Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1e65860a-dc12-3f65-95e1-191d76a11c92.roa
File: 1e65860a-dc12-3f65-95e1-191d76a11c92.roa (raw, json)
Hash identifier: bqLgt5Ytv0sTK1xuwdtVtzm8CbrXhKUkMuHLpPGCYJE=
Subject key identifier: 81:91:DF:57:3D:A3:E4:5E:6F:01:74:67:58:F4:CC:16:A4:95:04:85
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285844159DD0469E18298F23057BA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1e65860a-dc12-3f65-95e1-191d76a11c92.roa
Signing time: Sat 02 Dec 2023 18:49:05 +0000
ROA not before: Sat 02 Dec 2023 18:49:05 +0000
ROA not after: Fri 01 Mar 2024 18:49:05 +0000
asID: 212238
IP address blocks: 50.114.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:15:9d:d0:46:9e:18:29:8f:23:05:7b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 2 18:49:05 2023 GMT
Not After : Mar 1 18:49:05 2024 GMT
Subject: CN=f16f5a7c-bd3d-4e27-a064-6299367d1fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:7f:63:fc:60:29:72:20:6f:6f:c9:8c:88:
77:1c:07:30:43:0d:42:04:a8:22:5a:33:07:3f:a2:
df:8a:82:1c:78:11:05:5c:8c:7d:b6:91:4d:89:23:
46:92:a0:a1:25:4b:36:e5:5f:47:81:a2:3e:74:19:
96:bd:3e:eb:0c:bd:26:87:27:3f:19:80:d2:d9:c1:
1c:d8:e4:89:a4:9e:4d:3a:d2:4e:aa:84:e1:d5:74:
ee:ee:b7:dd:6b:8c:ff:1a:48:c3:5f:34:c5:b2:2b:
f6:61:69:43:d2:b5:42:a0:ee:d2:4b:ed:9f:d4:93:
62:62:ee:32:43:dd:3a:ab:9f:b7:8b:c8:04:b5:85:
48:18:55:de:c9:fc:c5:4e:0b:17:91:ee:46:22:15:
95:37:14:32:37:29:aa:be:c2:91:a5:9e:ac:56:81:
c8:33:7f:f3:3c:b3:20:5e:f3:09:9c:40:da:5d:68:
d0:50:92:7f:4e:3e:9c:ef:6a:85:29:72:ec:2a:c3:
86:e1:9e:90:1a:c6:2d:ad:f7:99:b8:c8:97:18:4e:
0c:1b:0a:b0:d1:40:92:eb:bd:a9:4e:b6:1e:20:db:
99:0c:4a:c9:db:5d:d2:d1:1d:85:ca:1d:7c:71:7f:
02:86:a6:f9:44:02:44:c4:58:c0:d7:9c:e7:c7:2e:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:91:DF:57:3D:A3:E4:5E:6F:01:74:67:58:F4:CC:16:A4:95:04:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1e65860a-dc12-3f65-95e1-191d76a11c92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:8c:4c:26:fa:a1:07:a9:0a:ce:3b:9a:c9:e5:62:ab:14:ac:
30:91:6f:73:d7:5e:0a:87:0c:25:e6:bc:5a:c7:67:99:fc:d1:
3e:db:16:83:ca:26:7a:3b:ef:33:aa:bc:c0:65:6b:4d:80:4d:
b8:c5:7a:7e:3d:69:b4:9d:20:8a:c4:3f:89:4b:7f:87:a5:5a:
09:5d:94:97:6d:94:d4:26:a5:37:0e:28:ed:b6:fa:e6:f3:f8:
cf:7a:da:ee:3c:c8:a0:7d:e8:da:9f:db:32:36:f2:b2:09:4c:
3e:68:ce:e0:b9:45:87:5e:ae:10:08:46:6d:ba:cb:8b:c3:96:
0f:37:42:a1:2f:83:8b:5b:0a:e1:d1:60:a3:3f:5d:b7:58:5a:
7d:e6:54:62:ec:f6:66:15:16:3b:40:b0:47:ed:27:ea:d9:c0:
ad:c8:5b:08:07:95:65:e2:88:e1:0a:76:12:64:54:93:75:e4:
6b:86:aa:e1:33:b5:52:9d:b3:ba:d5:ae:de:21:0f:e5:e2:eb:
6d:a5:f6:4b:0a:a4:6a:bd:4f:98:ec:a7:4a:3d:a9:aa:e5:3a:
25:cb:f3:15:7b:3b:d7:24:f1:81:a9:dc:b0:4f:80:24:13:a3:
4b:13:18:37:b9:f2:f1:7b:76:ca:3e:5a:f5:32:dc:bc:27:2f:
12:d5:64:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:21:33 2025 by rpki-client