Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42c430a8-33cc-300e-aa97-457a5eee196c.roa
File: 42c430a8-33cc-300e-aa97-457a5eee196c.roa (raw, json)
Hash identifier: /glgTIm/K7MJHA4qbyQJqmK8eKnRy7moM/jvBaD/ydE=
Subject key identifier: 8D:1B:D9:48:4F:61:CD:AF:50:3C:D5:BA:8D:A2:F2:C0:3B:C7:6F:5C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858491CA9574FA2578EFC949D4290
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42c430a8-33cc-300e-aa97-457a5eee196c.roa
Signing time: Fri 07 Mar 2025 19:17:40 +0000
ROA not before: Fri 07 Mar 2025 19:17:40 +0000
ROA not after: Thu 05 Jun 2025 18:17:40 +0000
asID: 401152
IP address blocks: 50.114.156.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 16:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1c:a9:57:4f:a2:57:8e:fc:94:9d:42:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 7 19:17:40 2025 GMT
Not After : Jun 5 18:17:40 2025 GMT
Subject: CN=f66f5967-e0b6-4553-9fab-b36ccc1cb650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:90:34:9b:34:81:c0:f6:0e:88:77:6e:f2:03:
81:df:69:3c:0b:af:24:51:a8:bb:f2:51:1a:b8:c2:
d4:d7:54:37:0c:03:41:7c:ce:04:ac:f7:5f:0b:19:
e5:99:1a:58:b5:f9:cd:ca:ff:ef:84:e1:eb:96:22:
ed:ff:9f:12:aa:81:4c:25:42:b7:af:a0:71:3f:32:
71:2b:99:b7:cf:5d:90:20:20:91:7a:49:1b:09:d6:
77:19:f2:53:e0:4d:c6:7c:ea:8c:4c:93:6f:9f:84:
14:2e:01:45:48:b7:a3:a5:f7:af:65:b0:b9:2d:71:
72:d8:09:ab:37:d4:c7:b3:25:b7:49:17:b5:e1:c3:
a5:2b:67:8e:d8:f9:10:e3:40:38:b7:bb:b6:ab:7d:
b6:a2:54:e3:54:48:9c:ea:bb:5e:29:a8:2b:ac:80:
53:46:82:70:c8:50:e0:7e:0e:81:64:b0:cc:fa:bd:
e9:41:22:1f:78:3b:0b:1d:f3:a7:db:93:b0:1f:81:
9d:3f:92:e5:f5:c2:25:50:da:3b:a2:ba:e1:92:ef:
7d:53:74:98:35:1f:1a:21:8d:6f:52:2d:93:8d:f6:
7b:c5:23:4f:f0:43:4b:1c:7a:7f:37:51:3a:08:05:
f9:d7:b2:fa:35:36:7e:a7:aa:46:95:8f:76:ec:80:
4e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1B:D9:48:4F:61:CD:AF:50:3C:D5:BA:8D:A2:F2:C0:3B:C7:6F:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42c430a8-33cc-300e-aa97-457a5eee196c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:84:a4:45:c1:29:fd:2a:7e:d9:98:cb:11:de:87:42:d5:7f:
7a:52:a8:5f:c4:d3:82:19:c7:14:83:6b:1d:b3:25:9d:1e:39:
23:b7:3f:dc:e7:4f:aa:b9:20:e6:4c:7a:aa:fc:fa:ce:55:58:
47:3c:8c:e7:64:9b:e3:65:6c:ab:bf:55:58:cb:5d:83:09:3c:
e1:14:b6:5f:49:da:0a:e4:1b:fb:e0:4b:3c:c5:f5:c4:80:24:
ac:bf:84:bd:5a:54:59:31:a6:00:61:e4:72:f9:36:8c:f2:93:
d9:c6:8b:82:78:94:4d:2d:36:29:f5:07:8b:fd:e0:5e:24:e9:
6e:dc:65:ef:d8:7c:b6:a4:0a:84:5b:61:ab:ed:d1:82:8d:83:
96:de:dd:1a:f2:e4:56:13:e2:30:36:bc:68:39:05:3e:b2:c5:
6b:dc:b4:26:64:f5:51:f3:71:34:de:7f:bb:ab:8d:51:dd:b2:
22:21:79:d6:06:88:89:ca:18:bd:d7:31:f5:e9:f2:4c:95:b7:
4e:86:c5:fa:23:33:0a:76:19:35:4a:99:2b:63:ec:38:ba:b1:
e2:f5:c5:fd:79:67:36:3f:9e:e6:9c:5f:11:b0:67:39:51:05:
00:b0:6a:d5:35:6e:d5:69:9e:bb:57:61:ef:73:9f:bb:d0:7a:
ed:71:30:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:23:01 2025 by rpki-client