Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d5e658fe-aff6-306d-a4d8-a5b3836c5ddf.roa
File: d5e658fe-aff6-306d-a4d8-a5b3836c5ddf.roa (raw, json)
Hash identifier: QC5NZoq4ocMQfp6qzPw/tZoFeAKBPidjys4LIxfSQYg=
Subject key identifier: 67:72:B3:54:8A:CD:2E:E0:3D:7B:4B:8A:DD:44:C9:FE:F9:52:90:A9
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848CBAFE6EB5FFC47ED54001200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d5e658fe-aff6-306d-a4d8-a5b3836c5ddf.roa
Signing time: Thu 06 Feb 2025 19:10:24 +0000
ROA not before: Thu 06 Feb 2025 19:10:24 +0000
ROA not after: Wed 07 May 2025 18:10:24 +0000
asID: 401152
IP address blocks: 50.114.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 19:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:af:e6:eb:5f:fc:47:ed:54:00:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 6 19:10:24 2025 GMT
Not After : May 7 18:10:24 2025 GMT
Subject: CN=13a604bc-9ce5-456d-bb72-f5acdf65af58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:18:b7:6f:7e:f1:74:de:0b:b5:f5:0b:23:
e8:18:36:95:f5:34:4f:90:cd:bb:21:54:1b:e5:f0:
b6:5b:c8:41:ff:66:db:19:75:0f:c9:11:de:5b:3a:
5c:db:ad:2d:52:da:be:bc:fb:c4:ac:67:82:7d:95:
af:5d:02:15:97:1f:9b:57:a1:fc:05:70:be:89:4f:
8a:ab:c4:75:0d:b2:cf:05:a5:40:99:3d:bb:c5:b5:
16:86:53:e4:8f:c6:41:d9:04:a9:44:40:bf:69:b3:
c2:d1:f6:09:94:3c:ba:f0:e8:36:4e:9a:30:b2:71:
a0:32:db:49:1e:06:f5:a1:97:a1:3e:b4:fd:80:f1:
b4:8b:7c:dc:47:3f:cf:f7:5b:42:16:77:4b:71:cf:
01:62:97:26:9a:b8:22:c5:d9:ec:02:f3:e3:65:a9:
5e:b6:63:dc:71:ce:d3:97:fd:4f:8f:c0:c3:be:c2:
75:c0:c6:07:67:01:77:31:91:d8:92:6a:97:d0:09:
c9:12:57:96:b7:3c:21:53:3a:d5:b5:a1:91:13:f7:
e3:54:3b:82:95:da:04:3c:ff:52:d2:34:90:b9:cf:
9b:dc:4c:13:ee:46:96:95:7c:64:b1:06:aa:f3:53:
ae:63:27:82:d0:bb:d5:c4:ec:3a:e4:a8:32:b1:dd:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:72:B3:54:8A:CD:2E:E0:3D:7B:4B:8A:DD:44:C9:FE:F9:52:90:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d5e658fe-aff6-306d-a4d8-a5b3836c5ddf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:5a:77:18:98:e3:3b:73:e7:3a:d8:2a:33:74:85:e4:3f:d5:
07:c0:ee:38:3f:34:12:61:86:3c:81:e2:4b:de:e5:d9:d4:a2:
ca:4d:ed:2f:ba:7f:61:3c:ba:c0:58:64:3d:c3:92:8c:41:23:
36:3c:ee:d3:53:90:47:5b:42:7a:86:cb:05:f7:39:ea:a1:e4:
29:7d:00:c3:29:bb:c9:44:70:9b:d7:c5:15:46:62:3f:22:f2:
09:cc:ab:ad:2b:3a:00:21:9a:84:ec:e8:33:e7:43:67:15:ed:
8f:9a:0e:19:8b:a2:f7:97:3b:8a:26:a0:71:77:39:1c:63:79:
74:1a:05:d6:f0:4b:f0:b0:8f:96:55:66:d3:1c:08:8c:f4:36:
7d:df:dc:86:72:60:9d:af:b8:58:00:07:94:e6:9c:4b:11:6c:
6d:d1:a5:6f:80:ce:58:ec:85:45:39:06:3c:25:a7:92:8c:83:
fa:56:cd:19:ad:4d:95:3a:03:2a:14:06:4b:a1:ce:5f:61:f0:
33:8b:bc:e3:4e:6f:fb:00:76:6e:0e:4a:e0:be:4f:c0:66:26:
77:f2:5c:a5:0e:e2:e9:a4:70:a0:eb:f1:06:50:d8:92:66:8e:
82:9b:92:c1:3c:be:1d:f1:83:b4:a4:93:16:14:fb:8b:bf:62:
d9:46:51:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:04:35 2025 by rpki-client