Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0fdd6d9b-5f92-340f-a4b0-4e65bde4ab71.roa
File: 0fdd6d9b-5f92-340f-a4b0-4e65bde4ab71.roa (raw, json)
Hash identifier: Aus2TBV0gB7VjbfQdfOxk+zQ+15RtvbaAGdHc8mWP+I=
Subject key identifier: 0E:03:36:FF:EE:F0:89:F0:3C:00:C4:FF:50:AF:C4:51:9A:2A:EF:BA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285841D3DDB2A1793C2619F45F3F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0fdd6d9b-5f92-340f-a4b0-4e65bde4ab71.roa
Signing time: Mon 08 May 2023 12:00:00 +0000
ROA not before: Mon 08 May 2023 12:00:00 +0000
ROA not after: Sun 10 Aug 2025 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:26:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:d3:dd:b2:a1:79:3c:26:19:f4:5f:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: May 8 12:00:00 2023 GMT
Not After : Aug 10 04:00:00 2025 GMT
Subject: CN=10b4074b-e8ff-4c29-94ee-3f785deef05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:44:51:e5:0b:65:e1:5d:b1:94:94:f5:03:
eb:98:70:7c:5b:02:50:bc:c3:47:06:43:ef:47:19:
be:cb:cb:2a:8c:a7:0a:73:0e:97:35:10:ed:e9:17:
3e:4d:4e:d8:ed:82:29:21:51:32:d9:88:e8:4b:43:
35:cb:50:a4:f8:51:bd:6e:9a:2f:7b:17:28:45:e3:
df:fb:e7:ec:24:62:4d:94:ad:d7:eb:ad:25:93:60:
e9:72:50:f5:da:8a:43:cb:56:0d:17:97:2a:87:29:
89:06:19:ae:17:18:06:de:d8:e8:4d:53:53:2b:cb:
ba:90:8c:7a:56:8c:bb:00:9f:f7:5b:91:a3:7a:78:
48:c9:2b:a7:3a:8b:95:6d:b6:2f:06:b0:69:c5:04:
ed:c8:58:05:da:f9:d0:ca:08:07:40:70:d0:52:5d:
0e:74:85:01:ba:cb:05:69:9e:65:f0:5c:8b:af:6d:
a9:39:69:4e:eb:27:2f:d0:b6:24:a9:69:a8:34:bc:
d1:5b:d3:fe:d7:c1:48:f9:43:f7:c7:96:68:8d:29:
ab:14:cb:14:b9:47:35:b5:cf:dd:52:e9:ff:2d:2b:
53:be:d5:c6:9f:70:19:dd:2d:7c:65:e9:09:38:30:
e5:f9:12:71:ef:4d:29:34:db:6a:05:53:03:36:52:
bc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:03:36:FF:EE:F0:89:F0:3C:00:C4:FF:50:AF:C4:51:9A:2A:EF:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0fdd6d9b-5f92-340f-a4b0-4e65bde4ab71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:09:0b:1f:29:97:cd:ec:a6:aa:24:32:22:e7:4a:e5:45:19:
3f:18:ba:70:70:d8:db:65:df:b2:9d:47:b2:52:96:93:18:6f:
e4:3d:99:6e:a4:96:fe:f1:30:c3:5b:07:38:9a:f2:c4:55:36:
22:05:0d:04:22:e6:3e:85:8d:46:36:fb:0b:2c:2f:61:48:11:
a9:97:5d:b1:0f:19:7d:69:73:1a:eb:26:ae:80:bc:06:de:e4:
5e:bd:45:78:c2:17:8b:7e:4d:40:ad:95:58:bf:39:ea:20:ac:
2d:21:03:66:36:b9:be:64:ec:0b:54:e5:13:18:c6:86:f6:e0:
85:4a:41:fd:57:91:4a:a4:95:e5:53:5b:2c:02:3f:de:d2:ae:
e1:67:12:cb:32:51:7b:a4:8f:8b:fa:d2:50:cd:9b:0a:41:17:
76:41:b4:9d:bb:b3:3c:8a:04:72:cf:bb:42:ee:09:c0:e3:a8:
c0:16:dc:59:08:45:9d:a8:1d:57:d9:04:73:c8:37:a6:0c:91:
5e:55:be:55:ef:a8:13:92:7e:fb:e9:16:f8:f8:58:eb:b9:ac:
45:91:87:4f:f4:e5:3f:8d:73:ea:36:6a:d3:5b:c7:4a:be:b0:
e0:b9:e4:94:f0:cd:36:0d:ba:95:a6:df:1a:28:7d:4b:3b:07:
cf:5b:69:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:00:46 2025 by rpki-client