Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138382e302f32342d3234203d3e20383334.roa
File: 3230382e39312e3138382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: cJntPFt87IgGDGUQ3TiOkV8xYl6v4SU5ZYP5rr3uliM=
Subject key identifier: B3:F8:23:C8:26:E1:F3:D8:95:CE:FB:54:54:9D:62:8D:64:C3:4F:D7
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 5527465409ADD83B96220571AF6A21F43A2E7AC8
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138382e302f32342d3234203d3e20383334.roa
Signing time: Thu 02 Jan 2025 07:42:51 +0000
ROA not before: Thu 02 Jan 2025 07:37:51 +0000
ROA not after: Thu 01 Jan 2026 07:42:51 +0000
asID: 834
IP address blocks: 208.91.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 21:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:27:46:54:09:ad:d8:3b:96:22:05:71:af:6a:21:f4:3a:2e:7a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: Jan 2 07:37:51 2025 GMT
Not After : Jan 1 07:42:51 2026 GMT
Subject: CN=B3F823C826E1F3D895CEFB54549D628D64C34FD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:84:78:9b:e2:10:b4:7c:e9:2d:73:8c:e5:
be:69:e4:5b:22:e9:96:d5:a3:44:6e:a0:88:d7:3b:
02:42:9a:4b:77:2a:c7:f8:99:79:d8:6d:ea:16:19:
49:0d:26:fd:43:e3:ce:9d:c6:68:29:49:cb:06:0c:
52:ec:cd:b3:4d:63:74:60:ed:8b:57:93:f9:9d:ec:
4d:67:62:67:95:91:54:14:45:ea:47:66:4a:2b:e5:
0c:3b:99:c0:5c:30:52:55:3e:60:ee:18:7e:1c:6a:
5c:90:3f:2e:c8:82:f3:9c:33:1f:0d:9c:e5:cc:07:
54:9a:8d:6f:41:a5:88:e9:1f:a6:60:48:14:21:4b:
e9:47:4b:bc:2e:ce:f9:e0:9b:54:51:06:2e:98:26:
18:7d:21:b8:8a:8c:56:f8:0e:ae:7c:5f:a3:4a:a1:
7d:3a:a3:18:eb:d8:60:b9:e7:fe:4c:bb:90:be:be:
54:e5:fa:35:85:6d:25:6c:7d:92:4f:ba:c1:77:79:
b3:68:48:07:92:d3:32:21:60:ae:d4:ec:e8:04:35:
01:bf:a0:ed:70:f7:02:ba:64:a8:e6:33:af:f7:87:
9e:3f:67:f7:d8:04:cc:4d:87:93:75:9d:b8:ff:d9:
58:80:6f:22:55:6c:b2:c2:2c:09:63:f9:3a:7b:bf:
73:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F8:23:C8:26:E1:F3:D8:95:CE:FB:54:54:9D:62:8D:64:C3:4F:D7
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.91.188.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:39:fa:c1:6c:2d:02:74:99:30:a8:7c:c3:fb:a6:1b:a6:a7:
6f:98:74:2c:f9:32:44:6b:c2:a7:58:43:f3:fa:79:4f:2c:4f:
68:00:81:10:9b:a9:9b:3e:85:4f:56:94:53:6a:4c:84:6a:f7:
96:f4:86:e4:e5:c4:7d:ec:b5:20:5b:fb:86:bc:ce:45:5e:89:
de:5d:be:6b:33:9f:3f:b1:51:a9:84:15:66:9e:31:72:ec:b5:
28:45:c8:ad:c5:0e:0d:4f:30:bf:d2:98:70:5e:33:80:00:7f:
db:50:ac:fb:7a:bf:00:43:e8:b1:7f:f0:bf:f9:41:c2:e5:c5:
29:c1:78:d7:f8:7e:e2:b9:0d:ab:39:7f:96:48:c9:ac:ee:d9:
80:69:76:01:77:74:09:6c:f2:be:a6:fa:81:b8:b6:53:41:fd:
09:22:18:a2:41:42:50:bf:82:59:5d:d8:02:e3:8d:01:ef:7e:
b8:f9:e6:48:2f:76:7d:a0:22:d9:12:92:86:b8:40:6a:fc:71:
52:75:b4:c4:54:ec:de:72:82:79:cd:f8:cb:4e:3c:bd:27:fa:
e3:ae:80:de:24:28:c9:8a:3c:ab:99:b0:76:38:11:19:30:77:
24:ff:b5:1a:b8:b3:e8:ea:cb:83:2f:cc:4e:42:7f:8b:70:cf:
b6:a6:13:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:55 2025 by rpki-client