Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a4e0fd6c-3c9b-3bfe-bdaa-123e4f18a591.roa
File: a4e0fd6c-3c9b-3bfe-bdaa-123e4f18a591.roa (raw, json)
Hash identifier: qgQNjb+z5PPTa0cgToMzV1TMJeDNtkO4JlPm27fOiSA=
Subject key identifier: 62:3A:A2:B2:14:D8:25:25:F4:05:8B:10:C6:72:40:B4:00:1B:99:2B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848B2D81987B9696B57093B7880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a4e0fd6c-3c9b-3bfe-bdaa-123e4f18a591.roa
Signing time: Tue 28 Jan 2025 21:36:11 +0000
ROA not before: Tue 28 Jan 2025 21:36:11 +0000
ROA not after: Mon 28 Apr 2025 20:36:11 +0000
asID: 11798
IP address blocks: 50.114.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 19:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:d8:19:87:b9:69:6b:57:09:3b:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 28 21:36:11 2025 GMT
Not After : Apr 28 20:36:11 2025 GMT
Subject: CN=822d6b3d-6161-4c38-bae8-939064face78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:e4:db:3a:3f:b6:c4:12:49:98:f0:fc:6f:
27:6b:81:3e:fa:cd:27:f4:0c:41:ff:6a:e4:be:23:
8b:68:b9:0c:00:25:d2:cf:2c:1b:7d:f9:0e:4c:cd:
43:96:11:3c:0c:0a:ee:5a:a5:7c:5f:50:99:50:65:
37:6e:8b:1d:37:a1:a9:ee:05:05:3b:87:03:6e:62:
cc:62:3e:dc:1c:7b:ce:d3:da:b7:1c:56:79:f4:4f:
5e:dc:a3:92:97:bd:29:77:f6:84:02:a6:36:ca:52:
05:80:00:a8:2d:7a:8c:28:cd:04:ec:10:ed:ba:1e:
62:56:9b:e4:2e:63:26:4d:04:8c:97:58:83:00:ce:
6f:05:4f:80:e0:03:bc:f7:2b:c8:51:20:ab:f5:34:
45:f9:b0:62:ca:ed:89:fc:d5:97:0e:68:96:a7:6b:
64:22:57:f6:d7:54:6c:b8:25:e7:1f:81:d7:94:75:
a9:54:a5:d3:e4:87:46:94:10:91:33:e6:e2:cd:35:
6e:02:f9:06:2d:24:b8:c8:c9:0d:c3:de:be:3d:9c:
a8:4b:fb:26:f9:a6:b4:5f:d8:60:c1:73:06:de:fc:
10:ae:e7:f4:1b:53:d6:7d:aa:06:04:e6:09:8e:02:
20:97:bd:c1:5b:61:89:cf:52:91:c7:20:ce:37:f9:
b2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3A:A2:B2:14:D8:25:25:F4:05:8B:10:C6:72:40:B4:00:1B:99:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a4e0fd6c-3c9b-3bfe-bdaa-123e4f18a591.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:af:55:02:d2:fe:78:ec:d6:ba:47:33:60:ce:db:3d:dc:ce:
9c:d7:e7:26:b3:ea:7d:ad:60:ae:13:5e:72:01:eb:7a:d7:8e:
fb:61:8f:d5:c6:1e:8f:ed:64:fa:8c:34:0e:5f:2b:3d:40:cd:
bc:eb:f8:98:3a:c9:45:6f:d4:ba:d2:28:68:f7:9c:12:d8:e8:
d5:56:b7:ce:10:28:0c:97:78:4c:0c:5e:7f:48:08:eb:aa:47:
ef:c3:2b:a8:c4:e4:4f:fc:77:21:9f:dc:3a:ec:8b:8e:29:dd:
9f:70:d6:05:ab:27:74:b9:6e:9f:b9:4b:44:ef:79:b9:98:31:
87:4f:cf:35:6d:d0:bf:a5:4b:d6:f3:d6:ed:2c:2f:df:65:62:
0a:85:05:59:81:a1:3a:de:22:7e:2d:cd:f8:6a:2a:f9:1d:b0:
c2:fa:76:3b:53:09:10:c3:92:4c:05:07:75:bd:59:cb:d7:2f:
dc:36:33:15:39:eb:7f:cd:14:25:83:96:f2:cd:1e:6b:a0:27:
e9:3c:bf:91:6e:2d:44:0c:9c:e7:e4:95:42:92:e2:73:eb:12:
0d:c5:f9:24:87:7c:ab:1e:1d:11:42:47:92:eb:ff:05:da:41:
0d:18:ff:63:2e:2f:17:08:41:e7:47:65:c0:43:cf:b4:48:60:
f9:23:91:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 12:44:36 2025 by rpki-client