Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31d23cc9-9ebe-32d8-b501-dd7fb8ac9557.roa
File: 31d23cc9-9ebe-32d8-b501-dd7fb8ac9557.roa (raw, json)
Hash identifier: 8BLkYYUjWulmPtARhbYc2NDMmXSuUQPUWre7OlAWMKE=
Subject key identifier: BC:09:05:1D:63:C7:1E:29:0C:37:0E:EC:61:86:56:4A:E0:C1:0C:B7
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584924C17BD4D97BCE5456FFAC00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31d23cc9-9ebe-32d8-b501-dd7fb8ac9557.roa
Signing time: Mon 10 Mar 2025 16:52:46 +0000
ROA not before: Mon 10 Mar 2025 16:52:46 +0000
ROA not after: Sun 08 Jun 2025 16:52:46 +0000
asID: 215224
IP address blocks: 50.114.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 22:17:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:c1:7b:d4:d9:7b:ce:54:56:ff:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 10 16:52:46 2025 GMT
Not After : Jun 8 16:52:46 2025 GMT
Subject: CN=444b9b69-3768-480b-be1c-b47e6a246db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:df:94:26:12:bc:a5:8b:2f:99:ea:68:f8:38:
08:08:64:f9:f3:d6:db:ac:43:da:6c:a1:ea:16:0f:
72:f6:be:68:c1:c0:7e:64:c0:21:02:d9:59:53:31:
a9:6f:80:8f:1d:a4:1d:d4:02:ee:a5:be:b9:6f:37:
bd:16:0e:2d:74:84:44:56:fb:a3:67:36:8a:a9:a5:
fa:77:b3:03:db:e2:15:40:d2:c7:c8:37:4d:d9:70:
27:19:f6:63:82:f7:ea:67:9c:15:90:0f:73:c3:9e:
c5:8c:4e:a8:67:c0:98:50:79:d3:06:cc:62:23:e9:
13:85:74:0b:81:a1:d1:73:d9:05:89:a4:93:e8:5e:
fd:c3:c3:04:4d:7c:3b:33:32:20:db:9f:ae:3c:71:
2f:04:5c:dc:c7:c6:47:7e:e4:51:91:81:dd:5b:db:
08:a0:9d:af:50:c8:a6:cf:d5:4a:09:22:91:32:59:
64:d6:70:24:1e:5e:3b:b8:87:0e:5a:b3:ec:94:92:
fb:e2:69:bb:e4:fe:14:df:1b:2f:0f:23:5c:f1:74:
69:1b:15:e8:16:09:6c:17:10:32:3f:eb:2c:fe:4d:
3e:54:97:5b:5a:b5:ed:2d:3c:89:10:4d:a5:ca:49:
fa:a3:7d:04:ae:6f:44:6d:87:e1:f3:02:9f:38:c7:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:09:05:1D:63:C7:1E:29:0C:37:0E:EC:61:86:56:4A:E0:C1:0C:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31d23cc9-9ebe-32d8-b501-dd7fb8ac9557.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:f9:13:90:31:57:42:4f:fa:f5:10:fb:0d:2d:36:61:d6:59:
47:8c:49:bd:91:f4:7d:0e:b9:e0:23:1b:79:4a:2b:97:1a:e0:
f1:c8:a6:93:ca:72:8f:25:a1:9a:6a:37:a4:71:ff:84:3a:0c:
5e:f2:15:f0:b4:0f:7f:2f:d3:b8:ae:02:f8:43:9d:a2:fb:74:
d5:c5:c6:f4:d1:7e:4e:fc:14:b2:88:f4:2b:3e:07:b7:a8:b8:
db:38:87:8a:80:44:36:6f:00:a6:bf:a6:e8:59:31:b6:58:d8:
85:7b:1a:84:20:3c:52:3e:24:6f:04:57:db:60:d1:25:ac:f2:
d2:ca:44:60:70:28:75:db:50:36:7d:f3:e2:61:b3:4b:ea:8b:
49:e4:e8:d5:20:3c:ca:34:b4:0b:16:82:0d:ef:37:5f:02:6f:
5c:f0:42:20:b0:6f:00:90:d1:64:cf:a3:be:3b:bb:dc:5b:fa:
cf:cd:db:18:6f:d8:ff:79:66:b1:97:7a:e3:c9:98:bc:8b:04:
5c:30:a9:e5:88:eb:1f:8b:70:9d:70:ee:94:b1:5f:82:ed:70:
dc:1a:e2:d6:7d:ce:54:bd:3c:d8:18:6c:de:eb:6c:e5:43:a0:
de:31:bf:98:2c:08:31:ad:5a:c2:f8:7d:ae:28:72:a7:f3:f3:
c1:81:10:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:13:46 2025 by rpki-client