Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0c2135b-5599-36b5-8de8-d9a0d7c7df8c.roa
File: c0c2135b-5599-36b5-8de8-d9a0d7c7df8c.roa (raw, json)
Hash identifier: u4dSnsX1KG3W8pe1AWE9owwi5dR9iyuan1A+eGuEA30=
Subject key identifier: A4:0D:CA:F3:93:36:44:34:D9:8E:47:6C:8A:28:E7:53:43:89:EF:C3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858451BEF054AFD9BBB0076408A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0c2135b-5599-36b5-8de8-d9a0d7c7df8c.roa
Signing time: Tue 05 Mar 2024 17:54:30 +0000
ROA not before: Tue 05 Mar 2024 17:54:30 +0000
ROA not after: Mon 03 Jun 2024 16:54:30 +0000
asID: 11798
IP address blocks: 50.114.168.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:1b:ef:05:4a:fd:9b:bb:00:76:40:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 5 17:54:30 2024 GMT
Not After : Jun 3 16:54:30 2024 GMT
Subject: CN=23340f38-ed4b-4160-b87e-751e6db18c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:3f:23:9a:e2:65:71:4a:71:eb:79:9d:e1:
e9:a5:ab:d5:10:4a:a9:26:80:0d:77:09:05:10:4f:
0d:f6:f3:09:a9:67:1b:be:f4:34:bd:3d:9d:38:85:
57:62:c6:55:22:07:9d:5c:36:5d:46:7f:af:4c:33:
32:3c:c3:80:5b:29:6f:97:3e:f3:e3:20:1e:3e:4f:
b5:a7:7c:67:58:f4:32:c6:61:4a:c5:13:56:60:04:
30:69:35:a8:4b:28:78:69:24:9a:68:1e:0e:0a:50:
46:24:6b:70:ae:de:f3:d4:fa:34:90:1f:39:db:37:
c2:c3:dd:24:81:b2:29:4b:50:3b:c7:e4:17:f3:5d:
b8:e9:92:c4:97:ec:b1:34:39:f2:49:39:94:6c:1c:
d6:8f:61:43:52:d2:15:b2:a4:cd:3c:1e:1e:a4:91:
24:71:c8:a4:6d:47:7e:64:a4:b5:1e:e2:3b:2c:9a:
4b:ab:13:c8:f4:a3:61:ac:8d:a9:0b:7f:c9:03:35:
86:79:39:4c:be:f6:43:30:13:dc:07:1b:20:fd:a5:
18:2e:41:8e:f3:4b:28:97:e3:b6:e5:28:26:85:fb:
89:21:87:6e:90:96:99:6d:e2:6d:8f:7c:f8:61:07:
29:20:89:fc:90:64:df:49:6d:e4:3d:ba:7d:d8:7f:
aa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0D:CA:F3:93:36:44:34:D9:8E:47:6C:8A:28:E7:53:43:89:EF:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0c2135b-5599-36b5-8de8-d9a0d7c7df8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:83:ef:ef:20:ee:ee:f0:7c:6c:90:d9:cb:f9:25:2a:3e:09:
43:48:30:b8:e6:e1:78:8e:d7:8b:5b:b7:75:7d:2a:49:58:2b:
52:16:c2:d7:13:7c:64:c0:74:c9:01:be:aa:06:db:da:ec:34:
3f:0b:72:ac:98:3e:1b:27:73:92:8f:2a:cf:24:99:c4:21:dd:
d7:cc:9a:1e:65:9c:44:27:27:d1:1d:4b:0f:e2:99:37:64:96:
27:c0:e5:35:9e:d6:12:fe:aa:44:78:ae:2f:8c:21:44:af:73:
af:b9:00:e2:1d:f6:53:2f:22:fe:24:9e:f4:7c:59:e8:1b:c3:
6b:d3:bc:59:6f:84:d5:fd:05:f7:68:43:8b:a0:e3:d4:44:b6:
92:1e:c1:da:13:ea:8d:44:c6:ba:f5:d8:9d:26:91:28:e6:f4:
28:74:0f:8f:b0:f5:41:d7:2f:75:63:e7:06:45:6c:96:af:b7:
de:86:0e:0d:f2:1a:90:20:11:33:6b:b5:f5:99:ff:45:d7:bf:
38:51:a4:c1:b9:00:49:fa:67:9e:48:4e:33:85:e6:75:b4:ff:
e6:4b:15:60:b3:46:84:35:6d:23:d7:53:46:77:fe:a5:df:96:
36:20:d7:34:ea:fa:17:b8:38:f7:13:04:d6:ec:4f:26:56:50:
fa:4b:f0:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUb7wVK/Zu7AHZAigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMwNTE3NTQzMFoXDTI0MDYwMzE2NTQzMFowLzEtMCsGA1UEAxMk
MjMzNDBmMzgtZWQ0Yi00MTYwLWI4N2UtNzUxZTZkYjE4YzA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh8/I5riZXFKcet5neHppavVEEqpJoANdwkF
EE8N9vMJqWcbvvQ0vT2dOIVXYsZVIgedXDZdRn+vTDMyPMOAWylvlz7z4yAePk+1
p3xnWPQyxmFKxRNWYAQwaTWoSyh4aSSaaB4OClBGJGtwrt7z1Po0kB852zfCw90k
gbIpS1A7x+QX81246ZLEl+yxNDnySTmUbBzWj2FDUtIVsqTNPB4epJEkccikbUd+
ZKS1HuI7LJpLqxPI9KNhrI2pC3/JAzWGeTlMvvZDMBPcBxsg/aUYLkGO80sol+O2
5SgmhfuJIYdukJaZbeJtj3z4YQcpIIn8kGTfSW3kPbp92H+qWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKQNyvOTNkQ02Y5HbIoo51NDie/DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzBjMjEzNWItNTU5OS0z
NmI1LThkZTgtZDlhMGQ3YzdkZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMnKoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2D7+8g7u7wfGyQ2cv5JSo+CUNIMLjm4XiO14tbt3V9KklYK1IWwtcT
fGTAdMkBvqoG29rsND8LcqyYPhsnc5KPKs8kmcQh3dfMmh5lnEQnJ9EdSw/imTdk
lifA5TWe1hL+qkR4ri+MIUSvc6+5AOId9lMvIv4knvR8Wegbw2vTvFlvhNX9Bfdo
Q4ug49REtpIewdoT6o1Exrr12J0mkSjm9Ch0D4+w9UHXL3Vj5wZFbJavt96GDg3y
GpAgETNrtfWZ/0XXvzhRpMG5AEn6Z55ITjOF5nW0/+ZLFWCzRoQ1bSPXU0Z3/qXf
ljYg1zTq+he4OPcTBNbsTyZWUPpL8AQ=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:17:31 2025 by rpki-client