Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70c85bb9-be68-3f3b-8e5a-767790b506ac.roa
File: 70c85bb9-be68-3f3b-8e5a-767790b506ac.roa (raw, json)
Hash identifier: /HU58X7BeIyav7uPZUYkLjQxAA+1OqQaR/Ie7GDe2IU=
Subject key identifier: 1B:32:A3:82:65:3F:CD:0F:1B:CC:4D:E2:FB:64:4D:B0:EB:4D:B9:C7
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858480BDA7D1FB88C75955D406AD0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70c85bb9-be68-3f3b-8e5a-767790b506ac.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 7018
IP address blocks: 50.114.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:7d:1f:b8:8c:75:95:5d:40:6a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=9297a9e6-f165-4bcd-a07a-abecfd51b9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7d:3d:62:33:5f:9b:82:bd:e0:17:15:3d:b0:
09:5b:24:74:ec:2c:a7:e4:ba:2b:06:c0:78:fc:f1:
33:08:c6:4f:3d:b0:5e:ab:30:ea:eb:4a:12:66:76:
1a:d5:70:f9:53:03:e5:12:14:b3:ad:6e:76:f5:ec:
4f:5b:9c:10:64:cc:5a:07:1a:56:44:78:7a:35:d1:
22:d0:6d:92:b2:49:61:45:53:89:5f:59:3d:b7:a9:
7e:aa:77:e3:52:75:ca:b4:4c:dd:3e:e0:c4:37:60:
a4:76:c3:cb:0d:05:63:1a:be:84:2f:1f:74:8d:ec:
bf:26:83:de:51:e0:2c:a5:89:92:a2:18:98:22:58:
5d:3d:92:4c:e2:fe:ba:e7:69:3b:50:1b:f5:db:da:
16:75:3f:22:30:09:4f:65:1c:29:d8:17:f3:52:81:
74:15:e5:9c:d4:6d:88:5e:80:40:09:83:61:03:61:
e8:25:3f:04:8a:15:fd:dc:91:5f:91:90:aa:6a:6e:
7f:59:bf:be:52:ec:3e:97:3a:48:11:07:06:5a:ce:
5d:e2:63:03:7e:68:67:8f:86:5d:71:97:5a:64:c5:
e6:f8:d5:74:1e:a5:53:97:ea:0b:bf:93:1c:0f:ec:
7b:19:1b:7b:4c:92:f6:f8:ff:99:7d:1e:00:7d:be:
ab:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:32:A3:82:65:3F:CD:0F:1B:CC:4D:E2:FB:64:4D:B0:EB:4D:B9:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70c85bb9-be68-3f3b-8e5a-767790b506ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:b9:25:e2:ec:36:88:e8:3a:78:63:00:29:11:2e:2d:94:d0:
40:f9:16:51:17:9f:50:dc:14:d0:64:16:e8:83:3d:97:3a:29:
ae:38:d2:fd:a3:b7:f4:4e:3d:16:12:34:a6:f4:ab:5d:2e:c5:
7c:85:70:a6:4b:7e:a0:00:a1:ef:e2:fc:51:8b:25:40:c6:13:
de:57:09:15:dc:a0:3a:49:aa:87:80:e1:f1:d0:21:34:63:d5:
e4:62:cc:2a:d4:f7:6f:08:b8:26:4c:e9:02:96:2f:6c:19:da:
38:af:e8:be:0e:55:5c:93:64:02:28:5c:f1:b2:92:f1:f2:75:
20:c7:29:d8:3e:94:42:5f:0c:6e:5f:37:86:35:56:c4:e9:d2:
b9:12:02:a3:c3:9f:04:41:fb:7d:c3:c7:1f:bd:8d:80:69:e3:
01:b8:60:f5:72:f4:f4:18:c9:54:d1:75:5b:4b:44:38:ad:4f:
9d:a4:0f:3b:8d:b4:1e:9b:fd:0f:cb:3d:5f:36:78:59:ad:a7:
0f:da:c8:63:74:9d:76:83:56:2a:0f:25:07:ce:8f:b9:2f:9a:
fb:5e:35:80:69:5d:60:d7:eb:12:af:d6:14:02:97:3a:65:5a:
5e:fc:bd:71:92:5e:71:de:9f:25:40:24:13:28:3a:b0:1e:dc:
20:eb:3e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:25:43 2025 by rpki-client