Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8f486610-55f8-3b1b-bbcd-5c2a3f0fddae.roa
File: 8f486610-55f8-3b1b-bbcd-5c2a3f0fddae.roa (raw, json)
Hash identifier: t3HCAN5tfSMwzMOpIDtokxhRPOHEh8iuNXJl0AiP5DM=
Subject key identifier: F2:75:74:6E:58:5E:1C:F8:A9:66:3C:C3:43:1D:43:4B:E9:D6:9F:52
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583B247CFF8D3B44B631EDA9E380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8f486610-55f8-3b1b-bbcd-5c2a3f0fddae.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Thu 07 Dec 2023 05:00:00 +0000
asID: 7922
IP address blocks: 50.114.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:24:7c:ff:8d:3b:44:b6:31:ed:a9:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Dec 7 05:00:00 2023 GMT
Subject: CN=16117517-4cc3-4fdc-aca4-f2c65786c304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:e2:6a:75:b0:a0:80:68:d9:b8:e4:17:6c:
ee:58:aa:bc:fa:d3:be:02:e9:d7:59:19:19:32:34:
91:2f:54:87:c3:cb:be:a1:12:8f:36:1e:c8:c6:15:
fd:71:9d:9b:8e:51:76:26:d7:60:2f:d8:73:7b:1d:
47:2e:7c:49:00:9e:25:5e:ca:be:f0:b3:c7:99:ad:
a1:bb:66:8c:44:9b:1f:db:2d:4c:1b:84:b0:0a:38:
62:ff:f2:d5:dc:cf:bf:4e:7a:6d:b0:37:c2:c5:be:
ee:b8:9d:ab:7b:e1:26:6d:64:f3:39:a1:5b:35:ac:
b1:9b:a8:07:82:e5:6b:2a:4e:54:51:7b:49:7f:f0:
3b:a9:1a:56:5c:51:a7:2f:c8:4f:76:03:b6:3f:40:
58:c9:a6:9b:78:70:d5:60:20:f0:ae:be:9e:fe:d2:
e6:8f:a9:cc:7a:2e:d6:2e:43:a5:11:df:40:b8:d6:
b6:d9:d1:d6:f0:f9:2b:94:34:d0:48:14:1e:59:d1:
78:57:72:31:b1:bf:79:9f:3d:32:46:a6:4f:2c:29:
d3:98:ba:21:8e:5d:ca:f1:8f:a7:12:24:f8:34:1f:
1b:b9:99:c0:c1:8f:5f:13:6e:20:78:11:2a:69:23:
07:af:c0:f1:ca:d5:62:60:0d:55:ce:a9:71:c9:a4:
20:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:75:74:6E:58:5E:1C:F8:A9:66:3C:C3:43:1D:43:4B:E9:D6:9F:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8f486610-55f8-3b1b-bbcd-5c2a3f0fddae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:e1:a6:fd:17:85:5e:37:4b:db:8d:21:2a:57:c6:f4:b5:ec:
2f:67:0c:1f:74:7c:a3:5a:ac:e6:b2:3a:50:82:8f:19:bd:6e:
af:b2:19:18:1d:f0:22:44:41:10:4f:0c:28:5e:fc:75:30:32:
a2:c1:1e:87:81:96:44:1e:f3:64:03:3c:45:32:e8:9a:4b:97:
38:94:b7:59:44:79:b8:14:7c:ce:02:97:91:72:db:83:f5:ff:
7e:eb:72:e1:be:57:b0:8f:56:6e:c2:d3:aa:3f:36:24:96:45:
40:ff:6d:27:c7:5b:14:04:52:ae:ad:b4:5c:3a:7d:36:29:81:
7f:ec:11:c9:41:da:ce:1e:c2:5b:d5:b5:e5:12:27:de:0a:2a:
99:d6:cd:e9:a3:86:e8:24:58:22:5a:c0:02:57:b0:7e:34:15:
bd:49:43:71:77:7b:2b:84:0b:a2:d0:81:8d:9a:42:8b:e6:34:
66:c8:75:a5:14:90:0a:ae:70:ed:26:ba:46:98:82:be:da:9e:
0e:fc:7e:04:ad:dc:a3:e8:7a:ac:d8:78:0b:93:43:d6:f0:70:
46:fd:86:0c:27:1f:a5:d2:e9:52:85:0e:b0:01:90:b1:9a:6f:
72:ec:4b:27:9a:74:5f:a9:ed:88:0e:8e:76:64:0c:c0:5e:84:
1e:f7:b2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:57:37 2025 by rpki-client