Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d7b38ea8-a92c-3e2a-9056-c5b7889a3fae.roa
File: d7b38ea8-a92c-3e2a-9056-c5b7889a3fae.roa (raw, json)
Hash identifier: 2rCj1JXruaeKYV6v4cJaR6Lkyapu1jIv+yl2QMzTJ8Q=
Subject key identifier: C3:8E:93:7D:5E:C7:C8:7F:5E:45:E5:78:9A:5F:D9:49:92:9C:D4:C6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858486A1F2A6D5E0EEC89AFBE6E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d7b38ea8-a92c-3e2a-9056-c5b7889a3fae.roa
Signing time: Thu 02 Jan 2025 20:25:22 +0000
ROA not before: Thu 02 Jan 2025 20:25:22 +0000
ROA not after: Wed 02 Apr 2025 19:25:22 +0000
asID: 11798
IP address blocks: 50.114.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:1f:2a:6d:5e:0e:ec:89:af:be:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 2 20:25:22 2025 GMT
Not After : Apr 2 19:25:22 2025 GMT
Subject: CN=7b1ae8fa-db06-4de9-b2b9-e0619c11f037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d5:fd:57:e3:e2:44:53:5a:b0:9d:61:aa:0d:
d9:4c:14:d7:a3:62:fa:63:89:ee:3a:ab:25:94:0e:
3f:bd:7d:25:8d:e1:bd:f4:b7:8c:22:93:84:33:75:
72:e0:18:c9:ba:3b:d5:8b:a4:81:c3:66:b9:23:3a:
dd:61:26:4a:6a:75:0f:8f:36:d3:aa:7c:a7:df:de:
7a:6b:c0:9b:14:59:a9:1a:4d:aa:e6:e3:f3:99:89:
c8:c9:20:5f:f8:62:23:e0:fe:71:ff:04:89:bf:a6:
11:2e:7c:c9:96:ce:47:c0:0f:60:d4:57:b4:d7:29:
27:9b:89:f1:69:51:a3:1f:06:06:b5:65:4e:24:4a:
6b:92:3b:b7:a0:fe:24:a3:63:a0:1b:09:8b:33:95:
ba:b0:3a:13:4b:49:1e:27:18:89:6a:c6:38:8f:5f:
41:1c:97:c5:2f:c4:5e:24:3d:07:bf:96:f9:0d:71:
ec:22:f6:bf:0f:69:c3:64:2a:d3:e5:e0:ac:dd:bb:
5b:7b:45:ae:6b:f5:e3:9f:f0:b0:9f:38:00:3f:c1:
9f:92:36:fc:43:3b:4e:57:3c:d7:18:fa:ab:3f:83:
66:14:3f:83:f8:44:04:cf:b6:e0:70:f3:d6:e6:40:
22:f9:c2:7b:18:0f:cb:4b:d2:9c:02:17:44:f3:b3:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8E:93:7D:5E:C7:C8:7F:5E:45:E5:78:9A:5F:D9:49:92:9C:D4:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d7b38ea8-a92c-3e2a-9056-c5b7889a3fae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:33:a9:c8:33:a0:27:04:c4:dc:34:28:b1:2f:c4:e1:04:44:
cf:04:64:38:fd:17:50:a5:72:68:92:2b:a5:62:86:7f:18:46:
8a:bc:da:6f:e9:a1:ea:38:d5:34:1c:64:6e:c0:2d:1c:49:0b:
52:4e:44:4e:fc:69:95:01:fb:83:ea:4e:79:93:24:19:0d:0d:
f4:4d:4a:5a:55:78:0a:7f:f3:58:5b:52:7d:89:0f:54:ee:d9:
5e:a6:75:1f:a1:ed:6c:e6:c5:4e:58:21:f4:67:ee:78:ba:a5:
7d:48:fe:5d:b3:4b:49:a6:6e:c2:e3:fe:a8:a3:15:d3:5d:1a:
78:84:23:1b:87:7f:f0:88:1c:e3:b2:ff:e4:4f:aa:8b:59:c5:
d3:1b:74:03:44:c3:ff:32:15:b9:75:b2:13:3c:de:0d:c4:26:
e7:d9:d1:b8:4f:1e:b4:e0:65:b0:a1:fc:7c:f7:b7:72:63:dd:
99:ba:47:aa:00:75:9c:ba:e7:85:e5:7d:d5:c7:aa:88:d4:3a:
91:58:9f:8a:67:9c:e4:3d:27:0a:1d:9a:07:48:f6:fd:a8:38:
5a:ef:a3:8d:92:8e:59:24:50:56:b3:a1:60:0a:c0:f5:f1:88:
12:b8:df:a8:ec:12:8d:94:ae:4d:89:7c:6d:41:0c:1c:6e:a3:
57:23:fd:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhqHyptXg7sia++boAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDEwMjIwMjUyMloXDTI1MDQwMjE5MjUyMlowLzEtMCsGA1UEAxMk
N2IxYWU4ZmEtZGIwNi00ZGU5LWIyYjktZTA2MTljMTFmMDM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9X9V+PiRFNasJ1hqg3ZTBTXo2L6Y4nuOqsl
lA4/vX0ljeG99LeMIpOEM3Vy4BjJujvVi6SBw2a5IzrdYSZKanUPjzbTqnyn3956
a8CbFFmpGk2q5uPzmYnIySBf+GIj4P5x/wSJv6YRLnzJls5HwA9g1Fe01yknm4nx
aVGjHwYGtWVOJEprkju3oP4ko2OgGwmLM5W6sDoTS0keJxiJasY4j19BHJfFL8Re
JD0Hv5b5DXHsIva/D2nDZCrT5eCs3btbe0Wua/Xjn/CwnzgAP8Gfkjb8QztOVzzX
GPqrP4NmFD+D+EQEz7bgcPPW5kAi+cJ7GA/LS9KcAhdE87PUCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMOOk31ex8h/XkXleJpf2UmSnNTGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDdiMzhlYTgtYTkyYy0z
ZTJhLTkwNTYtYzViNzg4OWEzZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnIJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkzqcgzoCcExNw0KLEvxOEERM8EZDj9F1ClcmiSK6Vihn8YRoq82m/p
oeo41TQcZG7ALRxJC1JORE78aZUB+4PqTnmTJBkNDfRNSlpVeAp/81hbUn2JD1Tu
2V6mdR+h7WzmxU5YIfRn7ni6pX1I/l2zS0mmbsLj/qijFdNdGniEIxuHf/CIHOOy
/+RPqotZxdMbdANEw/8yFbl1shM83g3EJufZ0bhPHrTgZbCh/Hz3t3Jj3Zm6R6oA
dZy654XlfdXHqojUOpFYn4pnnOQ9JwodmgdI9v2oOFrvo42SjlkkUFazoWAKwPXx
iBK436jsEo2Urk2JfG1BDBxuo1cj/Rs=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:03:40 2025 by rpki-client