Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8ce5a469-4b36-3afe-9bce-afc421c46641.roa
File: 8ce5a469-4b36-3afe-9bce-afc421c46641.roa (raw, json)
Hash identifier: GS49H2B+ER1nGGmLjk8d0zKs3mxZQSng5OB7/vUPqZA=
Subject key identifier: 04:DD:76:9E:51:50:D8:10:69:17:2E:E4:04:3B:AE:AB:C5:27:73:02
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285845F8258B19885AF94E7EC63600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8ce5a469-4b36-3afe-9bce-afc421c46641.roa
Signing time: Thu 23 May 2024 15:02:11 +0000
ROA not before: Thu 23 May 2024 15:02:11 +0000
ROA not after: Wed 21 Aug 2024 15:02:11 +0000
asID: 9009
IP address blocks: 50.114.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:f8:25:8b:19:88:5a:f9:4e:7e:c6:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 23 15:02:11 2024 GMT
Not After : Aug 21 15:02:11 2024 GMT
Subject: CN=8b816bb4-2ff5-4375-8f40-191594cff3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a8:c1:8c:84:11:9a:c1:0b:31:7c:f6:e7:8d:
3e:d9:be:1d:9b:de:de:06:d2:cc:a1:fe:f4:fc:4a:
b9:3e:63:35:20:fa:cb:99:ea:51:b4:1c:08:a6:5c:
9b:bf:dd:5b:9e:ee:c0:71:81:d8:e0:40:cb:b8:de:
8d:d5:84:f2:46:62:96:47:10:c2:33:11:b2:b8:ed:
7e:cd:c8:2f:fe:e4:50:c6:e4:17:33:f2:f7:17:9c:
0f:97:94:a1:81:0e:e8:c4:a9:a9:77:1e:58:4c:9a:
09:ef:bd:fe:e6:79:d7:34:15:36:af:b9:f2:bf:05:
60:5b:d8:2d:27:14:a3:a2:30:01:f4:38:2b:c5:3d:
9f:a2:5c:65:10:3a:46:12:ba:08:44:60:08:de:63:
bc:9d:10:db:e4:24:5e:52:52:1c:27:36:40:67:c8:
26:77:55:9b:00:e5:44:f9:ee:3e:ca:70:ad:4f:93:
e8:5b:0b:e2:49:f2:06:38:a5:69:63:4b:c7:b7:82:
42:a9:e6:b3:b3:ac:1b:45:6e:4b:cd:aa:e7:4a:02:
e9:17:65:9c:9a:16:b8:ed:dc:7d:69:45:53:37:fb:
c2:c3:72:d1:8d:17:92:c9:02:66:7a:e9:0b:ff:74:
e0:89:da:40:35:c3:63:0f:44:c1:bd:1b:67:7f:6d:
b3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DD:76:9E:51:50:D8:10:69:17:2E:E4:04:3B:AE:AB:C5:27:73:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8ce5a469-4b36-3afe-9bce-afc421c46641.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:13:a4:20:82:bc:57:86:f9:d6:e1:99:79:be:d7:47:17:d1:
de:ba:eb:2d:10:53:bb:59:04:32:29:9d:d9:24:4c:e3:b5:d0:
93:2c:15:39:77:e0:b0:ca:5b:92:08:a2:bb:f8:f7:4c:cc:05:
33:cd:ec:b6:42:31:34:34:02:0f:5b:b0:93:e1:a5:11:9c:a3:
d5:42:2e:28:03:45:1d:00:9f:b1:57:92:7b:76:1b:9f:5b:c6:
7b:38:f4:a6:e4:4a:f9:b0:ab:d0:26:0a:03:a9:37:0c:4d:27:
96:02:23:6f:28:3d:38:2b:38:90:ea:02:61:09:b4:42:d3:ea:
fd:40:4b:d8:25:ba:d5:60:7f:d7:e9:e8:6b:33:a0:1f:ba:c1:
c3:03:6b:1d:b9:cb:9a:c4:a4:de:88:fe:77:bb:f2:77:c8:21:
cf:d6:00:e1:31:ad:62:7f:ec:9f:64:f8:bb:6e:40:af:3a:04:
ad:72:7b:43:51:df:15:ed:6c:17:ee:b8:63:87:24:10:53:b8:
c0:39:54:69:6d:cb:db:fb:85:1d:47:1d:e7:f5:18:ac:98:03:
f5:94:62:cc:cf:54:6e:c8:d5:67:ca:f7:e9:e9:ab:63:c7:a0:
d1:01:6b:e5:6d:42:a8:df:4e:34:c4:79:88:87:29:26:c0:ea:
13:50:63:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEX4JYsZiFr5Tn7GNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDUyMzE1MDIxMVoXDTI0MDgyMTE1MDIxMVowLzEtMCsGA1UEAxMk
OGI4MTZiYjQtMmZmNS00Mzc1LThmNDAtMTkxNTk0Y2ZmM2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6jBjIQRmsELMXz2540+2b4dm97eBtLMof70
/Eq5PmM1IPrLmepRtBwIplybv91bnu7AcYHY4EDLuN6N1YTyRmKWRxDCMxGyuO1+
zcgv/uRQxuQXM/L3F5wPl5ShgQ7oxKmpdx5YTJoJ773+5nnXNBU2r7nyvwVgW9gt
JxSjojAB9DgrxT2folxlEDpGEroIRGAI3mO8nRDb5CReUlIcJzZAZ8gmd1WbAOVE
+e4+ynCtT5PoWwviSfIGOKVpY0vHt4JCqeazs6wbRW5LzarnSgLpF2Wcmha47dx9
aUVTN/vCw3LRjReSyQJmeukL/3TgidpANcNjD0TBvRtnf22zrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFATddp5RUNgQaRcu5AQ7rqvFJ3MCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOGNlNWE0NjktNGIzNi0z
YWZlLTliY2UtYWZjNDIxYzQ2NjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABwTpCCCvFeG+dbhmXm+10cX0d666y0QU7tZBDIpndkkTOO10JMsFTl3
4LDKW5IIorv490zMBTPN7LZCMTQ0Ag9bsJPhpRGco9VCLigDRR0An7FXknt2G59b
xns49KbkSvmwq9AmCgOpNwxNJ5YCI28oPTgrOJDqAmEJtELT6v1AS9glutVgf9fp
6GszoB+6wcMDax25y5rEpN6I/ne78nfIIc/WAOExrWJ/7J9k+LtuQK86BK1ye0NR
3xXtbBfuuGOHJBBTuMA5VGlty9v7hR1HHef1GKyYA/WUYszPVG7I1WfK9+npq2PH
oNEBa+VtQqjfTjTEeYiHKSbA6hNQY14=
-----END CERTIFICATE-----
Generated at Sun Mar 23 20:13:59 2025 by rpki-client