Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5a917d91-bf67-3a1f-ac92-5e9b5338205a.roa
File: 5a917d91-bf67-3a1f-ac92-5e9b5338205a.roa (raw, json)
Hash identifier: alMgfVrKcWWGRNPoWRl+zw+ZsMr7skm4jw2KK+1m1nQ=
Subject key identifier: 3C:02:37:95:85:F3:02:64:3C:0B:17:3F:F9:34:A3:7B:31:4E:9D:D7
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583C5088A5E454ADC90646FF8000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5a917d91-bf67-3a1f-ac92-5e9b5338205a.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Sun 24 Mar 2024 04:00:00 +0000
asID: 19437
IP address blocks: 50.114.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:50:88:a5:e4:54:ad:c9:06:46:ff:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Mar 24 04:00:00 2024 GMT
Subject: CN=21fd4254-416a-4dac-b717-1cb895291497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:6d:03:99:f8:e6:06:5f:1f:0f:9d:aa:d3:
05:91:e8:be:5f:c6:dd:8c:72:c2:84:8c:1d:b8:46:
3d:a2:ea:bf:e6:2f:e5:67:a4:88:3a:00:97:95:29:
bb:d0:f4:fa:35:ff:2a:91:3a:df:a4:e6:5c:bd:61:
91:9c:33:cc:46:ec:82:65:b8:72:d6:e8:62:fc:4d:
f4:cd:b8:f0:19:54:eb:e0:06:39:00:bc:2e:4c:3a:
53:ca:2f:0b:13:9a:e7:3f:52:00:fe:ea:0f:4a:31:
fe:9a:80:ef:3e:34:82:21:0b:b2:55:d3:81:98:6f:
07:49:70:f7:7d:a6:7f:d1:57:8a:90:54:77:ae:24:
28:e7:2e:f9:47:8c:1b:20:5f:3d:18:d5:cd:a8:33:
b3:a4:2c:d2:d8:f2:92:da:16:f1:8e:da:05:1e:68:
ba:40:7a:d9:8e:0c:f7:ad:d5:ed:87:50:8e:14:f7:
6c:f9:b3:56:60:f7:96:34:5f:f5:87:c0:8c:4c:d3:
5d:06:6a:99:b2:3b:02:43:59:85:e3:4a:77:f5:ad:
66:71:ba:44:a0:3c:20:06:97:ad:d7:25:c4:bf:3c:
80:73:d3:e6:47:fb:53:57:68:38:85:5a:2e:e4:51:
ad:8b:36:50:61:16:7c:fa:7e:69:85:0b:8c:c0:3a:
0f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:02:37:95:85:F3:02:64:3C:0B:17:3F:F9:34:A3:7B:31:4E:9D:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5a917d91-bf67-3a1f-ac92-5e9b5338205a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:0a:db:4c:6e:f1:df:eb:af:37:57:0d:a9:40:99:0f:8e:f1:
51:08:b5:55:05:d7:22:89:ac:df:ba:ec:34:36:0c:c7:84:56:
95:5d:c2:4a:e8:91:1f:07:2a:d5:9e:ff:db:d4:00:9a:3f:f1:
00:6c:88:a7:c5:33:c9:34:bf:c7:a2:25:dc:3d:65:46:a1:98:
c5:61:67:ae:cd:17:3d:11:f7:50:44:71:93:8e:e6:43:ed:2b:
ef:35:dc:ee:c8:7f:73:38:ac:a1:0c:44:b7:c2:98:68:13:31:
02:39:a7:30:0d:35:34:66:5d:09:e5:2b:cb:6c:e3:13:55:be:
ae:cf:83:fb:2e:2b:4e:8f:56:78:e7:13:52:74:50:8b:22:d7:
ed:f3:2c:27:0d:6c:db:ad:ec:7c:fb:ba:94:9b:8f:aa:18:45:
40:9f:e8:32:95:9b:2c:8a:a5:f5:98:7b:ea:23:ad:64:3f:0f:
cf:a6:af:3c:46:68:c9:23:d2:82:e3:8f:f0:65:6f:9f:f3:d1:
ce:6d:1e:ff:d8:d2:5e:e5:db:14:d2:7b:85:ae:c2:b0:4c:ce:
1d:e1:d0:5f:26:97:8d:30:2d:ea:33:6d:6c:63:10:47:4f:ef:
d3:db:14:21:53:b2:b4:70:50:34:25:37:bb:65:c1:22:1f:23:
58:76:db:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:16:16 2025 by rpki-client