Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d86a588-3e2e-3e7d-90f2-20e6e6e17c70.roa
File: 1d86a588-3e2e-3e7d-90f2-20e6e6e17c70.roa (raw, json)
Hash identifier: JedtfeRZ9Cjsw3gUT/uYmwAZcPvKt4SpYJ/PPGKFkT8=
Subject key identifier: C8:30:25:AD:AF:DD:8C:02:8A:98:3D:1F:2F:D2:2B:66:B4:DB:82:09
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858489F21899C1E51C70B69C43C40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d86a588-3e2e-3e7d-90f2-20e6e6e17c70.roa
Signing time: Tue 21 Jan 2025 20:07:59 +0000
ROA not before: Tue 21 Jan 2025 20:07:59 +0000
ROA not after: Mon 21 Apr 2025 19:07:59 +0000
asID: 401152
IP address blocks: 50.114.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 00:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:21:89:9c:1e:51:c7:0b:69:c4:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 21 20:07:59 2025 GMT
Not After : Apr 21 19:07:59 2025 GMT
Subject: CN=5d30d083-37da-4a71-bdf2-97f618a0ad47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:06:d0:9f:75:7c:43:15:4b:a3:1e:1f:75:
40:ef:37:78:72:93:44:f2:9c:85:5c:b7:8f:cb:70:
e0:5f:cc:5d:2d:a3:72:fe:80:95:b8:7f:c2:db:5f:
0e:6a:77:19:ed:4b:1a:da:5d:d4:c5:5f:f5:bc:04:
39:39:80:ea:e4:e1:ee:7c:17:e3:66:89:d9:0a:84:
c5:13:ef:32:73:0d:ca:2d:09:40:0b:35:4d:71:d9:
d3:5d:0e:83:38:f9:42:a6:f8:ab:51:4d:3f:a3:e5:
a1:57:1b:84:d5:44:3b:88:cf:5f:28:cc:24:33:4c:
14:6d:08:df:9b:5d:8e:5d:ff:28:ab:32:b5:13:11:
d3:fb:fe:7c:57:94:6b:eb:9e:31:0e:89:07:de:24:
05:f3:a4:e5:11:33:c6:f4:19:46:d0:5b:2b:62:bd:
19:d2:8b:40:05:63:48:be:85:7d:22:81:4f:d0:42:
63:81:b4:d9:70:03:30:4f:47:95:14:c1:8a:07:f7:
0f:6f:5f:78:38:e9:0c:8b:72:a3:2c:7d:26:35:0d:
95:6f:c5:54:00:08:22:68:eb:bf:1b:42:3c:3e:72:
da:bb:ca:38:80:63:9e:47:e3:5d:b5:b2:95:cf:40:
65:1c:44:ff:e4:86:31:32:29:6f:5d:81:b1:8f:1b:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:30:25:AD:AF:DD:8C:02:8A:98:3D:1F:2F:D2:2B:66:B4:DB:82:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d86a588-3e2e-3e7d-90f2-20e6e6e17c70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:cc:4a:47:12:f7:0c:f9:c8:7b:ce:80:2c:49:54:3d:0a:95:
2f:7b:e1:76:57:20:7d:1e:60:9c:ab:2a:c1:ab:b6:cb:93:d2:
09:5c:7e:5a:f3:84:77:9c:3c:fc:ed:1f:35:bc:5a:76:d2:02:
8a:f5:3e:6d:89:43:3c:1f:e5:32:8a:36:99:45:9b:d0:33:c5:
41:71:74:e2:ed:f7:8f:37:c1:5c:ed:fe:50:70:12:87:88:f8:
cf:b0:c0:df:4d:07:12:0f:ec:90:e0:ed:a0:6f:17:39:7f:f0:
89:26:8d:61:17:a4:01:24:64:ea:56:98:01:06:58:af:87:86:
c3:dc:f8:02:15:9a:0f:eb:cb:da:24:9d:2e:95:5c:bf:ba:9f:
65:ef:ea:50:31:f7:0e:74:93:40:14:4f:aa:7b:8c:2c:97:d2:
cd:ef:78:cf:20:17:a7:64:13:ea:65:54:b9:26:a6:cd:3f:8b:
67:d6:f3:7e:60:2b:77:88:15:01:3f:6e:9f:4c:4d:35:e2:a5:
df:cb:41:96:95:70:4e:25:a8:bc:41:e5:29:d7:62:90:77:1b:
0d:ae:cc:0c:b5:2b:0d:3b:28:67:96:eb:e8:b4:7b:f7:fc:f9:
6c:a2:e5:fb:54:9c:d0:65:ce:f4:ad:b0:42:fe:a1:2e:aa:ea:
18:b9:99:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:32 2025 by rpki-client