:73:87:1c:bf:e0:08:c6:1e:a9:fa:64:4a:c0:
29:c4:2f:4f:bb:a4:81:32:2e:fd:51:6f:d2:d8:83:
0b:43:88:b3:1f:85:89:b1:fc:9f:3e:ff:23:df:bd:
e0:b8:fd:30:7e:5c:18:12:60:67:62:65:3a:86:e5:
0e:62:07:51:f8:1c:f0:a3:c9:68:3f:3b:a9:c8:08:
ba:b8:c9:f7:15:46:b1:3b:6c:77:f3:df:b0:b3:2c:
e2:b2:de:e3:13:65:70:63:60:ff:1c:ff:a5:3e:81:
ac:0a:5c:bc:f5:53:74:f7:11:fb:a5:f9:23:98:21:
4c:10:13:70:29:ea:90:25:0c:0c:f3:81:63:9e:49:
4c:cb:d4:47:8b:cb:0f:49:5f:98:52:70:31:06:b6:
49:ef:89:f5:8c:92:80:e7:93:79:bb:27:92:3e:47:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A1:82:03:74:4B:F6:A9:9D:5B:D6:80:CD:8A:9E:89:F9:A7:FF:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d11a11cb-a553-3bc5-812c-f77f3f3535f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:a6:02:67:90:6e:fa:31:c3:da:d5:83:25:7c:ae:68:6c:9c:
4b:c7:6f:d5:6a:26:31:68:b7:39:d7:7e:89:7d:4b:32:8f:7d:
d8:7b:b9:d9:ff:d4:9f:f0:a0:83:d8:50:90:fe:eb:cd:79:84:
2e:52:0a:f0:c3:c0:98:65:27:69:d3:7a:60:fd:53:1d:34:95:
30:cf:1d:a2:2a:6b:78:38:ff:c2:7d:9b:61:16:91:c3:07:21:
b6:aa:7e:ce:9a:c9:f2:78:1d:e0:46:d4:8a:cb:c6:3a:56:70:
57:87:c6:f9:9e:76:df:a1:2f:e8:f0:af:79:5c:eb:a8:a7:6d:
5b:de:0f:1f:45:c4:14:76:62:b3:e9:58:68:ac:d0:47:bb:c4:
81:18:e5:38:51:24:65:ca:64:45:eb:3d:a5:ad:cb:50:13:5c:
7d:81:59:a5:f6:98:1e:d3:d8:a7:72:8b:f4:c3:7b:df:eb:99:
74:46:5a:65:18:29:3f:6d:cb:72:7c:07:e4:ac:bb:6e:36:17:
b3:dd:62:8f:8e:a6:62:4e:c6:c7:10:ad:d5:db:83:16:6b:25:
33:b0:96:b6:56:20:b5:7e:af:c6:fc:bb:f6:14:f0:1c:ec:c4:
6f:6c:cb:f8:76:e0:e1:38:ee:82:6f:25:e9:1c:78:1d:5e:f8:
ab:a3:95:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:37:21 2025 by rpki-client