Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/001cbfb4-3d21-3ee1-9f63-d7e477dcd181.roa
File: 001cbfb4-3d21-3ee1-9f63-d7e477dcd181.roa (raw, json)
Hash identifier: wbPl2jQ7bkEV45qlSwtJ+pCBUcKqWlRhFV5HDJ3ONkc=
Subject key identifier: F6:49:E9:F7:FB:03:1E:D1:19:89:6D:F8:13:AF:E0:25:51:68:39:A4
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584663971347904BB55FBEBA9AA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/001cbfb4-3d21-3ee1-9f63-d7e477dcd181.roa
Signing time: Mon 01 Jul 2024 02:42:26 +0000
ROA not before: Mon 01 Jul 2024 02:42:26 +0000
ROA not after: Sun 29 Sep 2024 02:42:26 +0000
asID: 215287
IP address blocks: 50.114.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:63:97:13:47:90:4b:b5:5f:be:ba:9a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 1 02:42:26 2024 GMT
Not After : Sep 29 02:42:26 2024 GMT
Subject: CN=100143b0-6ad6-4ab5-a313-30a01489531c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:da:1b:1b:ee:46:c1:78:1a:44:09:80:c6:
be:ce:df:97:63:b8:e9:7b:a6:bb:00:4c:0c:cd:82:
47:03:7c:5b:99:9c:40:d1:65:cf:29:e6:5a:ce:7b:
c3:b6:ca:c3:18:8a:31:58:ac:cb:4f:b1:83:e4:df:
ac:2d:0a:df:26:03:6c:e5:0d:85:fd:b3:73:b6:14:
89:0e:c8:28:25:42:df:0b:4b:72:1e:1b:8e:4e:bc:
bf:fa:18:b5:54:e6:4b:d9:78:a9:eb:82:d2:8b:96:
04:85:18:c2:4d:ae:4e:5a:35:5f:08:5c:88:e0:8e:
4b:da:10:c4:9e:9e:dd:58:86:75:ba:68:88:a9:65:
63:56:56:bb:d1:70:e5:6c:cb:48:22:5b:46:a5:36:
28:30:16:92:09:3b:e4:36:1c:04:93:58:72:14:72:
02:9b:9c:cb:90:0a:c1:25:ab:8c:ef:48:c8:ea:75:
bc:cd:c6:90:ac:1b:64:e3:de:1a:1c:a3:b4:b8:41:
f5:14:d5:ed:0d:e9:12:2d:06:82:82:e5:8b:d6:5e:
35:0c:39:48:da:94:0e:66:0e:67:3d:e2:7c:eb:3a:
b3:fd:8a:ad:62:12:27:b7:60:9d:dd:e8:be:9e:80:
f1:fb:4d:93:a8:ed:db:89:a1:fc:6f:fe:3d:be:f3:
6d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:49:E9:F7:FB:03:1E:D1:19:89:6D:F8:13:AF:E0:25:51:68:39:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/001cbfb4-3d21-3ee1-9f63-d7e477dcd181.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:67:4b:7c:28:94:bd:01:df:4f:59:93:aa:ad:ef:00:56:ee:
b2:96:36:92:09:4e:da:75:c3:87:e8:ac:03:fc:c5:e7:44:c0:
c1:63:57:4d:08:78:15:5d:ef:3b:d4:76:00:95:eb:30:3d:13:
2d:09:a5:94:bc:ce:26:24:90:73:58:80:94:09:4d:41:2d:a3:
25:c1:a3:2f:e9:f2:79:33:2c:9a:8c:f9:5f:2a:98:0d:5d:ce:
48:5b:cb:41:50:4a:eb:96:50:cd:62:c8:79:9b:b5:1c:e5:07:
fc:0b:5b:f5:1c:c0:24:6d:45:f2:e3:a3:0c:c0:b1:02:5b:34:
e2:17:d6:bf:e0:72:3e:39:73:ba:5c:06:09:ab:18:ab:84:ae:
b9:71:9f:91:f8:c7:be:f6:e4:7b:ba:56:68:49:78:86:d1:61:
22:8d:b2:71:fb:33:7a:c7:8f:d2:b0:86:1c:22:15:54:97:b4:
59:2a:95:86:e8:99:e2:14:74:04:e5:20:8b:1c:02:3d:52:6c:
85:7c:19:70:15:1a:0f:c3:51:31:ae:33:2f:9e:79:47:07:54:
13:a7:38:10:2c:c9:11:b4:af:9e:5d:01:d2:e1:81:9c:44:9c:
74:d3:7e:16:91:24:37:ba:b4:35:90:a7:a8:9e:7f:3d:52:86:
b1:b4:84:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:34:36 2025 by rpki-client