Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eb4eab29-b3d5-3f2e-9811-214697b0c3f7.roa
File: eb4eab29-b3d5-3f2e-9811-214697b0c3f7.roa (raw, json)
Hash identifier: P0NpZrB0SuJ5TC1KYz9PnittE8pbFEsy2V25toJPqAs=
Subject key identifier: EA:45:74:78:C8:AC:7F:00:53:2A:7B:AE:09:E9:48:29:CC:A9:31:3A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848962A87D379BECEEF2AB50C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eb4eab29-b3d5-3f2e-9811-214697b0c3f7.roa
Signing time: Sat 18 Jan 2025 15:03:50 +0000
ROA not before: Sat 18 Jan 2025 15:03:50 +0000
ROA not after: Fri 18 Apr 2025 14:03:50 +0000
asID: 834
IP address blocks: 50.114.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 18:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:2a:87:d3:79:be:ce:ef:2a:b5:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 18 15:03:50 2025 GMT
Not After : Apr 18 14:03:50 2025 GMT
Subject: CN=ef7af2a9-9ce0-4641-a3f9-32738ef0a29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9e:09:b6:90:41:f3:7b:b1:9c:2d:ed:35:5e:
43:c4:78:0f:eb:b1:52:82:b2:88:71:bc:ce:c8:41:
fb:65:6e:29:d5:bc:00:fa:70:65:e8:23:7a:3b:ce:
d2:eb:b4:a9:f3:e0:64:12:90:0c:a9:5e:13:39:ac:
dc:3c:2b:8c:56:3e:07:58:bd:9a:3e:eb:2e:51:8d:
29:75:ac:98:13:5f:4a:24:11:b4:66:0d:6b:28:3b:
c3:51:b2:96:80:ba:0a:2a:2e:62:dc:d0:ea:fb:9e:
5d:d6:e0:7b:db:c2:3f:41:5e:23:06:3c:14:ce:54:
1b:0f:37:ab:31:4c:7b:67:fe:2a:34:67:c2:f8:4a:
9e:75:5a:b1:f1:72:97:e5:fa:67:61:95:e9:c8:14:
71:38:96:0f:28:8f:4e:d2:42:7c:43:6f:f7:9b:47:
2f:e4:9e:98:a5:48:ad:ca:84:e5:98:ac:5f:57:a7:
ef:6c:15:9b:6c:fb:f8:83:49:9b:16:01:06:e6:20:
8c:1c:40:83:f1:5d:92:82:4f:13:7b:33:5c:e3:f6:
eb:e4:22:ff:98:7c:6a:0e:d9:a4:2b:8d:22:b5:1d:
4d:c7:39:18:e0:84:09:0e:1d:30:bf:5b:01:ae:23:
2a:f0:e6:f4:3d:33:41:9e:94:a9:d4:21:c7:fb:5d:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:45:74:78:C8:AC:7F:00:53:2A:7B:AE:09:E9:48:29:CC:A9:31:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eb4eab29-b3d5-3f2e-9811-214697b0c3f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:d9:c3:54:3e:af:8b:dc:4d:f1:c3:a1:a9:46:d9:f2:1f:9f:
79:a3:3f:7c:f5:6e:e0:e9:e2:e0:d9:12:a6:56:1c:a5:a9:f0:
04:50:cb:fa:e4:5a:8d:e5:cb:53:5e:d8:d3:30:33:05:c6:de:
96:66:61:2d:3c:38:2f:8a:31:95:28:14:02:5f:85:ed:99:0f:
2b:b7:e2:67:c0:58:a2:91:af:d3:1d:30:49:df:44:e4:d7:97:
51:59:e1:e1:5b:3f:67:44:c8:b7:c0:3c:1c:4d:e0:a2:6c:3a:
31:ed:58:83:41:ec:27:70:cd:9c:85:2c:5b:6e:37:31:18:04:
27:92:99:c4:2b:2b:4f:02:76:c3:1f:a6:13:9a:12:a2:36:db:
f8:e8:80:bf:4d:c7:7a:2f:b0:59:04:fe:83:7e:4e:f2:fe:7f:
61:ce:06:68:be:6b:ec:f7:27:b1:4c:b3:f2:8b:c6:29:6a:b4:
40:03:c6:65:e4:09:aa:22:75:47:50:42:be:74:9a:7e:7c:0b:
88:be:d7:4a:f1:52:ad:f3:97:b0:ba:83:17:b7:97:24:77:ca:
20:b1:72:c9:e7:ed:60:9c:6c:17:51:f5:ee:4f:10:84:20:df:
b8:5f:29:59:e5:42:3b:27:55:f3:e1:c2:d2:a9:f2:c9:6e:81:
a6:0e:22:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:25 2025 by rpki-client