Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff79a7ec-c5bd-3081-a09e-d6887e813159.roa
File: ff79a7ec-c5bd-3081-a09e-d6887e813159.roa (raw, json)
Hash identifier: R0f0decu0JZxb8LNMkqJXaYRSq3fRwiOXG46GIw9idk=
Subject key identifier: 44:B6:C7:41:94:A5:D8:63:9A:7F:1C:65:E8:9D:A8:3C:E9:30:47:B0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73E639D377B567DF243880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff79a7ec-c5bd-3081-a09e-d6887e813159.roa
Signing time: Fri 29 Nov 2024 13:58:30 +0000
ROA not before: Fri 29 Nov 2024 13:58:30 +0000
ROA not after: Thu 27 Feb 2025 13:58:30 +0000
asID: 396557
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:e6:39:d3:77:b5:67:df:24:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:30 2024 GMT
Not After : Feb 27 13:58:30 2025 GMT
Subject: CN=247690c2-b6ad-44a6-b7f6-d4397d02f1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c4:33:44:32:56:68:11:9e:f4:95:a1:27:ac:
17:7d:bf:14:a6:1e:05:e3:26:50:d7:6d:ca:e5:fb:
ae:8d:60:4c:21:46:13:46:bb:65:64:83:ae:57:ba:
bc:50:9e:9e:c7:5f:90:91:02:23:1e:79:52:de:69:
ff:7d:ad:21:39:a6:8b:59:50:16:de:a4:b3:9c:43:
a6:c6:e1:80:3a:d2:76:c1:4d:ed:5a:de:b7:55:ff:
ac:40:29:9d:5e:b4:cc:1f:a9:0f:2b:47:b6:48:9b:
04:14:b3:bf:5c:42:54:7a:97:b7:6e:95:66:21:d1:
11:2c:70:dd:17:17:6c:5f:a5:c7:b2:60:c4:61:a8:
42:31:a6:4d:50:2d:16:7e:34:7b:84:25:18:1d:04:
8b:13:26:6e:56:b3:ee:9e:55:16:61:b8:21:17:35:
ac:d8:92:77:55:b0:cf:27:6b:0d:5a:37:cf:78:ac:
fd:df:c7:0f:bc:37:ad:84:03:01:f6:a1:48:69:99:
ea:45:22:f8:12:7a:2f:03:64:b6:ec:95:fc:5d:3e:
9a:db:4c:c5:dd:cb:80:ee:4d:2e:3c:b0:c4:75:05:
49:5e:d1:6e:1e:64:54:96:3f:42:3e:da:bd:14:fc:
0c:df:86:75:d0:78:1d:62:01:e4:e8:3c:70:98:c9:
72:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B6:C7:41:94:A5:D8:63:9A:7F:1C:65:E8:9D:A8:3C:E9:30:47:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff79a7ec-c5bd-3081-a09e-d6887e813159.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:8c:84:39:51:8c:cc:21:02:60:7e:c4:63:f1:0e:09:12:11:
1d:b4:db:f8:3e:f1:68:8d:a3:e1:fe:76:13:6c:fe:d8:e8:00:
e1:7f:5c:60:dd:0a:96:9c:97:1d:63:ef:39:94:68:2e:4d:73:
38:f9:33:bb:c8:09:22:2f:c6:3b:e3:18:fa:70:ba:ab:1d:05:
93:21:0b:40:ee:77:40:78:23:8a:c8:a4:01:e5:7e:36:12:b0:
93:b9:57:42:00:fe:6c:ad:93:39:a9:2a:07:27:9f:aa:07:2f:
6c:20:1c:37:0b:a4:d3:61:53:9f:90:94:62:6c:f4:de:fd:be:
29:2f:82:4f:6b:f3:62:78:3b:c5:c9:c5:16:ee:ca:92:f5:96:
f2:7b:99:3f:8b:fd:64:fb:9f:5c:c3:ce:87:07:5f:4b:ec:ce:
88:95:3d:cc:c0:2f:ac:16:9f:c5:37:f2:99:03:b4:ba:ae:87:
00:7e:a5:47:f7:c7:c2:18:6a:1c:60:72:42:88:22:2d:8f:28:
8b:c6:3a:7d:12:a0:1f:86:ac:9c:94:8b:ab:3b:7f:c7:db:3f:
9f:44:f6:36:71:e6:45:69:2c:9b:9e:81:4d:78:0f:5a:36:b1:
ed:4f:68:13:5a:5e:40:0d:db:08:da:42:cf:ad:8b:e7:6a:be:
be:40:ae:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:44 2025 by rpki-client