Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88b0ba0c-9848-3ce7-b897-fd5d66a42a3a.roa
File: 88b0ba0c-9848-3ce7-b897-fd5d66a42a3a.roa (raw, json)
Hash identifier: JNVJukNy8H/gL3XjWSs8/wYmscw45e8VEv47JZ9tV74=
Subject key identifier: 10:6F:C6:0D:11:05:E1:14:1B:58:27:E4:28:89:B3:DB:8D:6E:89:25
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848DC488C64B003AF90567CB600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88b0ba0c-9848-3ce7-b897-fd5d66a42a3a.roa
Signing time: Wed 12 Feb 2025 17:50:54 +0000
ROA not before: Wed 12 Feb 2025 17:50:54 +0000
ROA not after: Tue 13 May 2025 16:50:54 +0000
asID: 834
IP address blocks: 50.114.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dc:48:8c:64:b0:03:af:90:56:7c:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 12 17:50:54 2025 GMT
Not After : May 13 16:50:54 2025 GMT
Subject: CN=bd02d2a7-4da6-460e-90b8-a98f7fee84c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4c:37:9e:9c:8c:23:8b:50:e5:8c:b7:71:18:
e8:d8:56:c8:d3:d0:cd:2a:22:2c:e2:0f:d2:b1:3a:
bb:09:69:83:9b:f5:a3:ef:90:70:83:ee:a7:85:db:
49:60:f1:38:83:77:4b:b1:4e:19:b9:eb:62:10:98:
9d:99:e2:ea:38:87:81:78:3b:4c:d7:fb:74:76:b8:
81:f1:73:89:b2:45:e5:be:82:1a:aa:ff:47:a9:be:
bd:af:fd:bf:37:ab:ac:c3:db:84:02:c7:61:a0:c3:
eb:92:ba:d7:ec:41:95:f6:90:0a:7e:a1:f5:97:89:
a0:bf:10:86:3d:48:89:b1:4b:e6:47:37:3b:55:c7:
f0:ef:5d:c7:49:31:25:ab:e8:6f:12:df:95:4c:71:
d5:cc:5b:4c:0e:6c:f3:9e:2b:84:3b:15:2f:52:ca:
58:0b:25:29:66:68:0b:5b:fc:39:d2:c3:82:63:06:
33:dc:a7:18:6d:25:1d:5b:79:11:25:58:5f:b4:7f:
c2:c5:9c:fe:1b:8c:00:c0:30:a9:ad:f9:b6:b2:19:
e3:bf:3d:d4:a4:f6:37:4b:cb:dd:53:9d:3c:09:e7:
7f:28:b9:f9:de:de:0e:33:34:b6:10:02:50:bd:40:
58:63:49:a5:f4:55:a4:a5:06:ac:02:d3:51:64:35:
2c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6F:C6:0D:11:05:E1:14:1B:58:27:E4:28:89:B3:DB:8D:6E:89:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88b0ba0c-9848-3ce7-b897-fd5d66a42a3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:22:e8:3d:52:93:f9:9b:86:0e:eb:fb:8b:ee:ce:ca:98:c8:
7c:64:73:92:2b:4c:34:59:81:66:3c:7f:78:cd:18:ce:40:1f:
0c:e1:00:70:49:07:b6:c5:e5:48:33:6e:8d:5d:3f:78:33:0d:
7c:5a:0b:99:38:4f:de:5c:ee:1e:34:57:87:8b:7f:ac:30:d3:
02:2c:41:5e:63:35:12:cf:92:15:e5:c4:f4:23:c7:83:ca:7a:
b9:e4:0a:62:2a:ec:54:68:9c:18:33:9b:c8:c9:c2:48:84:28:
25:24:1f:2c:d9:b8:f9:04:75:14:02:16:92:4b:bc:1f:f2:fc:
fb:d8:9c:20:45:0c:d9:bd:e4:7d:2e:4c:e8:55:5c:7f:ba:87:
a2:24:bb:43:d9:8a:b1:1b:75:1a:12:b0:4d:89:35:5d:26:ea:
da:45:91:cd:63:e6:62:6a:be:fd:e5:4e:5e:b5:2b:af:86:92:
48:fc:96:1b:37:b6:b6:d6:2f:55:b9:d8:15:35:a7:a8:af:d6:
dc:25:0c:5b:d4:6a:29:49:c9:8f:fa:7e:9c:ac:ec:1f:c8:3b:
2b:69:3d:d4:f6:5a:09:f7:ec:77:2a:fe:be:80:a1:88:0d:49:
2c:a1:6e:ed:d9:fa:17:f4:60:2c:1b:c6:1e:5f:89:43:a4:a8:
99:8e:7c:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjcSIxksAOvkFZ8tgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIxMjE3NTA1NFoXDTI1MDUxMzE2NTA1NFowLzEtMCsGA1UEAxMk
YmQwMmQyYTctNGRhNi00NjBlLTkwYjgtYTk4ZjdmZWU4NGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0w3npyMI4tQ5Yy3cRjo2FbI09DNKiIs4g/S
sTq7CWmDm/Wj75Bwg+6nhdtJYPE4g3dLsU4ZuetiEJidmeLqOIeBeDtM1/t0driB
8XOJskXlvoIaqv9Hqb69r/2/N6usw9uEAsdhoMPrkrrX7EGV9pAKfqH1l4mgvxCG
PUiJsUvmRzc7Vcfw713HSTElq+hvEt+VTHHVzFtMDmzzniuEOxUvUspYCyUpZmgL
W/w50sOCYwYz3KcYbSUdW3kRJVhftH/CxZz+G4wAwDCprfm2shnjvz3UpPY3S8vd
U508Ced/KLn53t4OMzS2EAJQvUBYY0ml9FWkpQasAtNRZDUsuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBBvxg0RBeEUG1gn5CiJs9uNboklMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODhiMGJhMGMtOTg0OC0z
Y2U3LWI4OTctZmQ1ZDY2YTQyYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMnKcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEi6D1Sk/mbhg7r+4vuzsqYyHxkc5IrTDRZgWY8f3jNGM5AHwzhAHBJ
B7bF5Ugzbo1dP3gzDXxaC5k4T95c7h40V4eLf6ww0wIsQV5jNRLPkhXlxPQjx4PK
ernkCmIq7FRonBgzm8jJwkiEKCUkHyzZuPkEdRQCFpJLvB/y/PvYnCBFDNm95H0u
TOhVXH+6h6Iku0PZirEbdRoSsE2JNV0m6tpFkc1j5mJqvv3lTl61K6+Gkkj8lhs3
trbWL1W52BU1p6iv1twlDFvUailJyY/6fpys7B/IOytpPdT2Wgn37Hcq/r6AoYgN
SSyhbu3Z+hf0YCwbxh5fiUOkqJmOfDQ=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:29:53 2025 by rpki-client