Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/baa8cea1-ac45-3b32-a97a-a0b5c3fdc0bb.roa
File: baa8cea1-ac45-3b32-a97a-a0b5c3fdc0bb.roa (raw, json)
Hash identifier: k3IMxmOS0yBwkOU6S14+4NcJmCWaqHGtY7UsemCUWBU=
Subject key identifier: 46:B8:3E:2F:F3:98:C8:CF:8D:1B:CD:0F:4B:AB:CC:4C:C7:D3:5A:AA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846047933C57952B1C9A2D06500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/baa8cea1-ac45-3b32-a97a-a0b5c3fdc0bb.roa
Signing time: Tue 28 May 2024 01:00:25 +0000
ROA not before: Tue 28 May 2024 01:00:25 +0000
ROA not after: Mon 26 Aug 2024 01:00:25 +0000
asID: 40409
IP address blocks: 50.114.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:04:79:33:c5:79:52:b1:c9:a2:d0:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 28 01:00:25 2024 GMT
Not After : Aug 26 01:00:25 2024 GMT
Subject: CN=bab19024-13ad-491e-80b6-48bd131d059d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:d4:38:94:ae:c6:36:f8:5b:be:b0:51:2e:
31:5b:f8:52:38:ab:03:2d:22:42:16:a7:c0:d5:53:
40:fd:0f:7d:9d:b8:a0:43:d1:e1:a1:8f:58:6b:9b:
11:f0:ae:fc:d2:fb:5d:e8:63:ea:4d:7f:fc:54:d3:
d1:e3:50:6c:3d:05:21:e1:7f:57:b5:ff:98:2e:92:
ab:88:9d:da:6b:be:83:c4:b0:bd:dd:cc:8d:84:2c:
73:50:5b:63:b8:89:ac:3f:6c:fc:f5:03:d4:d0:46:
66:df:41:b4:fa:26:08:f6:86:a0:cc:17:d5:ec:2e:
9d:54:19:22:52:61:c7:9b:64:15:ab:b2:c0:0d:fb:
5a:e4:9f:f3:fc:6c:0c:51:4e:cf:80:f8:0c:3d:20:
26:bf:a2:5e:73:04:12:40:c0:2b:08:5f:cf:c6:91:
b8:06:6a:d4:a7:54:5a:31:a2:47:ca:a5:6c:bc:ac:
e3:3e:b5:c4:59:7d:43:34:bf:58:d8:d0:a3:c1:e1:
27:e4:dd:b3:d7:4e:79:4b:38:7f:0c:ea:d7:5c:38:
a5:7f:1d:fa:1c:ca:f2:10:31:15:c2:55:8f:1c:67:
53:b9:3e:4b:f9:f1:07:74:30:c8:b1:dd:00:57:8e:
77:fc:29:7b:d1:3e:27:9c:09:1c:60:a8:13:e9:bb:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B8:3E:2F:F3:98:C8:CF:8D:1B:CD:0F:4B:AB:CC:4C:C7:D3:5A:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/baa8cea1-ac45-3b32-a97a-a0b5c3fdc0bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:e7:b0:3a:3d:6e:56:74:ae:09:8a:cf:13:3e:24:5b:dc:c4:
14:7e:57:9d:91:e2:06:08:31:e9:88:73:ab:61:ea:cd:1c:41:
34:54:58:76:61:00:fc:52:2e:a4:25:ed:6a:2a:82:bf:58:4c:
f3:17:d0:eb:5d:ac:fa:ae:f5:b7:1b:45:51:0f:9a:7e:07:7b:
a2:0f:8f:06:15:35:e2:28:66:a9:0c:46:9d:1f:d3:20:74:10:
27:d6:be:69:24:90:ca:70:15:a9:57:ee:7a:68:f7:4e:4f:29:
63:f9:ca:45:6e:3f:04:63:67:04:39:32:cf:37:f3:44:6f:cc:
2a:eb:6d:4a:8f:a1:c4:e5:47:76:ab:91:4e:0a:75:f3:da:cc:
b4:f7:ab:14:fe:59:df:10:09:2c:7a:20:d7:00:9e:83:0c:cc:
e2:d9:b6:35:3e:6e:fc:50:53:29:cc:b9:15:d8:5f:5a:91:10:
c9:43:38:36:c3:48:7e:d5:5d:f1:11:4b:e7:ea:89:72:bc:13:
64:56:af:ab:2c:c3:7d:2e:d5:3d:ed:30:04:7a:2e:59:7b:61:
35:e7:08:94:d4:bc:97:1a:82:b7:ff:f9:97:b6:22:88:48:47:
65:6c:a8:33:70:18:55:01:24:f7:c4:08:c8:61:58:37:3e:71:
68:7b:1c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 15:27:42 2025 by rpki-client