Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/197473f1-cb7e-37e5-af09-c3dbfe8ee1e1.roa
File: 197473f1-cb7e-37e5-af09-c3dbfe8ee1e1.roa (raw, json)
Hash identifier: 8TduKpdmuVMlupL+Zu5VIclCcxdRH5ax4HTfI9ZVz9o=
Subject key identifier: 64:9C:4C:CD:28:F5:25:6D:8F:BD:B9:6E:35:D0:03:DB:E4:B8:69:8B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848C8FF8311DFDAE6D5A5158B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/197473f1-cb7e-37e5-af09-c3dbfe8ee1e1.roa
Signing time: Wed 05 Feb 2025 20:03:23 +0000
ROA not before: Wed 05 Feb 2025 20:03:23 +0000
ROA not after: Tue 06 May 2025 19:03:23 +0000
asID: 11798
IP address blocks: 50.114.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:ff:83:11:df:da:e6:d5:a5:15:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 5 20:03:23 2025 GMT
Not After : May 6 19:03:23 2025 GMT
Subject: CN=9d0267ea-4c9a-46d0-b40a-93787ec6380f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:cd:22:5a:e4:2c:3f:39:55:8e:43:68:0e:
45:8b:97:c4:70:15:53:30:e7:45:bf:16:97:da:b0:
4b:d0:49:85:b4:41:4a:31:13:69:73:7d:51:19:40:
cc:19:8c:7f:df:82:4c:a1:aa:a6:8d:1e:da:cc:2a:
6f:b9:93:73:a6:76:35:23:ab:0c:95:e3:14:12:15:
8a:23:66:a6:c6:1f:4f:14:ce:5c:c9:60:0d:84:0c:
33:c7:ec:cc:4e:be:7e:d0:0d:4c:1e:15:0d:79:c7:
e1:6f:1d:91:91:ef:37:40:eb:04:70:3d:a3:7c:a2:
c8:f5:d8:da:cd:4a:c0:7f:83:8c:59:03:cf:84:97:
fa:ef:ec:5f:4f:3a:8b:44:ac:2e:37:e2:6f:5b:7e:
6d:46:c1:53:c3:47:f6:20:f1:19:f4:8d:7f:a0:72:
54:55:25:6a:60:4a:56:86:08:aa:2f:be:4c:5f:38:
0f:48:11:f4:74:11:e0:93:79:92:5f:a6:f8:7b:a0:
12:8c:5d:18:ff:d4:9c:ba:67:bc:04:c9:70:b4:94:
a6:b3:29:65:18:08:1f:d5:71:a4:1f:bf:ee:b1:5f:
dd:ed:30:25:e0:f8:e7:4d:f4:3d:ee:58:fe:a7:be:
8d:99:88:31:7c:e7:ce:4c:c6:78:fe:a0:9f:25:04:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:4C:CD:28:F5:25:6D:8F:BD:B9:6E:35:D0:03:DB:E4:B8:69:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/197473f1-cb7e-37e5-af09-c3dbfe8ee1e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:e0:90:63:47:18:26:33:76:51:c5:5d:a0:4d:1a:5a:af:be:
89:a1:1f:73:86:ab:d7:c4:17:a6:48:4c:e0:23:ee:ba:f0:7b:
7a:66:ac:e7:62:38:7b:6c:5b:29:e1:a1:4b:49:df:50:c6:b9:
ce:5c:0e:09:52:75:ef:52:ea:09:9e:dc:b0:5d:f0:96:df:f3:
2f:c4:d3:be:d3:ca:93:16:88:9b:29:dd:6d:a1:8f:d9:d0:7a:
5d:8f:c6:bc:fd:f0:c9:85:3a:cd:12:88:f6:0f:4c:85:4c:ea:
5b:12:f7:e6:c0:e2:e1:06:a1:9b:20:88:86:ee:3c:ba:ef:8c:
a6:f9:8c:95:b9:e6:6d:ae:52:97:0e:66:fe:91:b0:3f:e4:4c:
bd:e9:21:a4:31:2c:0e:73:d0:70:88:bf:f1:fb:29:23:b7:56:
19:7f:4e:49:e4:ad:42:cd:5e:2b:4c:00:65:46:c3:4e:78:b8:
77:7f:b0:53:64:c6:a6:fc:ca:2d:74:df:59:61:d8:08:dc:1e:
32:12:00:35:41:fd:cd:3b:ce:3e:a1:7e:da:37:4d:91:38:5c:
03:21:23:35:f0:a9:a7:63:e8:3f:24:56:7c:54:c5:a5:18:68:
68:41:ce:a0:a5:e0:d5:ca:8b:e9:b3:99:6b:37:54:f8:a6:18:
3c:df:e3:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjI/4MR39rm1aUVi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIwNTIwMDMyM1oXDTI1MDUwNjE5MDMyM1owLzEtMCsGA1UEAxMk
OWQwMjY3ZWEtNGM5YS00NmQwLWI0MGEtOTM3ODdlYzYzODBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9vNIlrkLD85VY5DaA5Fi5fEcBVTMOdFvxaX
2rBL0EmFtEFKMRNpc31RGUDMGYx/34JMoaqmjR7azCpvuZNzpnY1I6sMleMUEhWK
I2amxh9PFM5cyWANhAwzx+zMTr5+0A1MHhUNecfhbx2Rke83QOsEcD2jfKLI9dja
zUrAf4OMWQPPhJf67+xfTzqLRKwuN+JvW35tRsFTw0f2IPEZ9I1/oHJUVSVqYEpW
hgiqL75MXzgPSBH0dBHgk3mSX6b4e6ASjF0Y/9Scume8BMlwtJSmsyllGAgf1XGk
H7/usV/d7TAl4PjnTfQ97lj+p76NmYgxfOfOTMZ4/qCfJQQ7NQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGScTM0o9SVtj725bjXQA9vkuGmLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTk3NDczZjEtY2I3ZS0z
N2U1LWFmMDktYzNkYmZlOGVlMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnLwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJHgkGNHGCYzdlHFXaBNGlqvvomhH3OGq9fEF6ZITOAj7rrwe3pmrOdi
OHtsWynhoUtJ31DGuc5cDglSde9S6gme3LBd8Jbf8y/E077TypMWiJsp3W2hj9nQ
el2Pxrz98MmFOs0SiPYPTIVM6lsS9+bA4uEGoZsgiIbuPLrvjKb5jJW55m2uUpcO
Zv6RsD/kTL3pIaQxLA5z0HCIv/H7KSO3Vhl/TknkrULNXitMAGVGw054uHd/sFNk
xqb8yi1031lh2AjcHjISADVB/c07zj6hfto3TZE4XAMhIzXwqadj6D8kVnxUxaUY
aGhBzqCl4NXKi+mzmWs3VPimGDzf4+s=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:35:29 2025 by rpki-client