Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/7f787b35-b1f4-3e79-9675-94c25e093002.roa
File: 7f787b35-b1f4-3e79-9675-94c25e093002.roa (raw, json)
Hash identifier: 6HH1bQXFsOBgX44u/jNhhGjhW8bDXDHObNsHEpTgHas=
Subject key identifier: F9:C7:35:A3:8C:FB:AD:BF:7D:BE:DE:AC:A7:A1:B3:39:3A:B8:4E:43
Certificate issuer: /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Certificate serial: 010D0C9F4328584927C8FEBFB26248B7C5FC8200
Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/7f787b35-b1f4-3e79-9675-94c25e093002.roa
Signing time: Tue 11 Mar 2025 18:55:20 +0000
ROA not before: Tue 11 Mar 2025 18:55:20 +0000
ROA not after: Mon 09 Jun 2025 18:55:20 +0000
asID: 22351
IP address blocks: 66.36.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 16:22:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:27:c8:fe:bf:b2:62:48:b7:c5:fc:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Validity
Not Before: Mar 11 18:55:20 2025 GMT
Not After : Jun 9 18:55:20 2025 GMT
Subject: CN=885e4af2-5416-446d-9110-e78dc5077876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:01:33:7b:19:d5:6f:bd:30:a8:88:a1:d1:
d8:2c:24:85:b3:26:93:82:93:bd:5f:dd:e1:60:ba:
2a:90:e6:90:86:2e:b4:ff:d1:3a:d5:f3:5d:fe:dc:
9d:c6:c6:ff:95:ce:65:2c:02:c7:96:a5:21:9f:59:
e4:a8:c1:b1:6e:a1:32:97:f6:9d:39:08:0f:92:83:
ee:7b:04:1c:9c:c1:5b:26:ea:4e:71:a4:63:d5:9e:
fc:a0:17:4a:66:de:a2:a5:37:e0:be:a1:ed:fb:f7:
86:15:5e:0c:94:20:21:82:9c:82:8e:09:e5:4b:d0:
a8:70:6f:d6:f5:e0:25:dd:53:b6:92:0a:61:e3:a1:
c4:41:4c:0e:cb:6c:48:3e:f3:56:bf:34:90:0b:c7:
ca:a0:66:7a:3a:81:36:ad:60:1f:a7:81:48:95:0b:
7c:9d:93:78:6f:45:76:a0:ec:e2:b1:81:47:d8:05:
aa:2e:16:02:01:2d:6e:d6:f5:68:e6:08:c1:39:34:
28:c6:74:4e:13:59:57:8a:ba:b6:26:02:30:e9:09:
57:ba:9d:7e:00:e1:af:e8:33:4b:fd:e9:30:ed:11:
00:bc:81:26:1b:d4:ad:19:5a:7f:95:9f:53:08:00:
2f:2e:9e:e4:49:d6:f2:9f:6b:2c:8e:f3:dc:98:c5:
6d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C7:35:A3:8C:FB:AD:BF:7D:BE:DE:AC:A7:A1:B3:39:3A:B8:4E:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/7f787b35-b1f4-3e79-9675-94c25e093002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
X509v3 Authority Key Identifier:
keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
sbgp-ipAddrBlock: critical
IPv4:
66.36.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:13:1b:2b:b0:c5:52:ac:50:9a:02:6d:ac:39:94:97:34:bf:
4c:59:fd:fc:60:6a:72:c7:54:9b:cd:49:bb:54:45:59:a1:1a:
ea:58:6d:80:c0:d1:31:87:68:78:db:fa:70:78:fd:b9:57:b9:
4a:e4:e4:e7:38:8e:96:71:3d:15:c3:ca:fa:36:31:ab:ac:15:
2f:b8:55:53:35:0a:8a:0a:bb:e5:6f:21:2a:93:c6:27:49:ae:
a2:a8:f1:90:07:55:f5:7c:6b:e7:bd:6f:e9:01:34:36:bc:ec:
fd:7f:10:62:a9:dc:f6:2d:72:76:05:c3:42:a6:a6:0c:d6:a1:
84:7a:e8:42:4f:bd:fc:d1:9f:67:6e:29:fa:48:d4:d8:46:c7:
81:b0:4e:56:73:e0:bb:0f:f5:52:9f:b9:39:05:08:ec:a7:d7:
80:fe:b4:70:25:1e:b5:49:d7:bd:39:1c:ed:d7:44:ca:0e:e2:
6f:98:21:4b:74:2f:9d:8b:8a:88:5b:83:9d:01:d7:11:c8:26:
72:98:5d:2b:3e:ab:75:60:f3:f2:a3:40:ef:53:54:d5:11:3c:
50:54:d4:99:74:be:d2:6e:d9:71:40:e9:1e:10:4b:fe:58:e3:
cb:0f:33:83:7a:c3:7f:e6:50:f0:01:2c:ef:24:d6:34:9b:32:
0d:c3:75:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:07 2025 by rpki-client