Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d52aa54b-0fe3-3c88-875a-a5abdf582d1c.roa
File: d52aa54b-0fe3-3c88-875a-a5abdf582d1c.roa (raw, json)
Hash identifier: FjDE3i+pPg1/1ifgjSJxbxWesaR3CnWOb6tD/uORnGo=
Subject key identifier: BF:A3:16:AF:44:E4:DD:61:76:B1:93:C3:DC:1F:F4:9A:3B:89:38:4E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584879FAF0934350415FE931BC60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d52aa54b-0fe3-3c88-875a-a5abdf582d1c.roa
Signing time: Wed 08 Jan 2025 12:45:19 +0000
ROA not before: Wed 08 Jan 2025 12:45:19 +0000
ROA not after: Tue 08 Apr 2025 11:45:19 +0000
asID: 397196
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:79:fa:f0:93:43:50:41:5f:e9:31:bc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 8 12:45:19 2025 GMT
Not After : Apr 8 11:45:19 2025 GMT
Subject: CN=6c089d0a-2fc1-4215-82d1-fa211149856a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:67:72:ac:3a:28:d3:60:ec:a9:b3:c7:86:
fa:e9:d2:92:07:b3:9d:e0:e0:7f:45:8f:ad:ec:d7:
10:2c:ce:61:b1:2a:2a:ed:49:b9:6c:47:3c:07:34:
f7:ba:f9:0c:54:b8:60:8d:23:0a:a3:b2:b1:7a:be:
84:d2:44:a8:ee:39:37:fb:2c:f5:5b:ad:e6:07:71:
8b:54:c0:74:7a:56:67:a2:20:d8:84:e4:85:48:3f:
05:19:50:da:1c:a4:b6:16:34:7a:fd:c6:ef:97:2b:
2e:fc:e3:17:b9:1d:71:36:03:df:b4:d9:23:85:1e:
1b:fe:4f:2d:aa:8d:c3:54:7a:da:9a:1f:bc:e9:2f:
7f:85:ed:93:df:1a:00:57:68:c0:6f:64:5d:85:00:
b8:55:15:d0:55:c3:ea:c8:e3:d0:42:f2:40:d8:44:
d9:fe:4a:e3:38:2d:38:4b:90:d6:6d:3a:53:3b:59:
46:91:e9:39:79:0b:fe:ab:f8:30:e4:df:68:d0:cb:
ad:65:62:f2:68:c0:46:f1:cd:e3:15:8c:f5:55:de:
b6:3d:3e:4e:0d:4d:93:57:29:fd:d4:68:c5:6a:a6:
b9:01:7a:fa:56:7e:9c:f2:a6:1f:da:18:40:58:17:
e0:2f:15:1d:26:40:7e:12:4b:93:0e:ae:32:e6:e6:
b1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A3:16:AF:44:E4:DD:61:76:B1:93:C3:DC:1F:F4:9A:3B:89:38:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d52aa54b-0fe3-3c88-875a-a5abdf582d1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:e5:92:b8:e3:bc:35:1a:37:27:2a:f6:ff:7f:18:cb:bd:40:
1f:b9:79:48:f6:72:ae:e4:52:93:55:35:73:3c:e6:0a:fc:c6:
15:55:04:3b:85:8a:a8:63:01:73:97:79:19:f0:40:2e:fe:78:
c7:83:f8:54:97:65:81:de:27:37:42:7f:a8:32:8c:f9:c9:31:
f8:5e:59:f8:92:57:ea:49:a1:87:a4:d7:47:44:24:95:58:cd:
67:4e:ad:69:a9:cd:3a:62:f6:42:ab:c7:a9:62:61:37:ff:87:
df:9f:9e:39:32:cd:99:61:b2:e7:52:6f:e4:10:ab:27:d7:d0:
a9:2c:b8:8b:81:29:5d:ae:e2:b8:c7:c1:58:74:58:46:a9:49:
12:ef:d3:af:ef:29:0b:7e:da:13:6f:b3:61:d9:c8:71:f9:81:
9e:56:d1:e2:66:3c:07:d1:82:b0:de:26:58:1e:8c:fa:6e:d8:
82:e3:d5:64:dd:09:6b:58:10:ce:d5:89:27:9f:6a:e2:9f:87:
68:fa:de:87:66:21:3e:c4:f9:16:67:fd:94:de:93:7f:f4:61:
2c:ac:a3:6c:be:3d:07:84:bb:b2:f6:26:d8:44:9c:7a:b0:92:
5e:70:2e:c8:9a:ae:97:fb:72:c7:22:d9:0d:2b:0f:d2:06:5a:
48:21:02:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:14 2025 by rpki-client