Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df7390f5-fe9c-3e99-804c-229321bc2822.roa
File: df7390f5-fe9c-3e99-804c-229321bc2822.roa (raw, json)
Hash identifier: YTKS+JsRAg2pJosh9a+YrQbHVkzgjXHFvVvwdpst0WU=
Subject key identifier: 59:E5:CD:F7:EE:8E:F8:1D:E9:E0:33:25:AA:E1:D5:77:2D:71:0F:03
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73E71A3D023A932C9C25C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df7390f5-fe9c-3e99-804c-229321bc2822.roa
Signing time: Fri 29 Nov 2024 13:58:30 +0000
ROA not before: Fri 29 Nov 2024 13:58:30 +0000
ROA not after: Thu 27 Feb 2025 13:58:30 +0000
asID: 19836
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:e7:1a:3d:02:3a:93:2c:9c:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:30 2024 GMT
Not After : Feb 27 13:58:30 2025 GMT
Subject: CN=caaa52d6-b5d6-4f63-9f79-c71785314c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1c:6b:ef:22:cf:a7:00:d0:31:2c:07:13:32:
33:8a:16:04:76:4d:aa:52:03:64:6d:d1:d2:8e:82:
30:3a:a5:81:f3:8e:77:35:ef:4c:e0:f9:a1:10:72:
5a:bc:f3:84:c0:3e:cf:d5:3e:68:e4:1d:2d:b6:37:
a0:79:f8:7b:c6:32:26:1d:62:e9:cb:7e:6d:9b:b6:
cd:8a:59:74:7d:9d:90:11:19:32:a9:a9:95:22:9c:
28:28:fb:4f:32:7b:8a:b1:19:37:a5:15:cd:58:cb:
29:7e:ee:05:b7:d0:0f:ad:bb:ae:77:18:b4:18:05:
19:c3:b2:6a:0a:92:1a:05:e8:68:98:32:5c:e0:10:
54:95:54:cd:d5:74:8c:71:30:21:a0:1a:be:83:c9:
79:16:b6:23:1f:a7:74:e4:0c:3d:2e:90:3b:89:2d:
2f:5b:5b:b7:08:d8:43:3f:21:e9:45:89:7e:83:ec:
d6:bf:d6:67:98:c5:04:08:1a:42:8e:4f:dd:31:2c:
7d:66:51:11:df:1f:6f:59:83:46:7c:4f:87:c1:50:
28:91:27:83:26:90:50:a2:8e:12:e8:bc:7d:90:c9:
8b:8c:22:80:a6:16:9a:a9:57:3d:1c:c8:b8:5c:a3:
0b:60:82:0f:a4:33:50:be:a0:ad:a3:ab:6d:3c:16:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E5:CD:F7:EE:8E:F8:1D:E9:E0:33:25:AA:E1:D5:77:2D:71:0F:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df7390f5-fe9c-3e99-804c-229321bc2822.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:aa:22:94:ac:91:07:54:89:4b:d5:13:e5:62:0e:3d:c8:52:
59:01:c9:24:4d:1f:e5:d0:93:ce:f1:62:75:de:de:fe:a5:66:
03:e6:2b:59:3a:2e:77:25:99:56:4a:36:c0:91:97:2e:83:97:
89:8d:05:cc:fd:e6:9e:f4:c7:c8:6e:ef:03:46:29:a8:61:1f:
13:93:a3:03:82:3c:77:dc:f6:ae:ff:d2:e9:a5:88:b1:76:de:
d3:07:51:3a:b1:39:b9:ec:13:15:79:0b:1c:3a:d3:3e:4c:a4:
43:9e:5e:6d:0d:ed:89:b9:36:04:3b:20:61:4b:2e:37:1b:cb:
df:3c:12:fe:b0:57:ac:df:1b:36:53:de:28:8f:46:b3:b5:61:
68:09:1a:43:42:a8:99:5d:de:a5:bb:39:c6:a0:73:4e:a5:90:
bb:b8:fb:61:77:59:73:2d:a5:9f:c9:6a:f8:f8:1b:bd:3f:f8:
a3:71:86:a0:be:d5:a2:30:8a:f3:12:14:11:bd:80:35:09:08:
01:70:71:ca:8d:a2:da:37:6f:df:db:c4:fa:a0:9d:79:bb:84:
7a:06:13:02:3e:77:00:10:b0:8d:04:1a:fc:9b:07:9c:6e:7b:
4f:f2:f4:1b:ec:32:29:17:0a:1c:fe:45:92:c3:3e:f5:ef:88:
6a:b7:9b:78
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgKc+caPQI6kyycJcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEyOTEzNTgzMFoXDTI1MDIyNzEzNTgzMFowLzEtMCsGA1UEAxMk
Y2FhYTUyZDYtYjVkNi00ZjYzLTlmNzktYzcxNzg1MzE0YzFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhxr7yLPpwDQMSwHEzIzihYEdk2qUgNkbdHS
joIwOqWB8453Ne9M4PmhEHJavPOEwD7P1T5o5B0ttjegefh7xjImHWLpy35tm7bN
ill0fZ2QERkyqamVIpwoKPtPMnuKsRk3pRXNWMspfu4Ft9APrbuudxi0GAUZw7Jq
CpIaBehomDJc4BBUlVTN1XSMcTAhoBq+g8l5FrYjH6d05Aw9LpA7iS0vW1u3CNhD
PyHpRYl+g+zWv9ZnmMUECBpCjk/dMSx9ZlER3x9vWYNGfE+HwVAokSeDJpBQoo4S
6Lx9kMmLjCKAphaaqVc9HMi4XKMLYIIPpDNQvqCto6ttPBbA6QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFnlzffujvgd6eAzJarh1XctcQ8DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGY3MzkwZjUtZmU5Yy0z
ZTk5LTgwNGMtMjI5MzIxYmMyODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA5qiKUrJEHVIlL1RPlYg49yFJZAckkTR/l0JPO8WJ13t7+pWYD5itZ
Oi53JZlWSjbAkZcug5eJjQXM/eae9MfIbu8DRimoYR8Tk6MDgjx33Pau/9LppYix
dt7TB1E6sTm57BMVeQscOtM+TKRDnl5tDe2JuTYEOyBhSy43G8vfPBL+sFes3xs2
U94oj0aztWFoCRpDQqiZXd6luznGoHNOpZC7uPthd1lzLaWfyWr4+Bu9P/ijcYag
vtWiMIrzEhQRvYA1CQgBcHHKjaLaN2/f28T6oJ15u4R6BhMCPncAELCNBBr8mwec
bntP8vQb7DIpFwoc/kWSwz7174hqt5t4
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:29 2025 by rpki-client