Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1c5c5a5-4d09-3a95-b475-a3a84b981da9.roa
File: e1c5c5a5-4d09-3a95-b475-a3a84b981da9.roa (raw, json)
Hash identifier: XSXQp5oPfEuFm8QLikNb8SiDeXgPbOF87D7gWwwB7U0=
Subject key identifier: 12:87:77:F3:77:E5:04:37:DE:A7:6C:07:40:6F:F0:79:39:E0:78:48
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848B05AE38E7A4A35F0D526C460
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1c5c5a5-4d09-3a95-b475-a3a84b981da9.roa
Signing time: Tue 28 Jan 2025 00:12:17 +0000
ROA not before: Tue 28 Jan 2025 00:12:17 +0000
ROA not after: Sun 27 Apr 2025 23:12:17 +0000
asID: 11798
IP address blocks: 50.114.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 19:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:5a:e3:8e:7a:4a:35:f0:d5:26:c4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 28 00:12:17 2025 GMT
Not After : Apr 27 23:12:17 2025 GMT
Subject: CN=7df4b76b-daad-4199-a4fb-6fb6c6d52d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:7a:98:f7:9a:52:fd:3e:20:f4:45:29:26:
c2:ff:42:e3:d5:c6:e0:79:32:75:6b:e1:e5:61:b6:
94:eb:ba:d7:51:83:4b:d5:3d:f4:f1:5b:13:2e:d2:
70:d9:fd:d3:b3:51:a5:0a:1d:89:1e:4e:6f:88:4d:
ae:ad:c5:5c:02:1c:1d:6c:58:33:03:27:e0:cf:fa:
ac:91:d4:86:6e:73:93:58:b4:7d:6f:dd:2a:4b:6d:
9a:42:71:21:1f:f5:f2:e2:e1:95:06:33:b9:0c:9e:
4d:96:71:05:44:ff:97:41:89:79:ed:7a:95:c9:b8:
34:6a:4f:92:09:90:eb:b4:85:45:d8:d0:c1:76:9d:
ab:b8:42:7d:48:68:9c:cd:c9:64:59:11:c4:d5:a5:
bf:8d:e4:9e:43:6d:44:44:cf:07:6e:c0:91:69:0d:
19:1d:bc:2e:6b:22:f2:0f:c5:bc:f2:db:2a:7b:8c:
6a:fb:b8:7d:22:eb:2c:6e:8e:1d:46:09:a6:f0:ec:
1f:07:7f:c7:ca:bc:bf:61:12:de:fd:bf:70:af:9f:
6a:d7:2f:d7:c7:69:3a:de:8a:d9:4b:27:14:28:a6:
11:cc:a3:f3:e1:bd:2c:ed:96:11:67:61:24:be:1d:
5c:f4:f2:cc:c9:d3:20:c3:9b:8a:38:fc:f4:02:17:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:87:77:F3:77:E5:04:37:DE:A7:6C:07:40:6F:F0:79:39:E0:78:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e1c5c5a5-4d09-3a95-b475-a3a84b981da9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:32:09:28:c7:24:2f:a0:58:2b:0a:fb:f2:d2:ec:26:f1:17:
6f:0e:2c:0a:c0:96:dc:ad:4a:10:df:dd:06:7a:5f:cc:86:d2:
1c:26:c4:0b:95:15:c1:36:a5:36:b4:2c:20:2d:28:80:d5:32:
37:e6:e1:d7:bd:95:1c:60:6a:87:6c:94:c7:1f:8e:91:a9:e9:
80:19:6a:03:f0:8f:ec:88:37:b1:a8:ac:16:c9:57:43:fe:b7:
81:76:5a:3e:91:46:bf:87:05:2b:de:e2:4f:b3:f2:97:f4:b1:
40:17:21:fc:79:77:6d:20:0c:8c:82:0b:4f:21:75:58:81:7d:
d6:7c:47:17:a4:9b:64:96:57:d3:64:14:1e:b0:0f:9f:39:24:
ac:05:5a:1c:5e:2a:3a:0c:0f:2d:7c:8b:ad:bb:aa:c6:ec:6a:
0f:d5:b0:6b:c1:cd:1d:86:81:a5:bc:4d:92:81:4b:ff:f7:eb:
46:3f:08:d7:3a:e6:0b:b6:ae:6b:aa:89:07:bb:1d:7f:fc:ba:
84:39:05:ff:d6:cc:2a:d9:38:f8:1b:77:c8:99:17:02:c4:25:
6e:93:55:76:a5:03:e8:20:6a:c4:0f:44:1e:f3:6a:35:a4:3f:
a0:ab:14:0c:c1:fa:e7:80:cc:ce:c7:ab:18:2a:7e:33:3b:9a:
ab:e2:40:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:01:55 2025 by rpki-client