Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9700c02-9241-3507-983f-2a522d53494f.roa
File: d9700c02-9241-3507-983f-2a522d53494f.roa (raw, json)
Hash identifier: QgDKUeLmS4rPqjZzdIPaOiIAoEIXX9NdYI0QHPrB25o=
Subject key identifier: 2F:63:AB:BA:77:62:70:30:BD:56:C1:11:ED:F8:2A:2D:22:7B:53:A8
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848D6BB58E20F9F623FA51E9F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9700c02-9241-3507-983f-2a522d53494f.roa
Signing time: Mon 10 Feb 2025 18:07:21 +0000
ROA not before: Mon 10 Feb 2025 18:07:21 +0000
ROA not after: Sun 11 May 2025 17:07:21 +0000
asID: 834
IP address blocks: 50.114.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:bb:58:e2:0f:9f:62:3f:a5:1e:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 10 18:07:21 2025 GMT
Not After : May 11 17:07:21 2025 GMT
Subject: CN=bb91fb63-c5cd-4fe5-b824-06cf9a50f4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b5:3f:e0:cd:1b:4b:b7:d2:6f:e3:89:0a:28:
74:12:b5:e6:5a:61:13:2c:ec:48:00:f4:3a:40:33:
ff:6f:58:0d:e8:8e:99:0c:8b:66:51:7a:ac:34:cc:
b7:b6:a0:37:22:9b:64:14:1b:da:a3:be:32:ad:49:
ce:19:d0:f8:8f:e5:86:11:8c:55:01:ce:5c:6d:fd:
94:43:04:58:c3:57:9e:db:bf:e6:d5:26:03:c5:50:
dc:a2:58:e4:a3:5e:b6:ad:3e:e6:04:f3:44:84:b1:
e2:d8:b3:61:ab:af:c5:0a:bf:34:52:de:4d:b0:f5:
8e:ad:d1:ab:e6:c5:f7:c9:e0:f7:b2:d1:e1:ef:94:
2c:94:e4:e6:a2:43:1b:04:7f:73:b0:a0:60:af:da:
cd:8c:e4:8f:70:82:66:d7:13:f1:6a:00:ea:51:c6:
70:ca:4f:e2:b3:d7:dd:42:4b:1d:10:7c:0e:d8:0f:
a8:6e:bd:0e:47:48:ac:29:38:0a:cb:2f:41:fc:ea:
3f:0f:f4:0b:b0:ac:d0:40:6d:58:13:d0:e3:94:42:
6f:0d:77:cf:5d:aa:bf:d2:50:f8:21:8d:2d:88:12:
c6:99:0a:47:e1:46:70:c2:7c:d4:29:22:00:2e:65:
c4:7e:2e:f1:a2:55:1e:fd:1d:79:ca:1f:73:50:b4:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:63:AB:BA:77:62:70:30:BD:56:C1:11:ED:F8:2A:2D:22:7B:53:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d9700c02-9241-3507-983f-2a522d53494f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:49:08:d9:cc:2d:de:a9:06:ed:9e:00:3b:ca:ab:96:88:0e:
e9:4a:56:b5:49:ef:20:40:3f:0c:99:3f:48:99:31:66:c7:23:
a1:a5:ab:ea:a8:7e:f6:29:50:67:d6:43:0a:5f:c1:d6:8e:2b:
9f:53:2e:9f:bd:5e:35:3a:bf:ef:f7:d8:bd:d8:ef:06:02:99:
6c:0d:6c:58:ca:35:3c:ba:df:35:d5:0b:53:a5:93:44:8f:2b:
1b:66:f3:c2:98:9b:5d:83:9d:99:45:00:ba:37:1c:cd:21:c7:
6a:a2:a8:42:7e:2c:6e:aa:21:f0:39:80:59:5d:44:84:0a:29:
b0:38:ea:44:ec:57:40:e1:37:e1:e4:9f:0a:fd:60:fa:a5:04:
ae:a4:4d:8d:aa:a7:35:d0:06:40:31:06:13:3e:44:4e:6b:97:
b8:15:36:01:64:8b:92:c7:5e:bf:77:c2:93:01:95:ba:67:01:
98:39:87:64:50:12:b5:3c:b7:71:21:51:32:60:ad:8e:15:a4:
0b:90:8a:3a:3e:e1:48:98:e2:51:7f:4f:68:f7:31:6e:56:6e:
2e:1d:6f:6f:07:13:60:63:52:76:fc:9a:48:ad:13:78:4e:0f:
9b:a4:8c:41:44:81:62:4b:8d:7f:b4:aa:59:45:4e:a9:37:23:
3a:c6:47:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:18:14 2025 by rpki-client