Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d85f452-a1e8-3c7c-b490-e903c7d6ecda.roa
File: 1d85f452-a1e8-3c7c-b490-e903c7d6ecda.roa (raw, json)
Hash identifier: ibxlPimz8jraYnF7GY9BLlO9oe2xzmWz5vMYW+BKSMY=
Subject key identifier: 58:9F:CD:5F:7D:E5:2D:46:3F:26:D0:78:D4:AC:71:DC:D9:AC:29:50
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858461F4C3F6D00364164CBAEE040
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d85f452-a1e8-3c7c-b490-e903c7d6ecda.roa
Signing time: Thu 06 Jun 2024 15:36:42 +0000
ROA not before: Thu 06 Jun 2024 15:36:42 +0000
ROA not after: Wed 04 Sep 2024 15:36:42 +0000
asID: 834
IP address blocks: 50.114.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:1f:4c:3f:6d:00:36:41:64:cb:ae:e0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 6 15:36:42 2024 GMT
Not After : Sep 4 15:36:42 2024 GMT
Subject: CN=79b9b98c-3e27-4001-a742-5eae4fe86841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fc:65:c1:a4:7e:48:09:2c:43:1a:96:f9:b8:
67:d7:12:b9:d7:0d:d5:79:cc:60:3c:a2:07:79:94:
90:8b:48:35:b6:aa:2a:9a:8b:15:15:72:ce:2f:2c:
2a:09:57:58:8e:74:cd:43:f3:29:d9:00:1b:20:1d:
0f:d4:d5:8e:1b:d6:00:f8:25:ba:77:7c:79:94:d6:
c1:b7:0c:7b:c0:0f:73:6b:ab:43:a0:a0:f6:61:9e:
24:b5:09:f4:76:96:28:aa:19:df:22:0f:ab:fe:12:
b7:a4:e5:9c:a8:c0:7c:f5:41:14:aa:d3:a7:3b:02:
cd:e7:68:c9:96:15:77:0e:c2:03:0b:3c:45:2e:e3:
66:30:d0:24:f5:8b:96:4b:e5:a2:48:d8:4c:be:ec:
64:16:74:fb:f2:9b:ea:cb:74:54:f2:84:9f:d5:87:
c1:b3:b5:09:60:51:7b:86:3d:c8:2b:25:d9:4b:23:
b0:31:d9:87:22:d9:6a:02:74:a9:46:83:0b:e3:f6:
95:66:b6:73:fb:6a:35:be:79:29:17:d3:c2:f6:f3:
33:f7:3a:8e:fb:5b:69:c5:88:d9:4a:dd:cc:16:98:
b0:6e:b1:5b:3a:71:e9:44:0f:89:60:98:7c:4f:96:
cd:90:07:02:71:02:8f:99:09:8f:cc:88:62:17:2c:
8f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9F:CD:5F:7D:E5:2D:46:3F:26:D0:78:D4:AC:71:DC:D9:AC:29:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d85f452-a1e8-3c7c-b490-e903c7d6ecda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:14:49:30:34:99:7f:cf:30:0d:ea:17:c1:a2:e0:04:94:6e:
13:88:e2:93:43:d4:8c:f1:42:fd:3c:86:f3:93:40:a2:08:7f:
40:96:b3:be:c3:9f:83:fd:a3:eb:90:3a:d5:c3:9f:4c:3a:82:
1b:32:4a:83:85:95:9a:e6:ce:73:11:c6:b1:e5:59:07:3c:3e:
ac:0c:5a:bd:15:bb:5f:65:62:99:90:43:a5:be:da:89:a0:b4:
41:5d:18:00:9f:24:22:c1:ac:5e:85:a7:f2:c3:e3:77:09:82:
95:32:97:8d:0f:ae:1d:46:90:59:d0:d1:ca:75:26:0d:fe:68:
55:0a:ec:ed:6c:1d:ce:20:97:c5:45:f8:1d:99:50:57:90:0e:
f9:ea:a2:b8:70:88:36:21:e1:62:81:c8:f9:d3:db:a1:34:62:
02:2c:05:2b:26:af:c6:ed:46:54:90:ef:0e:9a:b5:4a:b7:b5:
8d:99:1b:1e:28:a2:45:fb:2e:67:89:8d:60:e8:26:18:67:6c:
2f:a8:05:db:98:7a:34:db:e1:97:d9:4d:12:09:ce:31:0b:92:
c8:52:8f:62:7c:44:a4:40:68:43:12:96:5d:90:68:8b:01:d1:
20:57:45:fc:cb:54:e6:7d:ac:2e:0a:6c:7b:77:4d:94:5b:7f:
05:9d:f3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:26:00 2025 by rpki-client