Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/43e9bec4-bcdf-36c8-801f-f74bc31428bf.roa
File: 43e9bec4-bcdf-36c8-801f-f74bc31428bf.roa (raw, json)
Hash identifier: I6pE4Du4aPjnR1h8ZgQ+M2Xyu2sld577WMO3JSpv0lE=
Subject key identifier: DD:11:7C:FE:3A:71:6A:71:F3:8F:2A:EC:14:D0:FA:AE:CD:19:AA:1C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847A400F1E5E9B3365443869740
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/43e9bec4-bcdf-36c8-801f-f74bc31428bf.roa
Signing time: Wed 23 Oct 2024 21:14:25 +0000
ROA not before: Wed 23 Oct 2024 21:14:25 +0000
ROA not after: Tue 21 Jan 2025 22:14:25 +0000
asID: 11798
IP address blocks: 50.114.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:a4:00:f1:e5:e9:b3:36:54:43:86:97:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 23 21:14:25 2024 GMT
Not After : Jan 21 22:14:25 2025 GMT
Subject: CN=3a32e4cd-024d-4849-a289-d1ea28ec816d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cc:c8:cc:76:69:c0:a6:41:5a:68:79:13:8e:
ac:4f:4f:61:aa:1c:f5:70:06:e1:44:05:2c:67:b3:
a4:af:db:8e:ff:0e:5d:0f:27:b8:da:c2:04:cc:57:
86:4a:39:ae:85:92:22:94:73:62:99:34:11:4e:75:
44:1e:69:32:82:35:29:29:c4:c3:83:13:5d:b4:f8:
3a:cd:6d:fe:3e:68:55:26:60:c4:a8:3d:10:5a:cf:
42:47:17:43:01:ce:52:d0:87:7c:65:9b:98:4c:95:
8c:f4:c2:02:32:87:9b:dc:11:a4:62:ce:cf:fc:3e:
14:9f:a7:e5:ff:dd:98:b6:61:2b:8e:b9:76:94:0e:
40:52:70:16:40:26:b4:e2:ca:d5:1b:1b:2c:50:94:
88:5e:c2:54:7a:1a:78:e9:f6:a9:c3:14:48:2a:24:
f7:8e:ea:84:63:41:0b:7d:6a:b7:b1:47:e4:96:40:
0d:23:b2:21:e2:6f:f4:5b:98:45:24:c1:9e:e1:aa:
f4:f7:1c:55:1c:55:4c:d6:aa:27:a0:e1:47:fc:ce:
2a:a0:3d:c2:d8:db:fa:43:32:af:d6:72:96:ad:27:
a0:c4:7a:09:10:8d:9e:b8:75:2b:38:ce:a7:9c:a8:
4e:1c:5a:cb:fb:44:27:9b:c2:6f:ae:92:5f:2e:52:
18:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:11:7C:FE:3A:71:6A:71:F3:8F:2A:EC:14:D0:FA:AE:CD:19:AA:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/43e9bec4-bcdf-36c8-801f-f74bc31428bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:9a:7c:89:db:ff:94:ef:eb:63:27:94:1e:48:06:4c:56:4c:
f5:fe:d4:a1:5f:42:52:6d:5e:45:0f:9f:55:7e:1c:51:ea:15:
0f:47:9f:80:fc:b2:34:de:5a:be:d9:55:77:57:34:a6:f2:b3:
ff:50:bc:24:37:dc:19:e2:61:6e:6d:b0:3d:f0:15:5b:90:5d:
bc:fd:7f:ba:1d:2d:3b:88:50:ab:e4:00:17:38:5b:ca:02:c7:
29:cc:25:3d:07:fa:0d:c6:6d:95:c7:dc:16:2d:29:6c:5a:cc:
ab:bc:bb:70:64:3f:d7:9b:fe:a0:c9:ec:05:41:f6:29:db:0f:
10:5c:b7:59:6d:3c:ad:8c:18:96:76:c7:e7:97:4f:c5:c2:73:
4f:50:61:ce:c6:61:01:b0:c0:07:d1:e0:ea:62:27:19:a9:62:
4d:5e:b1:c6:fb:bd:9a:e8:a7:38:f1:04:0d:00:36:dc:7a:b1:
90:b0:a2:75:7c:4f:ea:a2:f2:2c:c1:70:c9:3f:c0:70:2a:08:
03:b3:75:1c:69:a6:88:62:b1:f1:84:8a:e5:1f:5e:b1:c1:7d:
4b:38:e4:ca:7b:f2:b6:6b:c4:68:63:c9:b2:bc:83:d6:f6:51:
37:f4:59:11:9a:de:d0:e3:bc:54:6d:51:a3:e2:dc:7c:6a:52:
81:e4:80:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:04:09 2025 by rpki-client