Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1aab9a2c-337b-37d8-bcf7-0867f4687a0a.roa
File: 1aab9a2c-337b-37d8-bcf7-0867f4687a0a.roa (raw, json)
Hash identifier: 6rP3IrG4A4Vef1xFoaoj2GhyArk9gu7U4GIa20P+rs8=
Subject key identifier: 66:1C:80:6F:11:4D:A0:3E:C0:52:61:C3:08:4B:35:85:FC:39:8B:2F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846B8C567362F1C26E87C7A6400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1aab9a2c-337b-37d8-bcf7-0867f4687a0a.roa
Signing time: Wed 31 Jul 2024 14:59:29 +0000
ROA not before: Wed 31 Jul 2024 14:59:29 +0000
ROA not after: Tue 29 Oct 2024 14:59:29 +0000
asID: 834
IP address blocks: 50.114.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:b8:c5:67:36:2f:1c:26:e8:7c:7a:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 31 14:59:29 2024 GMT
Not After : Oct 29 14:59:29 2024 GMT
Subject: CN=4263516b-fa95-4899-963c-025b015a9964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:75:55:1b:c1:5c:76:66:de:8e:89:51:3b:d9:
50:59:df:c5:a2:7f:1f:46:d3:f4:90:20:dc:4e:37:
f7:b5:0f:38:ca:24:02:50:a8:fe:a1:60:be:ed:e5:
cf:40:7d:f5:7d:0d:5e:25:d1:5a:79:0a:a6:16:b2:
b1:c9:b2:73:b8:e1:35:a8:1f:2a:4e:75:80:b1:95:
6f:0b:7d:29:ae:a3:3b:b9:98:65:1a:fa:5f:95:63:
61:7f:c1:ca:42:05:0a:cf:6d:8c:ef:2f:90:17:ae:
f3:8d:80:62:9b:14:91:b4:25:68:f9:1f:e3:7f:8a:
2d:46:72:1c:11:8b:5b:e7:5a:2f:80:06:5c:6b:42:
fa:4b:19:21:89:0a:c4:99:bf:b1:31:cc:5d:ac:ba:
e8:f4:72:b0:d2:81:49:24:f7:a6:00:fb:b3:29:96:
f7:4d:eb:55:3d:f1:0e:4f:8f:e3:c4:e5:c0:7f:bc:
ab:4a:2b:70:40:c8:2c:46:97:07:c9:f9:4b:ae:e7:
56:a2:68:59:80:60:9e:4c:fd:34:b9:ab:3f:5b:d5:
b4:e3:5a:04:74:04:0d:bb:84:10:31:e5:72:59:a6:
b2:6b:04:60:4c:eb:ef:9e:db:28:f2:fa:83:60:f8:
e3:65:5a:7c:d5:c2:82:61:28:11:9d:cf:43:88:16:
22:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1C:80:6F:11:4D:A0:3E:C0:52:61:C3:08:4B:35:85:FC:39:8B:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1aab9a2c-337b-37d8-bcf7-0867f4687a0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:8c:b4:19:4f:2b:c0:5d:c9:05:a6:de:01:b1:ad:04:c3:5e:
d1:64:31:20:71:3a:a3:a4:b2:a4:d0:d8:f8:bd:68:d8:7c:5f:
24:0b:1e:a3:a8:e0:f9:76:3c:ab:da:f0:ea:38:f3:9a:3c:98:
b4:c2:a2:bf:e0:41:f2:d9:9d:26:0f:af:86:cd:21:28:4a:01:
b6:47:c6:a6:e9:99:3e:09:a1:12:ab:59:34:84:09:d9:47:33:
6e:f8:ae:51:a5:fa:d6:e9:bc:cb:11:f9:95:b9:d2:ea:e0:70:
ce:58:0b:f2:bc:c8:58:f7:bf:ff:b0:f6:52:21:cf:a1:21:a8:
17:ac:e1:d5:a3:da:72:44:63:e8:a2:80:b8:72:71:af:67:a0:
e6:69:46:fc:2b:7b:a5:3a:10:3e:23:32:d6:b0:82:ab:cc:7c:
42:24:65:65:da:15:5b:22:2a:7e:7d:bd:32:c5:33:dd:5d:71:
72:d1:71:45:2a:8c:82:dc:80:8f:9b:d0:d1:b0:10:d7:8d:9e:
03:31:37:a2:01:ad:3d:57:af:a8:73:0f:94:eb:60:9d:9c:11:
7c:b2:5d:36:45:4a:6a:70:77:35:17:5c:73:c8:d3:39:c7:7d:
4d:04:e5:cf:ae:9a:e0:ed:75:56:e0:44:cb:42:ae:86:7d:6c:
ad:6d:f6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 15:57:32 2025 by rpki-client