Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c4d6703d-d8e9-3e58-af96-42c60ed1bc50.roa
File: c4d6703d-d8e9-3e58-af96-42c60ed1bc50.roa (raw, json)
Hash identifier: T8JX+tsjNyAuAtoPNRNW/vaJq+WsZDOcVw0ijkjNvX0=
Subject key identifier: F9:D2:34:C4:D9:10:C5:5A:63:7D:4B:37:F7:76:81:2D:25:D5:A5:1D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584225684F4F96D79464CD62BB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c4d6703d-d8e9-3e58-af96-42c60ed1bc50.roa
Signing time: Thu 08 Jun 2023 01:00:16 +0000
ROA not before: Thu 08 Jun 2023 01:00:16 +0000
ROA not after: Wed 06 Sep 2023 01:00:16 +0000
asID: 19437
IP address blocks: 50.114.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:25:68:4f:4f:96:d7:94:64:cd:62:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 8 01:00:16 2023 GMT
Not After : Sep 6 01:00:16 2023 GMT
Subject: CN=26714ac1-3182-4a1f-bf26-f61d08d222fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:5e:9e:70:2a:e8:2f:84:cc:2b:19:4e:16:
96:95:f5:4d:1e:16:bd:e5:dd:e2:90:7a:80:c3:48:
6c:8f:00:96:f3:1d:4f:e3:e7:3f:48:92:59:73:cd:
08:c7:22:ed:c7:e1:64:5a:2d:cc:b2:12:99:9d:b9:
da:5a:5e:ca:b1:f5:d1:09:18:d7:21:59:9a:23:c7:
8b:35:18:ff:71:a2:c3:99:9a:95:ca:82:d7:21:54:
46:25:9f:c8:e1:9d:55:4b:b4:66:49:f0:21:02:f6:
3a:ed:7a:0a:0a:f6:b0:9f:db:80:ac:e0:66:c8:d8:
17:5d:01:92:b0:e9:dd:39:75:cf:b2:bc:6a:bf:2c:
5f:8a:1e:20:c7:e9:86:4a:f0:66:1a:55:a9:62:0f:
cd:d1:90:87:44:ad:bd:53:61:fe:df:e9:63:e5:f2:
ae:d6:7d:3a:91:ba:7a:25:1c:34:90:f3:ee:e6:c3:
a7:36:c0:c9:51:d5:44:73:31:da:61:b4:2e:4e:b2:
34:89:6d:0a:b0:02:8b:33:1e:71:09:e6:fa:87:26:
fd:4d:08:96:99:74:9d:90:c0:54:4e:e3:f8:82:2b:
17:8d:82:28:74:c2:6e:4d:05:b4:34:3b:72:a7:88:
01:5a:ee:55:34:76:aa:62:ba:df:24:9b:d9:cb:b0:
4d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D2:34:C4:D9:10:C5:5A:63:7D:4B:37:F7:76:81:2D:25:D5:A5:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c4d6703d-d8e9-3e58-af96-42c60ed1bc50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:7c:e9:77:1d:ee:97:e1:99:b4:f3:1f:84:b8:31:5a:ea:aa:
bb:4f:8b:f0:93:90:99:82:a5:63:cc:ed:1b:2c:1b:e0:45:e8:
ee:01:f6:bb:c0:21:81:25:70:1c:ec:28:64:e2:63:b6:8f:a8:
63:dd:d7:06:cf:fd:1f:a8:c9:36:f3:5d:36:b2:c5:e4:0f:d9:
fe:48:b5:3c:22:90:43:ea:c5:b3:64:7e:3d:b4:5a:5c:0a:b1:
2d:46:97:f4:dc:b7:59:d1:79:2e:39:d2:bc:37:b3:ab:9b:92:
0d:e2:98:07:3d:e5:b4:80:96:df:ca:90:29:af:78:a7:30:87:
33:1f:e9:53:53:18:27:d9:32:0d:a8:84:69:b1:8a:e6:0c:bf:
e0:43:e3:1d:70:11:1b:91:e2:f3:0f:dd:3e:2c:c8:41:f2:2e:
f1:d8:63:5c:d2:9b:89:a1:b3:bd:52:6b:47:25:b5:30:a6:a8:
64:90:04:fa:cd:0d:a4:88:76:1e:76:08:56:18:b7:e1:d9:66:
92:1d:a4:36:50:f7:43:70:e7:e8:30:82:db:29:ba:1e:5b:2a:
59:ce:6b:98:98:09:d5:6e:bf:c4:63:0b:8e:a7:91:e2:c3:54:
74:ab:a4:62:6f:84:00:b6:6a:98:ea:f9:da:c7:9d:76:e5:25:
90:c5:5a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:19:14 2025 by rpki-client