Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d69c889-8d04-3b73-a068-e922d5c8e2c9.roa
File: 7d69c889-8d04-3b73-a068-e922d5c8e2c9.roa (raw, json)
Hash identifier: aad9VlBoviRa5oB8bOKV91x4squ4wEwlfIr3cLYEEPA=
Subject key identifier: B2:8E:20:4D:F9:91:E4:78:83:A8:C4:3E:7D:EE:04:7C:A5:70:9D:E8
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858489F2189F72F0DDF49317C1B0E
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d69c889-8d04-3b73-a068-e922d5c8e2c9.roa
Signing time: Tue 21 Jan 2025 20:07:59 +0000
ROA not before: Tue 21 Jan 2025 20:07:59 +0000
ROA not after: Mon 21 Apr 2025 19:07:59 +0000
asID: 401152
IP address blocks: 50.114.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 00:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:21:89:f7:2f:0d:df:49:31:7c:1b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 21 20:07:59 2025 GMT
Not After : Apr 21 19:07:59 2025 GMT
Subject: CN=4de0a705-4226-4e7b-9985-2f4584cc3347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:96:a7:5c:65:92:26:c1:63:bb:fc:a4:94:e4:
5d:4d:f7:88:1e:3c:d2:5c:b5:89:16:c8:54:94:d8:
67:aa:13:1a:ae:12:c2:9c:a0:86:5d:87:3e:5d:8d:
bd:ad:79:20:2f:fd:a0:d8:96:d1:e8:f3:d4:f9:5a:
13:7c:36:cb:eb:c8:dc:f9:af:90:ab:8c:43:12:20:
ca:58:bb:ce:a6:37:91:3d:0c:67:1f:0a:07:5e:06:
24:13:1a:b4:55:f6:87:d0:85:82:45:0b:9c:9d:e3:
ca:32:ab:c2:91:6d:ed:8f:12:4c:c5:eb:10:2f:09:
e3:0f:71:31:ad:e9:4f:68:fa:ff:98:b0:a4:f4:a9:
ca:72:99:eb:2d:2e:c7:6f:d9:cb:e6:c8:53:7a:9a:
61:a1:d4:95:ee:b0:75:93:65:43:8c:3d:e7:68:64:
73:aa:e1:c8:c8:28:97:13:6b:6f:0b:aa:2b:d4:29:
b6:16:c5:cf:30:62:bf:93:67:34:1f:f3:82:10:e3:
39:fb:5a:56:25:33:d3:45:90:c0:91:01:f4:9e:99:
a2:c0:ce:e2:18:04:4f:e8:9e:91:61:fc:0f:0a:62:
fd:f6:1a:eb:04:25:3c:f3:f4:83:f5:0d:10:bb:81:
33:57:95:31:a9:3f:ca:d9:b3:02:26:ac:47:fa:6e:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8E:20:4D:F9:91:E4:78:83:A8:C4:3E:7D:EE:04:7C:A5:70:9D:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d69c889-8d04-3b73-a068-e922d5c8e2c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:48:ce:36:0e:11:18:00:ae:4b:62:0e:20:e8:99:eb:b3:22:
19:76:7b:57:40:ed:61:54:53:11:a1:fc:3c:04:ac:40:d1:b5:
28:dc:14:11:ff:4e:ef:ba:c9:49:66:8c:07:24:52:55:73:3c:
26:9e:0d:85:f9:ce:70:93:d3:65:fa:75:2b:ed:fc:07:16:63:
3d:ff:04:bb:9c:1e:0f:18:a7:85:76:d7:ed:02:71:a7:46:db:
7c:dc:d6:4f:0e:f5:cd:fa:63:0d:de:c9:a9:44:52:f1:83:d8:
51:dd:24:fc:3f:3a:10:d9:69:0f:42:e0:4f:d5:03:c3:a9:93:
41:d1:8d:f8:32:10:36:a1:92:e3:74:7b:c6:5c:e7:bd:a0:a9:
48:ab:40:9e:c4:02:64:87:06:ff:f2:18:f9:8b:69:2f:0e:cf:
16:23:8e:75:df:d1:62:2e:81:f4:74:c7:a1:fc:a9:e8:aa:de:
1f:72:26:42:71:b5:ab:f7:66:7c:ff:08:c4:cf:62:de:9a:6d:
65:07:44:e3:62:4b:3e:bd:b3:f4:10:9c:33:bb:ec:72:56:ab:
33:7d:b4:92:9c:60:31:ff:e2:66:d3:ad:e4:ef:7e:a1:96:59:
83:4a:74:20:80:52:5d:f1:83:7f:89:76:00:fd:b6:68:9f:7a:
9f:7a:1a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:10 2025 by rpki-client