Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9de32f4e-e027-3112-838e-4e71b95d21d6.roa
File: 9de32f4e-e027-3112-838e-4e71b95d21d6.roa (raw, json)
Hash identifier: +Q3YvOcoT1SKaPWqv0YEGPAOpVlmNOdwY4CgVYZj+UE=
Subject key identifier: 4E:BE:40:D3:25:0E:23:B3:8E:CB:3C:E1:D9:DB:C7:86:23:01:71:D8
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584968276144A3623B1945E4D400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9de32f4e-e027-3112-838e-4e71b95d21d6.roa
Signing time: Thu 03 Apr 2025 20:17:14 +0000
ROA not before: Thu 03 Apr 2025 20:17:14 +0000
ROA not after: Wed 02 Jul 2025 20:17:14 +0000
asID: 215224
IP address blocks: 50.114.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 16:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:68:27:61:44:a3:62:3b:19:45:e4:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Apr 3 20:17:14 2025 GMT
Not After : Jul 2 20:17:14 2025 GMT
Subject: CN=b0c25b35-c88b-48d3-82c5-cadb96af8734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ac:8b:1f:cb:f0:7a:8a:79:cf:c4:0f:ca:cd:
d9:d2:f8:20:d4:db:b6:d0:5b:df:11:35:55:da:32:
e2:8e:58:0c:e9:9d:ee:70:79:7a:5e:db:e5:e6:d3:
9e:b7:7f:d1:bb:a4:52:5c:f6:60:fa:96:e9:e9:ba:
ad:f0:26:2e:9f:1e:b3:cc:eb:89:17:0c:78:9c:38:
3a:42:10:26:68:fa:cb:3e:72:c9:bf:5e:ea:0b:0a:
5c:20:ce:5d:16:28:1e:e9:a2:3f:75:23:d7:15:a6:
29:6a:ad:0b:aa:3c:f6:a4:f7:1e:c4:fc:e4:e9:9b:
79:04:5c:8f:d8:cd:0c:9f:67:21:b6:0e:3a:81:8c:
4c:4d:60:b0:b8:bc:64:c0:1b:0b:47:a1:92:d7:c1:
78:49:bf:9d:e0:98:2b:f6:66:46:c7:57:d9:e8:5c:
f3:df:af:a1:5d:5e:db:97:3b:b2:19:17:8c:e1:eb:
ed:6f:40:84:e0:b9:23:5f:0d:cd:45:b7:ad:5c:a8:
05:77:5e:b3:b5:fe:fc:a1:89:a6:95:9c:2f:9e:5a:
d8:3b:35:7f:f6:fe:23:ad:63:8f:44:13:e8:27:2d:
45:b2:09:6f:e7:6d:a0:87:0f:51:50:f9:5b:96:41:
92:14:0e:f0:1d:bc:26:05:ea:1d:b3:4a:5d:f5:e4:
e1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BE:40:D3:25:0E:23:B3:8E:CB:3C:E1:D9:DB:C7:86:23:01:71:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9de32f4e-e027-3112-838e-4e71b95d21d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:f4:b5:09:85:46:00:cf:0d:e9:db:4b:42:b7:e7:f7:b2:1c:
3c:73:ea:99:3f:45:12:a7:8f:3a:05:a1:fb:e8:e2:d0:90:ca:
f3:19:70:d9:e4:67:98:db:53:3c:4f:b1:ea:b6:26:a5:8e:7c:
86:d2:06:6a:5a:9c:01:1d:e8:34:d2:3c:8b:71:72:39:23:68:
18:05:6e:ab:f8:ff:22:dc:79:a6:92:48:a4:44:96:f9:c9:50:
32:d2:26:62:d0:8b:ff:d0:07:8f:5f:f3:a7:cc:f9:6d:b2:eb:
50:21:f0:8c:57:63:e2:f8:50:f4:a2:30:ef:74:76:e7:3b:56:
f0:aa:f4:48:20:e8:4e:a0:46:cf:77:b4:3b:3b:37:4a:34:a8:
0d:03:ff:ec:d1:9c:62:6f:c8:d0:d3:71:25:60:fc:7a:ac:4c:
c6:31:dc:25:46:e4:ca:9d:6d:22:a2:d0:86:f0:75:5e:dc:cd:
81:f2:d8:9d:e1:b4:d2:a7:89:b3:f9:4c:4d:a4:2e:60:f6:3c:
57:6a:15:c9:d5:f0:54:5a:53:5a:cd:b3:65:73:c1:41:79:07:
36:21:6d:47:2a:e8:76:d5:fd:6e:57:81:71:28:0f:b0:71:58:
2f:7f:30:aa:fc:12:fb:c7:4a:87:92:85:c6:04:bf:e4:cc:e7:
9c:47:af:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:18:18 2025 by rpki-client