Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4a8c5c99-0c82-3971-b9d4-60ce2fcb8ebd.roa
File: 4a8c5c99-0c82-3971-b9d4-60ce2fcb8ebd.roa (raw, json)
Hash identifier: Cqo2ZwFP3VkUBuvLDeH2fX5d+SwRRMD3rRScipR9Sqw=
Subject key identifier: 23:0E:20:ED:47:1F:A7:51:17:5B:CC:03:AC:74:0E:04:A2:41:AF:88
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858424DE33FB23A6F5C7AE99B3400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4a8c5c99-0c82-3971-b9d4-60ce2fcb8ebd.roa
Signing time: Thu 22 Jun 2023 13:00:19 +0000
ROA not before: Thu 22 Jun 2023 13:00:19 +0000
ROA not after: Wed 20 Sep 2023 13:00:19 +0000
asID: 1239
IP address blocks: 50.114.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:4d:e3:3f:b2:3a:6f:5c:7a:e9:9b:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 22 13:00:19 2023 GMT
Not After : Sep 20 13:00:19 2023 GMT
Subject: CN=7dfc0515-d122-4d2e-99e7-7e6e5d4ee487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:17:02:43:1c:82:13:9c:a0:82:4e:73:20:
46:99:3c:b5:b6:39:41:14:9f:44:d7:38:03:23:18:
e4:2d:0c:71:64:0c:1d:91:1d:c9:f4:d4:97:83:57:
22:d5:1d:05:05:ef:0b:66:9f:9f:99:13:9b:f1:1e:
ca:4b:2f:6b:e9:36:a1:e7:55:5a:2b:7d:7c:88:e8:
72:b7:54:39:1d:cb:8a:3c:b8:c6:a0:fa:e1:9e:20:
ef:b0:70:68:3e:07:69:3a:ad:37:17:81:fa:20:48:
c8:e1:f5:d1:77:1f:61:80:90:5b:69:ce:19:22:bb:
dc:e7:56:aa:1f:a8:4f:b3:bd:1d:8f:6d:d3:f1:19:
99:53:fb:71:1e:f2:cf:0e:13:00:a0:08:f4:d1:09:
41:53:bc:fd:cf:15:47:d6:9f:d5:a2:68:8f:be:a2:
d3:d3:4b:f6:e4:cd:b4:2b:9c:6b:fc:c0:d6:25:f4:
55:7d:99:1f:6b:c4:0f:80:17:99:08:f8:24:ed:24:
31:69:8c:44:01:e8:4a:7d:1f:5e:1f:d0:db:fb:dc:
99:38:7a:d5:39:8f:17:40:bd:25:8e:3b:2f:15:b6:
88:f6:32:42:12:80:e6:aa:aa:89:70:95:fe:09:85:
cc:83:80:5d:11:51:c5:e7:53:1f:cc:bb:24:be:71:
a7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0E:20:ED:47:1F:A7:51:17:5B:CC:03:AC:74:0E:04:A2:41:AF:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4a8c5c99-0c82-3971-b9d4-60ce2fcb8ebd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:1a:d2:0f:0b:04:99:6e:89:2e:59:4d:cb:52:94:b7:5b:38:
65:53:59:10:52:9c:3a:75:bb:7e:55:4a:51:d9:f9:2c:b6:37:
47:d7:ab:19:9a:bb:63:03:cc:e7:d4:23:9a:9b:aa:4f:d4:d6:
5c:bd:34:cb:22:8c:d3:84:5b:3a:84:cf:a1:a3:f5:ed:00:e6:
7e:2d:66:bf:83:7b:a3:d1:4b:32:a8:f2:bc:3f:c7:79:f9:6f:
fd:72:3d:95:43:6a:f3:cc:ab:fb:da:81:25:99:11:28:70:1b:
19:04:71:e0:52:e8:b6:44:e6:a6:2c:71:26:b4:b4:53:49:6e:
32:65:36:f5:f0:2f:a3:3c:51:55:a9:87:63:52:cb:6d:b2:c1:
3b:99:60:92:83:f9:79:50:f7:98:88:27:be:b7:ed:84:00:f4:
7c:a1:3e:0c:0c:83:ac:25:ef:2d:66:17:a3:89:9d:0a:c0:5f:
07:5f:5c:6e:d7:08:7b:0a:fe:73:48:d4:e4:77:6b:1b:27:6a:
4c:25:ff:7e:30:a8:2f:52:0a:ee:39:c1:60:40:6e:01:a7:88:
45:15:b5:dd:83:61:a8:e9:21:aa:81:59:03:a9:27:28:37:7d:
af:04:d3:ce:81:45:c5:56:58:6b:19:b9:2c:0f:c7:aa:98:21:
70:94:28:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:33:39 2025 by rpki-client