Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e545d7e3-59e0-3d38-90c2-c43ee8aea0cc.roa
File: e545d7e3-59e0-3d38-90c2-c43ee8aea0cc.roa (raw, json)
Hash identifier: VehBCzsPXiYZv9eTtT2dEPNTeSzr8HhJfvXVOCHNbSo=
Subject key identifier: 84:68:2B:8B:25:3D:6C:45:B2:4A:FF:CA:88:2F:52:E7:ED:5C:4E:AA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858463289CC170A529B002BA150E8
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e545d7e3-59e0-3d38-90c2-c43ee8aea0cc.roa
Signing time: Thu 13 Jun 2024 13:00:34 +0000
ROA not before: Thu 13 Jun 2024 13:00:34 +0000
ROA not after: Wed 11 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 50.96.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:89:cc:17:0a:52:9b:00:2b:a1:50:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 13:00:34 2024 GMT
Not After : Sep 11 13:00:34 2024 GMT
Subject: CN=7324682a-75ac-4333-ab9d-7f2400cbd54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:db:1a:e3:ab:e4:0a:cc:97:90:03:a1:3b:d0:
4a:a3:91:d3:19:2f:b0:49:22:6a:79:7d:80:8b:93:
f3:dd:c3:58:96:66:75:b6:65:f9:8b:13:76:29:56:
2d:91:ec:62:1e:15:2f:0e:e2:b7:fd:85:9b:8d:8a:
cb:61:4f:d7:24:60:4b:f4:ee:80:91:1b:6c:24:f3:
85:c4:3f:45:0d:1d:11:f1:50:c1:7b:26:d1:90:1a:
3e:7e:8a:a4:a6:17:7c:87:0f:f5:0b:10:d8:4e:89:
50:d5:da:16:dd:0f:63:4e:dd:b6:35:ee:dd:5a:2d:
3a:79:82:70:fb:94:73:0a:ba:c3:fd:70:0d:bb:63:
33:29:52:cb:37:08:cd:d2:e9:7c:98:09:bc:d8:b9:
f8:80:3d:02:73:d7:38:ea:d4:57:65:59:2b:2f:af:
3d:46:bc:4c:14:05:65:14:00:71:71:99:17:67:ce:
fd:fc:5e:4e:6b:63:f2:92:04:ea:a5:d3:e6:9d:dc:
18:1b:42:7b:4a:3b:aa:b8:dd:df:e3:6a:5f:c6:a4:
25:e6:12:63:9c:ae:e2:d7:52:89:6e:a9:90:75:a8:
ac:24:97:86:f3:a6:aa:a3:34:1d:5a:88:40:4c:97:
86:8d:0f:2f:c7:5c:f9:ed:17:ce:4e:6a:4e:9f:73:
48:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:68:2B:8B:25:3D:6C:45:B2:4A:FF:CA:88:2F:52:E7:ED:5C:4E:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e545d7e3-59e0-3d38-90c2-c43ee8aea0cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:f1:83:c4:b6:3d:09:5b:7d:2c:56:ad:75:3a:c6:76:74:77:
88:57:e7:e7:0c:89:37:34:58:b3:b6:46:49:46:c3:d5:a6:8a:
68:32:cc:df:c6:45:0c:06:3a:e4:ff:ee:20:96:61:9d:65:90:
37:51:6e:2e:56:00:c6:da:23:60:5f:b0:a7:b7:a9:d8:41:ee:
e2:d3:a2:28:ad:4f:9b:cf:51:5f:3a:0d:e7:0d:7b:57:ee:d6:
71:86:c8:39:ab:9d:48:b9:21:28:ba:ed:06:21:65:9a:5d:ec:
99:61:25:46:72:b2:05:e9:03:35:c6:4a:39:9b:ed:2c:11:33:
c0:05:3b:ba:57:24:03:9a:38:35:d5:9d:7d:62:f1:ff:9b:6f:
1f:63:fc:42:56:88:8b:78:bd:c4:60:05:d5:1f:07:15:82:d9:
9a:dd:a6:0f:c5:b4:1b:80:f3:ee:3e:2e:c1:99:14:b8:fd:29:
33:47:d5:3a:04:4d:ad:4b:f0:f9:21:4a:e7:82:b3:58:ea:ca:
29:a1:64:fb:ea:ef:c5:09:84:ed:87:d5:25:ad:8f:39:c6:45:
ae:f4:68:2e:85:dd:3d:50:70:df:32:d0:eb:da:be:95:30:64:
ab:45:78:f6:3c:41:dd:b0:63:ea:6d:80:83:dd:ea:1d:d8:e1:
c2:93:45:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYyicwXClKbACuhUOgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDYxMzEzMDAzNFoXDTI0MDkxMTEzMDAzNFowLzEtMCsGA1UEAxMk
NzMyNDY4MmEtNzVhYy00MzMzLWFiOWQtN2YyNDAwY2JkNTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNsa46vkCsyXkAOhO9BKo5HTGS+wSSJqeX2A
i5Pz3cNYlmZ1tmX5ixN2KVYtkexiHhUvDuK3/YWbjYrLYU/XJGBL9O6AkRtsJPOF
xD9FDR0R8VDBeybRkBo+foqkphd8hw/1CxDYTolQ1doW3Q9jTt22Ne7dWi06eYJw
+5RzCrrD/XANu2MzKVLLNwjN0ul8mAm82Ln4gD0Cc9c46tRXZVkrL689RrxMFAVl
FABxcZkXZ879/F5Oa2PykgTqpdPmndwYG0J7SjuquN3f42pfxqQl5hJjnK7i11KJ
bqmQdaisJJeG86aqozQdWohATJeGjQ8vx1z57RfOTmpOn3NI+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIRoK4slPWxFskr/yogvUuftXE6qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTU0NWQ3ZTMtNTllMC0z
ZDM4LTkwYzItYzQzZWU4YWVhMGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmCYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGTxg8S2PQlbfSxWrXU6xnZ0d4hX5+cMiTc0WLO2RklGw9WmimgyzN/G
RQwGOuT/7iCWYZ1lkDdRbi5WAMbaI2BfsKe3qdhB7uLToiitT5vPUV86DecNe1fu
1nGGyDmrnUi5ISi67QYhZZpd7JlhJUZysgXpAzXGSjmb7SwRM8AFO7pXJAOaODXV
nX1i8f+bbx9j/EJWiIt4vcRgBdUfBxWC2Zrdpg/FtBuA8+4+LsGZFLj9KTNH1ToE
Ta1L8PkhSueCs1jqyimhZPvq78UJhO2H1SWtjznGRa70aC6F3T1QcN8y0OvavpUw
ZKtFePY8Qd2wY+ptgIPd6h3Y4cKTRZ8=
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:53:02 2025 by rpki-client