Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1e4fff4-df7e-3624-adc1-62d70a27f6b2.roa
File: d1e4fff4-df7e-3624-adc1-62d70a27f6b2.roa (raw, json)
Hash identifier: 4qV2yxOJqDeRAIj/zus5k2aoy/xo9C4wnLoD4krp8ZI=
Subject key identifier: A9:F0:61:AE:9F:C3:6E:78:74:51:8A:F8:27:30:49:73:2E:C5:17:BD
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584810AE72BFD4A68E0FA7469500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1e4fff4-df7e-3624-adc1-62d70a27f6b2.roa
Signing time: Sun 01 Dec 2024 19:31:19 +0000
ROA not before: Sun 01 Dec 2024 19:31:19 +0000
ROA not after: Sat 01 Mar 2025 19:31:19 +0000
asID: 834
IP address blocks: 50.114.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:ae:72:bf:d4:a6:8e:0f:a7:46:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 1 19:31:19 2024 GMT
Not After : Mar 1 19:31:19 2025 GMT
Subject: CN=3a665226-b0b7-4302-9319-af3fadba0414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:19:85:7c:40:7f:c1:0b:14:f8:0f:81:86:
08:bb:60:fa:6a:b6:91:84:17:db:24:3b:c3:9f:51:
ab:c9:fb:5c:ba:11:96:1f:0d:a7:29:c7:2d:70:e0:
4d:15:b3:b5:51:96:94:ec:c5:d7:4d:e7:20:76:ba:
2a:5a:5e:a4:03:60:79:b6:51:5e:39:e2:54:a6:ee:
83:5d:67:d1:52:ce:be:96:37:ba:08:e8:10:fa:b4:
ac:84:21:59:30:47:18:9b:23:17:07:a7:2c:4e:dd:
12:79:62:5e:13:5e:c3:48:13:28:b0:fd:64:1e:19:
20:1b:83:0a:cb:5d:26:d9:e1:61:9e:a4:12:e8:90:
3e:52:44:f3:8e:ea:8c:60:c3:77:a7:78:d1:29:78:
2b:5f:bd:0b:95:3b:24:c1:f1:57:d0:2e:82:73:ec:
0d:56:b3:d4:67:c8:7c:df:3c:b3:19:b4:7c:40:3d:
21:9b:0f:8d:bc:09:28:87:3c:12:11:a3:78:8a:e7:
6b:7b:72:bc:4e:35:63:79:6c:64:aa:5d:3a:4e:10:
ee:bd:76:e5:ae:f7:6c:c0:31:bc:ff:66:aa:3b:d3:
63:73:c6:45:6b:5d:a9:61:a3:2a:12:8b:9f:60:63:
f3:42:90:16:93:c8:9c:04:45:0d:a1:b0:73:17:89:
56:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F0:61:AE:9F:C3:6E:78:74:51:8A:F8:27:30:49:73:2E:C5:17:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1e4fff4-df7e-3624-adc1-62d70a27f6b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:70:b2:db:78:39:86:2e:af:65:94:ad:ff:de:60:cd:62:43:
fe:af:27:a7:34:52:0a:e0:d7:79:cc:f1:04:d1:95:12:7c:49:
f8:3a:7d:f2:22:93:57:af:b1:d9:fa:14:c9:b4:9c:b1:9a:86:
0b:48:39:e5:6c:8d:f9:f9:c8:82:75:9c:03:42:ab:15:a2:e4:
31:0d:28:7a:6a:af:29:19:33:af:44:3d:12:87:a3:6f:ec:07:
43:6d:dc:fa:47:f8:6c:79:a4:fa:2f:14:2b:71:70:36:62:76:
01:12:df:79:44:e4:9e:94:07:f2:9a:c6:df:27:a0:78:46:4f:
81:22:1d:31:ef:ac:f5:f7:a3:d3:c2:b9:24:86:02:6c:6c:3d:
95:8e:bb:85:5e:12:ec:5a:e9:9c:63:95:e7:a8:21:a7:2a:e9:
d0:3f:8d:5b:80:f9:ee:65:f9:ca:e2:7a:cb:c7:81:46:45:73:
26:bd:0f:7b:00:7d:af:3b:ba:cb:5e:ab:6e:ad:b0:8b:a6:cb:
d2:74:89:ff:01:72:cd:c6:a7:da:32:da:2b:42:f1:2f:df:20:
34:65:88:a6:8a:11:a5:f8:cb:6b:70:bd:e2:b4:dd:0e:24:01:
c5:e0:34:55:de:22:f4:86:28:10:25:d7:17:1e:76:49:99:ac:
f1:e7:57:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:59:21 2025 by rpki-client