Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9624598a-79c0-34ba-b6f3-476dedc8cd65.roa
File: 9624598a-79c0-34ba-b6f3-476dedc8cd65.roa (raw, json)
Hash identifier: fw8GpPjKjfPV4FVHxqRPtsrtbZ3sqtKcF6goU/GEr9M=
Subject key identifier: 93:AB:A2:A7:A6:78:B4:AF:5C:B5:18:F9:0C:CB:57:16:DA:A3:29:9C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285845F8258B27A2AE2033F3C7FF00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9624598a-79c0-34ba-b6f3-476dedc8cd65.roa
Signing time: Thu 23 May 2024 15:02:11 +0000
ROA not before: Thu 23 May 2024 15:02:11 +0000
ROA not after: Wed 21 Aug 2024 15:02:11 +0000
asID: 9009
IP address blocks: 50.114.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:f8:25:8b:27:a2:ae:20:33:f3:c7:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 23 15:02:11 2024 GMT
Not After : Aug 21 15:02:11 2024 GMT
Subject: CN=9950a373-5412-402e-bfc6-fcc1ea204137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f7:a2:e4:1f:c6:6d:6e:59:3c:23:00:fc:25:
d3:02:f0:7b:ff:6f:2f:dc:d7:3d:15:d1:52:c2:7c:
0f:24:9c:21:62:c2:1c:d0:70:a3:d9:fe:20:31:76:
c8:8e:25:21:28:80:20:fa:df:b4:60:b1:c3:db:a9:
43:03:43:12:14:76:70:15:ef:01:ff:cc:d7:2d:0a:
bd:5a:81:ec:51:41:da:d8:e5:98:b6:f8:e0:19:5a:
fa:a3:e6:bf:ba:92:f2:1c:09:13:fb:89:5d:93:bf:
36:d7:3e:c6:be:c4:2b:46:3e:bd:95:b6:c2:23:e1:
52:65:38:b3:85:0c:52:9c:3f:a8:4e:c4:d5:c5:1e:
ae:4c:c7:43:e5:45:7e:be:c5:23:1e:b5:f7:22:c0:
84:0a:1e:ae:e5:e9:0a:fc:8b:23:10:90:c0:ac:d4:
88:ed:5a:7e:13:12:5a:97:af:a0:b1:ac:10:b9:9a:
2f:d5:ab:3e:ee:13:d7:14:b7:67:b7:32:e8:c6:c2:
f0:db:cb:3f:d7:2d:e9:61:48:1b:1b:3d:1a:74:ae:
0b:4a:ef:05:b2:22:d2:2b:34:9f:be:eb:4b:75:5b:
0e:6e:8e:6c:83:5b:84:76:5d:ae:36:78:0f:f9:6b:
05:c0:f0:0c:37:4f:4d:42:dd:3a:7a:65:93:7f:b2:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AB:A2:A7:A6:78:B4:AF:5C:B5:18:F9:0C:CB:57:16:DA:A3:29:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9624598a-79c0-34ba-b6f3-476dedc8cd65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:42:93:71:d9:0a:7c:2e:cf:6d:b3:7e:94:09:8b:a5:07:0d:
50:de:cb:d5:7f:10:9f:b8:fc:43:cd:42:17:f8:a5:9b:fc:73:
67:74:fb:cc:78:79:47:c2:75:3d:89:3a:a0:c4:37:87:f1:30:
02:76:df:c2:68:c0:23:c8:95:90:61:ce:1c:a0:5e:3b:7a:53:
54:84:f4:78:9f:80:df:2c:27:ed:9a:22:c3:3f:aa:ef:55:eb:
92:54:a1:a3:1b:67:2e:ad:37:57:8d:c7:03:2f:ab:1d:bd:f4:
99:84:03:e5:ac:fd:e9:b1:2e:42:80:0d:8d:bc:92:c5:cd:ff:
ef:92:65:f9:4b:a3:6b:ec:99:fa:fb:79:73:ac:41:6c:15:82:
53:39:66:13:0d:b5:4b:0d:9f:60:01:6f:7f:46:54:aa:c6:c7:
c6:f5:4d:5c:d3:e7:29:b4:8f:ac:eb:55:3f:a3:86:a9:c4:61:
a8:79:bc:0c:9a:12:61:a2:97:c3:8f:06:84:ed:54:fc:d2:03:
7a:fa:95:93:f1:90:8a:35:81:04:b3:c6:4b:2e:21:0e:ad:28:
85:a1:79:f3:6d:86:55:4d:6c:a0:d5:e8:c1:da:a1:17:db:66:
0a:71:a8:37:34:32:bd:43:33:ba:b7:9f:e9:24:ae:80:37:1a:
1d:cc:21:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEX4JYsnoq4gM/PH/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDUyMzE1MDIxMVoXDTI0MDgyMTE1MDIxMVowLzEtMCsGA1UEAxMk
OTk1MGEzNzMtNTQxMi00MDJlLWJmYzYtZmNjMWVhMjA0MTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPei5B/GbW5ZPCMA/CXTAvB7/28v3Nc9FdFS
wnwPJJwhYsIc0HCj2f4gMXbIjiUhKIAg+t+0YLHD26lDA0MSFHZwFe8B/8zXLQq9
WoHsUUHa2OWYtvjgGVr6o+a/upLyHAkT+4ldk7821z7GvsQrRj69lbbCI+FSZTiz
hQxSnD+oTsTVxR6uTMdD5UV+vsUjHrX3IsCECh6u5ekK/IsjEJDArNSI7Vp+ExJa
l6+gsawQuZov1as+7hPXFLdntzLoxsLw28s/1y3pYUgbGz0adK4LSu8FsiLSKzSf
vutLdVsObo5sg1uEdl2uNngP+WsFwPAMN09NQt06emWTf7In4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJOroqemeLSvXLUY+QzLVxbaoymcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTYyNDU5OGEtNzljMC0z
NGJhLWI2ZjMtNDc2ZGVkYzhjZDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJ4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIZCk3HZCnwuz22zfpQJi6UHDVDey9V/EJ+4/EPNQhf4pZv8c2d0+8x4
eUfCdT2JOqDEN4fxMAJ238JowCPIlZBhzhygXjt6U1SE9HifgN8sJ+2aIsM/qu9V
65JUoaMbZy6tN1eNxwMvqx299JmEA+Ws/emxLkKADY28ksXN/++SZflLo2vsmfr7
eXOsQWwVglM5ZhMNtUsNn2ABb39GVKrGx8b1TVzT5ym0j6zrVT+jhqnEYah5vAya
EmGil8OPBoTtVPzSA3r6lZPxkIo1gQSzxksuIQ6tKIWhefNthlVNbKDV6MHaoRfb
ZgpxqDc0Mr1DM7q3n+kkroA3Gh3MIRg=
-----END CERTIFICATE-----
Generated at Fri Mar 28 01:59:06 2025 by rpki-client