Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/e6c21d39-e2ce-3d69-bab5-f56c14a230a0.roa
File: e6c21d39-e2ce-3d69-bab5-f56c14a230a0.roa (raw, json)
Hash identifier: apu6lZkcEZfYwr1TK3QqbyEKaNg3ixCt0Wilzc1uvXI=
Subject key identifier: 37:DE:FF:DB:A6:44:90:12:DD:D8:D1:16:EB:87:F0:3C:CC:D0:B8:88
Certificate issuer: /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial: 010D0C9F43285848DEA110C7A245F18D7BD579E0
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/e6c21d39-e2ce-3d69-bab5-f56c14a230a0.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 19551
IP address blocks: 160.129.0.0/22 maxlen: 22
160.129.4.0/22 maxlen: 22
160.129.8.0/22 maxlen: 22
160.129.12.0/22 maxlen: 22
160.129.16.0/22 maxlen: 22
160.129.20.0/22 maxlen: 22
160.129.24.0/22 maxlen: 22
160.129.28.0/22 maxlen: 22
160.129.32.0/22 maxlen: 22
160.129.36.0/22 maxlen: 22
160.129.40.0/22 maxlen: 22
160.129.44.0/22 maxlen: 22
160.129.48.0/22 maxlen: 22
160.129.52.0/22 maxlen: 22
160.129.56.0/22 maxlen: 22
160.129.60.0/22 maxlen: 22
160.129.64.0/22 maxlen: 22
160.129.68.0/22 maxlen: 22
160.129.72.0/22 maxlen: 22
160.129.76.0/22 maxlen: 22
160.129.80.0/22 maxlen: 22
160.129.84.0/22 maxlen: 22
160.129.88.0/22 maxlen: 22
160.129.92.0/22 maxlen: 22
160.129.96.0/22 maxlen: 22
160.129.100.0/22 maxlen: 22
160.129.104.0/22 maxlen: 22
160.129.108.0/22 maxlen: 22
160.129.112.0/22 maxlen: 22
160.129.116.0/22 maxlen: 22
160.129.120.0/22 maxlen: 22
160.129.124.0/22 maxlen: 22
160.129.128.0/22 maxlen: 22
160.129.132.0/22 maxlen: 22
160.129.136.0/22 maxlen: 22
160.129.140.0/22 maxlen: 22
160.129.144.0/22 maxlen: 22
160.129.148.0/22 maxlen: 22
160.129.152.0/22 maxlen: 22
160.129.156.0/22 maxlen: 22
160.129.160.0/22 maxlen: 22
160.129.164.0/22 maxlen: 22
160.129.168.0/22 maxlen: 22
160.129.172.0/22 maxlen: 22
160.129.176.0/22 maxlen: 22
160.129.180.0/22 maxlen: 22
160.129.184.0/22 maxlen: 22
160.129.188.0/22 maxlen: 22
160.129.192.0/22 maxlen: 22
160.129.196.0/22 maxlen: 22
160.129.200.0/22 maxlen: 22
160.129.204.0/22 maxlen: 22
160.129.208.0/22 maxlen: 22
160.129.212.0/22 maxlen: 22
160.129.216.0/22 maxlen: 22
160.129.220.0/22 maxlen: 22
160.129.224.0/22 maxlen: 22
160.129.228.0/22 maxlen: 22
160.129.232.0/22 maxlen: 22
160.129.236.0/22 maxlen: 22
160.129.240.0/22 maxlen: 22
160.129.244.0/22 maxlen: 22
160.129.248.0/22 maxlen: 22
160.129.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 05 Mar 2025 18:12:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:10:c7:a2:45:f1:8d:7b:d5:79:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=75fc2dd3-b5cd-4d07-81ee-4cdbea8dd39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:92:a1:57:27:11:77:df:68:23:f3:8f:51:
36:b4:b4:17:1f:ae:67:90:c9:06:b1:d1:a1:8f:05:
0f:08:d5:11:b5:e4:1a:b3:52:5a:44:c7:83:1c:c9:
e2:93:15:a7:1a:d8:d9:27:fe:52:6a:94:46:8b:0f:
86:4a:a5:55:cb:00:f9:b6:b4:7d:dd:2d:3e:07:d7:
d2:35:f0:67:86:c8:0e:46:7a:87:2d:31:b4:e7:bc:
23:6f:a0:07:70:9e:64:b8:bf:ab:74:2e:21:05:25:
82:60:f2:7f:05:ab:86:d0:b4:40:55:2e:bd:bc:9f:
1f:bb:58:0a:0f:7d:e7:44:40:de:30:9f:10:c1:e3:
1d:84:e7:e9:46:3b:bd:16:85:e0:98:a8:b3:2c:a4:
90:2c:2d:bb:b5:57:60:50:8a:a6:36:f6:40:bf:73:
13:0d:e8:1e:47:67:5c:f9:ed:eb:08:28:c0:bd:a5:
46:ba:c8:50:99:20:e7:f8:fb:67:0d:cc:f6:8d:93:
61:e8:15:43:57:60:77:35:0a:3f:10:a9:01:c3:98:
7b:db:e8:91:0d:bb:3b:42:29:51:38:e7:e4:66:80:
cf:ac:36:af:41:29:99:37:8f:6a:fe:84:0b:bb:13:
aa:9f:36:67:27:cf:81:79:40:86:93:8e:2e:2c:53:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DE:FF:DB:A6:44:90:12:DD:D8:D1:16:EB:87:F0:3C:CC:D0:B8:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/e6c21d39-e2ce-3d69-bab5-f56c14a230a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
X509v3 Authority Key Identifier:
keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
sbgp-ipAddrBlock: critical
IPv4:
160.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:1d:75:9e:b6:f4:94:9c:ba:41:d0:e3:36:96:1a:fa:b3:c5:
58:55:a5:d4:21:98:51:92:5b:d4:cf:86:be:50:24:99:c7:c7:
bd:76:75:ac:1c:f1:b2:12:18:47:4f:5b:95:f0:0e:5d:0d:4c:
67:8e:87:14:04:9f:40:8f:be:2f:ec:c0:f0:b7:a9:3f:e0:3f:
82:75:a0:81:bb:f8:ec:51:64:dc:2e:3c:9b:1f:1f:9b:db:c7:
25:52:04:22:38:eb:ff:ae:ff:e4:8f:6e:ac:29:93:30:d9:d7:
d1:b3:14:af:03:7d:33:21:31:b0:1b:3b:78:42:2c:fc:3e:19:
b6:99:b6:af:73:1a:78:ca:ff:7d:d1:86:33:df:49:1c:0e:23:
3a:55:cd:12:e6:ee:67:1b:6e:af:a9:bd:8a:db:97:88:e9:b2:
98:6f:db:79:c8:ea:b6:8f:55:e0:b9:fa:62:6c:f2:20:18:fe:
a3:e8:35:5c:79:5b:30:4f:aa:14:bf:d8:e3:b5:bf:44:d4:1d:
15:af:d4:b3:f4:82:cb:e2:f3:60:11:ac:11:9f:67:97:69:5e:
14:95:a6:63:e1:bf:79:3a:7d:7e:b7:1c:c0:8e:2b:cb:bb:31:
60:24:45:7f:a1:ce:5d:4b:48:ac:49:e0:63:57:93:f0:55:76:
1e:85:f5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:52:59 2025 by rpki-client