Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d87751e7-e3bd-3a52-afbd-31f83000f298.roa
File: d87751e7-e3bd-3a52-afbd-31f83000f298.roa (raw, json)
Hash identifier: 6I0hV9i7G1IjlC6+ggFUOVkQ/59ePlxt1MvlCytOgBk=
Subject key identifier: BD:9C:1B:22:D0:CB:76:0C:F1:DF:6C:D5:37:F1:C6:F8:1C:3C:7C:1A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285844CDC00DC0199501F31A72F6C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d87751e7-e3bd-3a52-afbd-31f83000f298.roa
Signing time: Tue 06 Feb 2024 17:46:49 +0000
ROA not before: Tue 06 Feb 2024 17:46:49 +0000
ROA not after: Mon 06 May 2024 16:46:49 +0000
asID: 7018
IP address blocks: 50.114.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:cd:c0:0d:c0:19:95:01:f3:1a:72:f6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 6 17:46:49 2024 GMT
Not After : May 6 16:46:49 2024 GMT
Subject: CN=e8cf9cff-0061-4709-a9c0-2b04015b9b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:f8:be:de:d3:42:ea:76:b6:1a:25:8a:f2:
f0:cc:03:7a:dc:a5:8c:94:eb:c0:87:57:25:0c:06:
c0:c8:f6:2f:55:c8:5b:82:65:96:5c:9b:00:a3:73:
19:4a:34:9e:4f:2f:bf:6c:f6:84:e5:15:b9:b0:3d:
b6:fd:f0:c5:86:48:36:cd:48:c6:dd:a6:1e:7e:8a:
c2:cb:2b:91:27:e6:5e:5b:83:ab:6c:65:ce:a1:54:
6a:4a:2c:03:5b:a9:ab:29:6e:32:42:4c:98:1c:88:
5c:5a:a9:a3:23:d6:4f:50:c3:98:38:e0:66:69:8a:
bd:4c:b9:5d:53:18:88:fe:a4:3f:3a:11:91:cd:cd:
85:d0:1b:42:2f:0b:2e:6b:ce:ea:5f:3d:9c:54:45:
fe:46:a3:36:79:aa:30:35:0c:a4:18:44:5c:a6:07:
33:66:6c:91:a1:ec:12:80:77:f8:57:12:3c:5b:db:
6e:d0:6e:cd:a0:0a:08:3a:0f:cc:74:de:06:3c:ed:
74:ad:02:e1:a4:0f:3a:34:20:83:8d:c6:25:e3:aa:
74:f4:82:1f:02:8f:4e:09:6f:2a:a7:09:26:07:a8:
2d:45:78:01:38:cc:d3:2a:7d:35:ad:30:1b:99:13:
1b:79:12:3c:7f:35:fa:15:06:e0:f9:f9:59:cd:3b:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9C:1B:22:D0:CB:76:0C:F1:DF:6C:D5:37:F1:C6:F8:1C:3C:7C:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d87751e7-e3bd-3a52-afbd-31f83000f298.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:8c:31:35:bc:51:b3:53:fd:d0:3c:d1:11:0b:34:00:80:a0:
a0:07:e0:5a:22:12:76:52:16:84:8d:e7:42:27:b6:e0:bb:62:
1d:70:38:1f:f6:df:76:d1:86:79:47:c1:94:1b:bf:57:c9:ea:
23:80:42:c3:ff:0e:22:b7:5c:b4:e3:20:76:b5:25:8f:7f:b1:
98:5d:7d:fb:b2:c7:fc:fb:72:13:62:20:c5:75:b4:aa:e7:f1:
50:d4:86:e6:5c:65:66:47:10:db:8d:dd:62:df:d6:85:f6:47:
b8:08:94:b3:4a:6f:6f:f9:4d:7f:5b:7d:8f:26:b9:23:3e:ca:
43:5a:a6:81:07:c2:91:b2:23:c6:77:8f:a1:2e:2c:67:46:d7:
57:bd:ff:aa:70:77:fc:8e:5d:b4:d2:fa:40:32:84:e0:a4:f4:
8a:88:5b:df:25:54:ef:f9:72:ad:c4:df:77:8f:55:cc:13:f2:
19:a1:9d:d3:cd:3e:25:a0:cc:23:de:43:93:76:a6:09:04:dc:
27:bb:8d:87:12:2d:64:5c:77:31:84:f1:f6:60:91:e8:ce:f9:
ca:8d:1e:4c:79:ed:1c:7f:b3:22:cd:41:92:8d:0a:d6:51:d0:
ff:61:7f:97:20:23:e1:be:32:ad:5f:cc:51:6b:59:24:67:42:
9b:cf:41:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:32:18 2025 by rpki-client