Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/6ee395ee-abc4-3fde-81a3-9d99f75f678f.roa
File: 6ee395ee-abc4-3fde-81a3-9d99f75f678f.roa (raw, json)
Hash identifier: CwVi3uHsjp0bcSl6WQm6SF/ZYNyVHb6Xaso6FuzDZ5Q=
Subject key identifier: DF:AE:F5:E8:EE:8E:3B:8D:A2:B4:60:99:2A:94:55:95:A9:03:6F:82
Certificate issuer: /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial: 010D0C9F4328584954791269CF4FE14C0AAD3240
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/6ee395ee-abc4-3fde-81a3-9d99f75f678f.roa
Signing time: Thu 27 Mar 2025 19:05:40 +0000
ROA not before: Thu 27 Mar 2025 19:05:40 +0000
ROA not after: Wed 25 Jun 2025 19:05:40 +0000
asID: 210110
IP address blocks: 144.34.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 09:08:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:54:79:12:69:cf:4f:e1:4c:0a:ad:32:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
Validity
Not Before: Mar 27 19:05:40 2025 GMT
Not After : Jun 25 19:05:40 2025 GMT
Subject: CN=9c705c89-6cc9-41ff-846d-b10ae85632b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:9f:38:07:87:f5:b4:96:aa:14:4a:b7:ec:
32:29:a1:ee:b1:1f:e9:b6:47:7c:ce:d3:14:30:b9:
31:78:63:12:28:c9:19:1a:2b:85:95:fa:19:75:39:
27:ec:16:c8:dc:1d:47:c3:4b:c9:35:9e:39:d9:80:
bf:27:e1:0d:55:53:80:a6:ed:67:a4:e2:01:0c:70:
c3:06:48:3f:31:ba:63:64:3e:5a:ed:c1:68:55:2d:
7a:c9:9f:21:af:32:a4:e6:e3:f3:3e:a1:28:cf:53:
e0:61:28:2f:15:3a:18:cf:16:bb:08:2c:20:00:e6:
77:99:d1:cf:92:a7:bd:01:38:0c:23:87:24:dd:0a:
48:20:24:fa:b5:d2:5b:ea:35:85:9d:6c:e7:6a:d5:
bb:3d:8b:69:84:df:0d:72:15:de:e3:3b:c7:a0:f2:
d3:f1:ef:a9:b3:f9:12:22:13:f2:d7:95:37:b4:94:
8b:7a:fe:19:9c:f0:c6:d9:ef:a3:76:a6:e7:9c:1c:
e1:60:46:21:30:fe:a8:72:d8:5f:f4:32:ca:5a:aa:
78:7c:c5:7c:87:05:28:f3:4e:2f:fd:79:c7:61:fe:
89:8b:2a:be:ea:cf:91:22:fa:a9:54:f6:1b:dd:06:
de:ed:2e:6b:a6:b8:1c:d4:65:2d:b3:31:b8:83:8b:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AE:F5:E8:EE:8E:3B:8D:A2:B4:60:99:2A:94:55:95:A9:03:6F:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/6ee395ee-abc4-3fde-81a3-9d99f75f678f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
X509v3 Authority Key Identifier:
keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
sbgp-ipAddrBlock: critical
IPv4:
144.34.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:4b:10:45:fa:f6:f2:53:3f:47:b0:3d:98:55:1a:73:77:43:
7a:0b:aa:d6:87:76:86:4a:21:43:52:7e:d0:53:2e:27:f4:27:
28:fc:8e:d2:5f:6d:c4:ec:02:b4:43:c9:64:fc:df:b0:8d:b6:
43:67:4f:99:73:e3:d2:75:bb:1f:82:1c:ab:ba:8e:e9:af:30:
1d:a5:45:a0:4a:30:1a:cd:7d:fd:3a:d4:86:4d:b3:8a:94:df:
2c:5d:02:5a:b8:9a:09:65:d3:25:56:2a:b6:7f:fe:e2:82:f9:
68:9c:8f:f3:3d:af:8a:1e:51:77:f1:1d:35:9d:ad:27:5f:a5:
b9:ab:02:0e:d4:2a:e1:a8:29:ae:2c:02:32:f1:99:a1:80:e3:
ac:69:c0:a2:31:31:92:4e:ac:1a:9a:e1:75:8d:0a:14:37:2e:
be:61:99:5e:9f:48:2f:1a:9c:6a:03:ee:52:23:b4:94:48:16:
8d:f0:b6:b8:07:4a:33:d3:6d:ca:7a:51:fc:ec:cb:b0:19:a7:
a6:fa:91:74:2a:1a:af:09:5f:fc:01:54:9c:d9:37:70:34:4e:
d1:ef:22:90:f7:83:db:d3:71:65:68:e4:ca:21:1b:ff:1c:6a:
34:f2:89:60:f2:38:90:f8:06:a4:73:15:54:ec:0d:2e:bc:2d:
dc:2e:21:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:57:43 2025 by rpki-client