Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb5fb62e-f82c-37ef-a600-79eb532ca9c6.roa
File: fb5fb62e-f82c-37ef-a600-79eb532ca9c6.roa (raw, json)
Hash identifier: 3iprid2Nxee94ZP+19Y/Gp2Vkhs7UCIFxZVze3kFiIo=
Subject key identifier: 55:61:C4:61:8F:BD:28:23:74:F4:6E:3E:B9:A4:BA:63:D9:98:10:5C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E095A0F8669D34B11C3000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb5fb62e-f82c-37ef-a600-79eb532ca9c6.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 50.96.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:95:a0:f8:66:9d:34:b1:1c:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=c3404f77-bb9e-4d5e-9a65-e2969ad2accf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:7d:c8:56:7d:11:9b:e8:4a:8d:ef:8a:d7:
bb:29:e4:7e:0d:f4:b6:5b:cb:38:08:1a:74:72:0c:
b4:c2:53:e6:ee:bc:6e:f1:40:5b:bf:3d:6d:88:94:
a0:6d:dd:3a:20:0b:18:55:d0:4e:df:cd:aa:b4:fa:
a3:aa:69:b3:df:8c:57:4b:2e:12:e2:e5:79:f7:46:
ff:47:28:05:12:be:a9:ae:d0:ca:46:7f:3a:9b:39:
b8:6a:93:c1:94:a2:4e:5a:16:ec:3e:33:c0:af:dd:
6c:eb:07:37:7f:01:e3:89:a9:0d:a6:41:e7:da:f3:
c4:76:1b:1c:10:94:a9:2e:cc:26:64:0e:05:37:97:
ad:05:6b:dd:f0:93:ca:9b:a7:95:f9:6c:a2:b1:37:
55:da:37:d8:79:75:e9:28:82:7e:3b:f4:9b:8a:c3:
9e:96:8f:52:d8:18:3a:24:68:4e:1d:1c:7f:1c:8e:
39:36:ec:6b:48:29:56:5c:b4:08:7c:8e:9f:54:fd:
a9:82:b9:18:7d:08:19:82:ad:af:25:a8:c2:31:c4:
32:7f:62:f0:b9:90:38:c5:e9:9d:0e:39:cc:29:46:
c1:c6:5c:79:36:9e:7a:d6:d3:82:f5:c4:88:81:6e:
5b:8f:cf:32:79:d3:76:d1:66:98:90:57:2c:8f:b9:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:61:C4:61:8F:BD:28:23:74:F4:6E:3E:B9:A4:BA:63:D9:98:10:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb5fb62e-f82c-37ef-a600-79eb532ca9c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:89:d0:f1:0e:af:1f:2e:df:c7:76:64:87:35:07:ff:05:09:
e7:c5:93:18:79:cf:87:4d:1c:31:e9:c6:39:c8:3c:db:a7:d0:
7d:85:a1:18:43:54:a4:98:df:6c:19:e7:11:be:8e:fb:33:a2:
24:8a:35:af:75:45:e2:cc:08:8a:9b:b4:e5:8c:ac:6a:1b:d6:
79:2f:6a:35:ce:7c:ae:fb:50:9f:83:3b:bc:05:15:63:74:2e:
0c:d9:65:cb:aa:ef:df:10:aa:ad:53:ff:09:76:ed:f0:ff:e3:
51:c1:13:bc:62:64:29:ae:34:e2:7e:e0:98:b2:72:4d:b3:17:
5c:fa:a8:bb:7c:11:c8:c0:4f:f1:17:96:60:97:98:09:53:eb:
0e:75:3b:2f:12:36:3b:a1:5b:fe:ca:c1:c4:63:61:27:e8:3a:
2e:6e:d1:29:d8:ad:c5:57:a4:e7:44:19:25:8f:77:25:36:4a:
45:48:0a:3d:ee:ed:e4:2a:75:55:1e:ee:4a:7c:f2:bd:4f:f4:
f3:23:ec:23:24:b6:d5:18:35:f1:24:6c:82:3a:ac:53:b5:3b:
4b:1d:a2:45:5c:35:23:5a:05:5d:27:25:e9:80:94:24:f0:f1:
7c:2d:bb:36:84:af:cd:cb:46:7f:ac:ef:bb:3c:d0:6b:5e:4e:
fc:62:ad:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:26:50 2025 by rpki-client