Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad23560b-502a-3050-bc78-08a9194af303.roa
File: ad23560b-502a-3050-bc78-08a9194af303.roa (raw, json)
Hash identifier: o5fLMQyy8HrM1B7oo5wGzyCj9FKCG/xWaKk6H1O+sF8=
Subject key identifier: 93:FF:10:9D:0C:B1:23:2F:B6:E7:56:34:58:44:A0:8D:DE:D6:60:A2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E06FD8CC8BC877EB06F980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad23560b-502a-3050-bc78-08a9194af303.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 50.96.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:6f:d8:cc:8b:c8:77:eb:06:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=8c79b17b-41d9-424a-a31c-ad9f4032773b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:1d:31:62:e3:d1:a1:31:d9:8f:19:e1:68:
f7:a1:67:f4:19:b9:23:e7:0a:d2:ad:3b:b3:7e:7b:
51:ce:d5:98:37:c6:c9:0b:ec:9f:6e:bd:9f:59:08:
f4:7c:17:6d:b7:7d:72:10:eb:8a:65:2c:66:97:9b:
4f:13:da:a8:2d:7c:dc:da:65:cc:5c:07:1a:91:a8:
cb:0b:30:c3:d0:17:5f:6b:79:00:07:0c:d9:26:4e:
65:c8:3c:20:b1:75:6f:52:db:f8:18:88:b0:9b:65:
2b:56:ec:bb:86:10:b8:db:ea:49:d8:18:bb:38:34:
5f:bb:e7:f4:97:8d:70:fa:86:55:31:d7:be:3a:72:
e5:6e:52:67:c5:94:46:a9:53:70:52:20:e6:e7:15:
07:c0:dd:89:ac:fe:9e:02:18:03:22:fb:14:9a:87:
3f:af:fd:0b:38:ed:fd:66:6e:1f:6f:45:64:cc:cc:
0a:2d:06:91:1f:1f:c4:64:da:c2:8f:1d:f9:75:a6:
78:d4:87:19:29:ab:97:6c:1c:a3:96:23:7a:8d:a5:
dd:fd:f5:e0:48:c9:d2:75:7c:3e:cb:3f:6b:e7:e7:
56:c6:bf:93:5d:8b:fd:ea:f3:c2:1d:c0:b5:4b:ef:
b8:ff:e4:e5:3c:6f:1c:be:26:8c:fd:38:74:42:b9:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FF:10:9D:0C:B1:23:2F:B6:E7:56:34:58:44:A0:8D:DE:D6:60:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad23560b-502a-3050-bc78-08a9194af303.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:35:7f:6e:81:ca:e5:1f:9f:b6:a7:cb:8d:3d:ff:b0:eb:1c:
36:83:7b:69:2e:7a:9b:57:c4:03:66:13:d6:45:2e:40:20:6a:
9e:8d:af:ea:04:e7:cc:3b:0f:09:c0:ab:e4:d7:5d:37:18:3b:
14:a9:f9:b6:fb:05:c2:cd:3b:2d:57:50:59:f7:d3:09:50:5e:
eb:85:5c:84:8a:09:e2:de:61:82:a7:c7:87:a3:7c:07:97:29:
12:a0:98:d1:50:69:6e:50:9a:5f:db:9a:a4:6e:64:bc:e4:dd:
a4:2d:76:08:4b:8e:43:28:4c:ef:20:cb:54:98:17:79:93:2e:
05:e3:19:13:04:4a:d9:c0:00:be:29:90:14:e0:de:d8:ac:b8:
46:c2:e1:81:ff:dc:14:c1:a9:07:55:40:df:d7:bb:3f:db:2a:
82:3a:83:a8:32:fd:07:70:f7:e4:20:86:7c:93:a0:3b:c9:8c:
08:84:10:2c:4a:fc:56:3c:5c:01:fe:3f:f1:3d:e4:3c:00:77:
9e:3c:03:d9:45:c5:22:15:1f:02:ac:74:21:3f:81:57:75:36:
86:18:80:db:62:38:cf:11:c9:26:6d:ee:51:64:3e:23:7f:77:
db:a3:d8:e5:be:69:f5:e9:49:5b:2f:71:14:86:96:21:25:81:
24:af:a3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:24 2025 by rpki-client