Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb9668cc-cbb0-3f25-93d1-bdd6a0663998.roa
File: fb9668cc-cbb0-3f25-93d1-bdd6a0663998.roa (raw, json)
Hash identifier: 6QCy7cxfsW8bZGhmsSfo35KUE8IpR24bareo22eIwzg=
Subject key identifier: F1:82:D7:7D:0E:AF:82:AD:A7:66:8D:94:71:E7:B9:1E:82:B7:6B:2B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848B06ABA177884A28089D5C080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb9668cc-cbb0-3f25-93d1-bdd6a0663998.roa
Signing time: Tue 28 Jan 2025 00:44:12 +0000
ROA not before: Tue 28 Jan 2025 00:44:12 +0000
ROA not after: Sun 27 Apr 2025 23:44:12 +0000
asID: 834
IP address blocks: 50.114.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 21:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:6a:ba:17:78:84:a2:80:89:d5:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 28 00:44:12 2025 GMT
Not After : Apr 27 23:44:12 2025 GMT
Subject: CN=8b60cb4e-8ab3-4558-b0fe-520b884e5472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:d9:e9:e3:76:00:dc:6f:5c:6b:9f:7a:f2:
f0:31:d8:4b:b2:16:59:03:77:73:71:8e:9b:e2:2b:
d6:91:54:bd:47:73:4a:18:b0:28:28:eb:21:2a:2f:
79:2a:61:89:15:3b:76:59:89:2a:d5:bf:b8:9d:b4:
09:2f:bf:8e:53:ac:00:1d:e5:e9:d0:46:eb:87:54:
68:4a:bd:10:4e:d5:08:ac:74:7e:be:ae:e0:06:33:
fa:26:8c:4b:50:36:d4:3d:a3:48:84:c6:81:44:63:
64:6f:14:4d:50:38:87:bf:1a:e7:27:29:8d:b8:7d:
76:56:ef:2c:97:5c:49:a7:a7:16:86:cd:50:51:64:
fa:28:0b:16:8d:47:a6:fe:71:a8:5a:38:76:46:6f:
37:a2:17:e5:c2:16:b7:78:95:5a:45:35:fc:74:04:
4a:f8:54:e2:55:03:d2:95:a8:01:43:9d:54:8a:fc:
6f:da:d2:9f:44:71:a6:a8:a5:82:27:31:08:49:dc:
25:14:2a:27:c8:d4:2d:68:ac:c7:79:d5:36:a2:f6:
44:9e:e5:a1:f1:90:bb:b6:d7:c8:10:66:35:c7:6f:
ff:0e:22:ab:31:dd:8a:ed:af:03:9f:0c:1c:5b:a4:
8d:67:17:29:9b:15:38:98:29:64:cb:3b:b5:08:91:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:82:D7:7D:0E:AF:82:AD:A7:66:8D:94:71:E7:B9:1E:82:B7:6B:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb9668cc-cbb0-3f25-93d1-bdd6a0663998.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:38:d6:7b:da:e9:71:5f:79:ec:2f:4b:7e:5f:af:05:08:ce:
25:59:b6:52:bb:d6:61:5f:45:c1:fc:2d:e7:2d:d5:b9:8f:d4:
bc:6c:e0:3f:44:ab:10:33:6f:70:09:b0:eb:5b:5c:21:17:e7:
14:e7:98:39:f6:9e:cc:53:22:40:99:df:ec:83:39:7a:10:be:
98:79:01:ca:a1:05:c7:5d:37:00:2b:55:d5:a4:a1:7d:77:81:
28:75:cb:14:d6:b9:ef:d1:d9:73:d3:7c:cf:af:62:38:00:06:
3e:ac:78:13:b8:07:c1:06:29:f6:6b:ce:7d:2e:45:fa:b6:ad:
b5:92:aa:e7:55:9c:80:73:05:55:a4:c3:6b:d7:50:39:a3:f4:
fb:8d:54:b1:95:ba:87:d9:32:b1:16:c9:1a:5b:38:2f:1b:72:
75:f9:cf:47:7b:75:b7:32:be:75:24:b6:44:8c:6a:0f:30:78:
35:a4:12:e7:13:c7:9e:18:ec:a2:90:74:d4:59:84:d4:b2:d5:
42:fb:30:7f:c1:6a:2d:20:82:9a:0d:84:7b:b3:1f:ec:79:fc:
3c:84:b6:72:ff:22:04:ad:90:df:3d:e9:c5:f9:82:26:ef:3b:
d1:87:d8:db:82:0f:d9:79:67:1b:ac:14:bf:9d:52:fe:dd:f5:
09:8e:d3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:37:59 2025 by rpki-client