Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/95aa34d6-9e69-3a2f-b177-03fdde0940c4.roa
File: 95aa34d6-9e69-3a2f-b177-03fdde0940c4.roa (raw, json)
Hash identifier: ilEqYk0WiThipS5bsqM3/If9dyttD4BMfQJ+nTnGtpk=
Subject key identifier: 30:33:75:A3:7E:E8:F1:FF:A9:85:01:37:5F:B3:E2:8B:3F:47:D1:3F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847A400F2EDED149DF2278BF480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/95aa34d6-9e69-3a2f-b177-03fdde0940c4.roa
Signing time: Wed 23 Oct 2024 21:14:26 +0000
ROA not before: Wed 23 Oct 2024 21:14:26 +0000
ROA not after: Tue 21 Jan 2025 22:14:26 +0000
asID: 11798
IP address blocks: 50.114.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:a4:00:f2:ed:ed:14:9d:f2:27:8b:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 23 21:14:26 2024 GMT
Not After : Jan 21 22:14:26 2025 GMT
Subject: CN=04e38abf-030c-4231-848e-1bf92cb875c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:b2:27:6e:e4:47:ec:12:54:50:9c:ee:29:
50:e9:62:37:c4:0c:63:37:10:3f:6a:25:f8:3a:36:
9a:c8:67:45:2c:44:06:c2:fd:7d:e0:d2:c7:83:22:
e7:88:1b:68:7c:39:b2:20:41:68:31:7e:7b:d6:68:
55:d5:f2:80:d6:be:9c:58:a2:52:34:fd:77:de:b7:
57:e2:5d:0d:b9:e7:b0:24:39:53:1c:34:21:ad:68:
c0:f8:2b:56:d7:61:bd:4a:08:64:11:24:2b:e6:14:
d1:ef:cb:70:79:c7:fb:d8:e9:7f:ef:c4:fb:f1:f1:
4c:0b:48:0c:2e:e8:c8:f0:36:36:1a:e2:da:20:64:
aa:d3:4f:b3:0d:5c:98:e9:7b:ca:fe:37:b6:56:c4:
4d:40:2b:df:76:0c:86:e1:07:b3:ad:84:71:15:04:
e7:9e:b4:82:c7:d7:f1:f3:27:74:2e:9d:10:ab:44:
e0:80:31:11:d0:05:90:9b:8e:1d:19:ce:5f:92:bb:
d7:24:be:da:fa:0c:5b:e1:32:a3:39:4b:70:e8:c1:
f6:5c:fe:8e:a2:67:a7:91:5e:1f:52:98:d9:8e:60:
70:62:05:fa:c6:08:cf:c4:3d:c8:ed:95:cd:c6:6e:
d0:ff:7d:9a:c1:bb:44:af:44:3a:4a:2f:3a:ae:03:
63:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:33:75:A3:7E:E8:F1:FF:A9:85:01:37:5F:B3:E2:8B:3F:47:D1:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/95aa34d6-9e69-3a2f-b177-03fdde0940c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:65:07:8d:c3:c6:6e:fd:5b:34:c1:ee:f9:97:be:97:33:a7:
1f:55:25:d9:16:6a:70:36:1e:6f:b1:f0:d8:31:2a:d8:f0:70:
b4:ca:b9:58:68:80:f8:5f:a0:00:bb:4f:3a:d9:e7:d7:3e:04:
6e:8c:fd:37:0c:85:0f:3a:0b:63:48:b1:e4:64:6c:54:d9:b3:
c5:fb:e7:ba:ef:a2:4a:a7:1a:7e:ca:70:f0:f4:b4:e4:91:e2:
34:f4:54:0f:a7:38:9c:15:ae:84:53:d6:3c:ab:11:33:91:14:
45:83:98:86:c9:5c:21:3f:61:88:37:67:f7:bc:0c:cb:0a:0a:
78:1d:2f:7d:13:57:6f:34:c4:8b:df:44:2c:a1:6f:c8:2a:0c:
cd:7b:08:db:34:6a:4a:a9:1a:b5:12:e1:25:70:7a:2e:1f:24:
25:0c:aa:a7:03:0f:57:58:55:98:8c:0b:a9:fa:a1:88:f9:c7:
e0:68:0d:f7:7a:8f:b1:21:e6:eb:4c:50:51:87:6e:f0:b8:19:
22:f2:ae:97:54:88:68:cb:50:66:ec:a1:25:f5:2e:6e:57:d0:
67:2c:80:83:e8:c0:e6:fa:67:2b:d0:50:71:07:cc:85:68:92:
e5:99:11:d2:90:64:8d:6f:d0:a9:2c:7a:f3:95:f3:86:79:44:
ad:f6:a0:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEekAPLt7RSd8ieL9IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTAyMzIxMTQyNloXDTI1MDEyMTIyMTQyNlowLzEtMCsGA1UEAxMk
MDRlMzhhYmYtMDMwYy00MjMxLTg0OGUtMWJmOTJjYjg3NWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum2yJ27kR+wSVFCc7ilQ6WI3xAxjNxA/aiX4
OjaayGdFLEQGwv194NLHgyLniBtofDmyIEFoMX571mhV1fKA1r6cWKJSNP133rdX
4l0NueewJDlTHDQhrWjA+CtW12G9SghkESQr5hTR78twecf72Ol/78T78fFMC0gM
LujI8DY2GuLaIGSq00+zDVyY6XvK/je2VsRNQCvfdgyG4QezrYRxFQTnnrSCx9fx
8yd0Lp0Qq0TggDER0AWQm44dGc5fkrvXJL7a+gxb4TKjOUtw6MH2XP6OomenkV4f
UpjZjmBwYgX6xgjPxD3I7ZXNxm7Q/32awbtEr0Q6Si86rgNjMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDAzdaN+6PH/qYUBN1+z4os/R9E/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTVhYTM0ZDYtOWU2OS0z
YTJmLWIxNzctMDNmZGRlMDk0MGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9lB43Dxm79WzTB7vmXvpczpx9VJdkWanA2Hm+x8NgxKtjwcLTKuVho
gPhfoAC7TzrZ59c+BG6M/TcMhQ86C2NIseRkbFTZs8X757rvokqnGn7KcPD0tOSR
4jT0VA+nOJwVroRT1jyrETORFEWDmIbJXCE/YYg3Z/e8DMsKCngdL30TV280xIvf
RCyhb8gqDM17CNs0akqpGrUS4SVwei4fJCUMqqcDD1dYVZiMC6n6oYj5x+BoDfd6
j7Eh5utMUFGHbvC4GSLyrpdUiGjLUGbsoSX1Lm5X0GcsgIPowOb6ZyvQUHEHzIVo
kuWZEdKQZI1v0KksevOV84Z5RK32oIc=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:27:18 2025 by rpki-client