Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9148cb0f-2601-369a-a38e-cdbb6aaac78a.roa
File: 9148cb0f-2601-369a-a38e-cdbb6aaac78a.roa (raw, json)
Hash identifier: rCZDu5pnORcxCHaehXmMEdg/1CYqkYAXqbe0C3jNFgc=
Subject key identifier: 3D:AB:69:51:FD:69:6A:BA:96:B6:B9:DB:4F:4F:13:4E:29:26:A3:4F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843D908CE9C58745E51D83E2600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9148cb0f-2601-369a-a38e-cdbb6aaac78a.roa
Signing time: Sat 11 Nov 2023 02:00:16 +0000
ROA not before: Sat 11 Nov 2023 02:00:16 +0000
ROA not after: Fri 09 Feb 2024 02:00:16 +0000
asID: 397113
IP address blocks: 50.114.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d9:08:ce:9c:58:74:5e:51:d8:3e:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 11 02:00:16 2023 GMT
Not After : Feb 9 02:00:16 2024 GMT
Subject: CN=8979d8cd-538b-4d1b-a3d4-5b26502d954c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:d3:80:67:f6:7a:f7:e9:17:33:40:1b:7e:
25:f8:6f:a4:22:8a:b0:d7:2d:cf:da:1e:64:ce:6a:
e3:3a:33:c3:c7:0b:f3:84:84:e9:90:25:65:63:ef:
cf:4a:8e:99:c3:76:6b:78:d0:ee:de:cc:52:e2:a1:
1c:a7:39:bb:5f:3c:cc:ea:ef:33:c9:90:99:60:12:
71:db:09:b3:78:fd:ca:c8:a5:3d:47:55:87:2f:84:
f2:b9:1d:67:cc:bd:46:a5:f9:cd:6e:44:dd:f0:01:
72:d9:08:94:9c:1e:ee:d5:b9:bb:4b:d2:39:89:ef:
76:d9:c3:43:a5:86:9d:6c:10:f9:93:18:cf:04:78:
93:d5:37:f1:08:55:92:ab:5b:2e:30:56:67:e7:82:
f2:60:2c:1f:c3:65:39:74:34:b5:90:3a:70:4b:13:
ad:40:a3:8d:04:f8:22:8b:b6:46:67:b4:36:55:60:
14:71:5f:e4:d6:a1:49:90:bb:3b:38:af:5f:0d:09:
f4:dc:38:a7:0b:24:51:78:1b:8e:6e:f2:c2:ff:d9:
4f:8f:20:01:c4:9b:66:67:54:18:e5:6b:a7:7b:07:
e7:ea:90:cd:b1:b8:42:ec:9f:81:86:49:25:1e:e0:
87:3d:e1:16:eb:3b:b1:b8:13:d1:12:bf:fd:1b:10:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AB:69:51:FD:69:6A:BA:96:B6:B9:DB:4F:4F:13:4E:29:26:A3:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9148cb0f-2601-369a-a38e-cdbb6aaac78a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:72:22:83:9e:9e:33:89:bb:12:74:da:0e:1e:6b:f2:96:aa:
0c:7d:a1:b1:cb:88:1b:e7:7b:9b:3c:bd:14:1f:e3:a7:29:25:
f2:4d:a7:ac:89:6e:a1:2e:76:df:0e:f5:9b:cf:a2:73:d1:5a:
98:48:e7:8e:7a:61:14:ce:b2:23:81:8b:44:8d:fc:d7:24:4e:
0e:78:55:99:0b:0f:75:be:da:79:4d:81:36:4a:5d:f6:15:43:
01:31:16:22:b2:c8:13:69:77:10:36:ac:3b:e6:3b:72:d8:ae:
51:27:e9:71:38:fa:6e:75:8a:08:75:93:9b:14:5f:7b:56:ca:
83:8b:1f:b6:b4:59:1b:4e:4d:78:57:4d:ba:e7:13:99:cc:49:
da:b9:84:cb:f9:51:58:b0:2a:be:de:27:bb:e3:f3:cd:65:b4:
76:07:0e:bb:aa:1c:fb:4a:94:97:75:10:bd:8a:4e:a7:c0:c3:
3d:92:59:61:e1:2c:bf:31:d0:4c:94:ae:d7:d4:1f:2d:67:5c:
07:47:4e:f8:1f:4d:4e:0e:9a:da:af:61:1f:c5:11:ac:9d:ae:
c2:5f:f8:00:26:1a:bf:49:78:ea:47:b8:67:47:a0:73:40:f9:
d3:54:17:7c:92:a4:77:9e:be:dc:95:2d:b6:dc:3f:53:a5:70:
62:77:5e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:37:29 2025 by rpki-client