Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b25caf8-1ca0-34fc-be5c-2d4aee7cd796.roa
File: 2b25caf8-1ca0-34fc-be5c-2d4aee7cd796.roa (raw, json)
Hash identifier: 7ofQFW1d8ZNJWPK5UQY5bMuRnvjY3jUnjPlV1zmj2m0=
Subject key identifier: 67:51:1A:3D:8B:02:DF:62:D2:01:D2:19:88:EF:51:AD:65:CA:71:8C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584472BD6ADF943F65FBBE681B80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b25caf8-1ca0-34fc-be5c-2d4aee7cd796.roa
Signing time: Fri 05 Jan 2024 03:22:56 +0000
ROA not before: Fri 05 Jan 2024 03:22:56 +0000
ROA not after: Thu 04 Apr 2024 02:22:56 +0000
asID: 7029
IP address blocks: 50.96.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:bd:6a:df:94:3f:65:fb:be:68:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 5 03:22:56 2024 GMT
Not After : Apr 4 02:22:56 2024 GMT
Subject: CN=99d3aa14-e74d-4c4b-bc26-a96eca798b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:da:26:c5:28:10:74:50:e8:84:d8:d4:aa:a8:
7f:fa:51:e2:8b:2d:be:15:6a:b6:75:1a:5f:13:15:
4c:e8:ff:c8:7c:d1:3a:8e:e0:3b:07:d3:df:f7:f0:
5c:68:5c:be:ae:59:38:2c:12:12:0b:4c:d8:8b:7e:
64:ec:23:57:5a:31:78:13:1f:7f:4d:53:f6:1a:99:
da:56:ab:06:d5:7d:d9:1d:ab:23:7a:ea:99:0b:e4:
83:e6:4d:c0:68:45:bc:39:70:48:05:4d:38:e7:5e:
1a:aa:b4:9a:40:33:c1:c1:d7:95:65:96:e1:14:39:
60:6a:8a:c4:e0:62:dd:77:3b:a4:51:f2:86:6a:f3:
71:a5:57:8a:96:8d:7e:73:3f:dd:d9:aa:03:84:9a:
48:da:74:bc:ea:80:79:bd:2f:37:d7:31:22:d8:34:
47:0c:47:8d:8a:8c:25:c1:08:48:03:a9:9c:ba:e8:
ed:6e:9e:0f:d1:73:87:31:3e:16:35:20:3b:41:72:
13:1b:c8:fe:99:2e:20:1f:1d:40:15:74:39:26:25:
3e:3b:4b:3d:ca:a9:b9:e9:82:b3:79:be:f7:3f:ce:
00:25:66:32:b8:c4:08:98:05:02:63:4a:25:d7:eb:
3c:ca:a3:ee:0d:a9:1d:3a:32:7f:5e:81:b6:b6:03:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:51:1A:3D:8B:02:DF:62:D2:01:D2:19:88:EF:51:AD:65:CA:71:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b25caf8-1ca0-34fc-be5c-2d4aee7cd796.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:4a:69:89:03:3e:87:23:0c:91:50:2a:87:7e:4c:a4:cf:3e:
a5:e3:ed:2a:eb:b8:b3:86:4d:58:55:39:68:f2:4b:9e:9b:b0:
a7:a4:6f:97:d8:4b:4a:d0:2e:55:09:97:f5:a1:f1:30:2d:e9:
e1:62:2d:bf:7e:2f:f2:78:7d:93:3e:4f:b5:6e:b2:2b:03:a9:
2a:df:5a:07:be:02:b5:c7:38:87:f4:3f:f3:72:c4:a1:e8:c0:
fb:06:7d:eb:5b:05:e3:80:87:d6:a1:e1:76:8e:21:c6:2b:54:
c7:f7:cd:63:05:40:24:18:e0:28:3f:77:b7:fa:35:24:59:f3:
7f:90:3d:64:99:14:25:9b:64:b8:1a:f9:a0:17:3e:52:0d:e4:
5d:16:01:23:12:9e:e3:6c:67:fe:07:12:a8:54:31:97:99:07:
40:c0:e3:87:94:c6:53:3c:2f:55:64:96:75:e5:f4:ff:01:a2:
fc:7c:af:ff:1c:d2:04:70:c0:20:df:b0:73:75:fa:74:bc:f1:
c6:b0:6c:23:f1:2d:cd:8c:f0:31:5e:df:66:c6:fd:f3:aa:1c:
7d:6e:ca:83:da:83:2a:10:57:4f:26:05:22:4d:8e:05:ff:b9:
5d:d2:f8:e5:9e:54:51:db:e3:31:1a:06:6b:29:c3:ad:05:76:
61:5f:e6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:10:38 2025 by rpki-client