Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/089af93c-acab-3561-9fb3-0d7898bbbfd9.roa
File: 089af93c-acab-3561-9fb3-0d7898bbbfd9.roa (raw, json)
Hash identifier: jkJGgEaF08pHbJT7GlaSvujZdL+I4/rZa353dJ9+VTQ=
Subject key identifier: 57:54:98:CC:62:1D:43:91:57:AB:4D:51:5D:37:47:9E:72:9B:92:04
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F4328584940393F22F005983EBF65FE00
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/089af93c-acab-3561-9fb3-0d7898bbbfd9.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 41378
IP address blocks: 161.129.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 02:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:3f:22:f0:05:98:3e:bf:65:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=e5f9be9e-b091-4aa9-a63e-f75a637062e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:d0:d3:8d:ed:7b:2d:7f:b1:23:dc:fc:3c:
4d:29:d5:17:35:31:2e:ac:9b:09:07:28:1c:e7:7b:
da:c7:05:f6:28:4a:a9:80:ee:4b:0e:c6:73:10:b0:
5f:15:0d:23:6a:eb:4b:21:79:cb:69:21:ad:f6:5e:
41:3b:e2:15:4a:77:88:0c:c3:08:61:fb:00:ae:1b:
e5:7c:98:53:2d:ca:5c:56:44:07:1e:7c:67:e0:29:
8b:3a:ea:d7:cb:f1:49:7d:3c:5a:55:11:22:74:a6:
36:e1:9f:e0:d2:22:8b:66:c1:37:6f:f2:06:a3:71:
c7:7a:1e:5f:f3:fb:7e:c2:69:cd:29:ec:f5:02:07:
e6:7b:0a:72:c1:68:11:ef:06:33:6f:f6:6e:69:e5:
da:11:d0:aa:d2:09:20:e7:c4:9f:5c:8c:5d:85:98:
5f:b5:3e:dd:53:39:ea:bb:4d:5a:b1:65:93:d4:26:
52:aa:a1:fa:77:ee:9a:8f:a2:57:78:01:4c:4b:55:
4f:dd:73:84:51:bb:9f:5d:d9:bb:ae:fe:ea:1d:5d:
a8:3c:02:35:38:7c:44:7e:6c:47:13:7b:4d:af:b5:
cd:9f:ed:09:21:0a:e9:88:fe:21:38:ac:f0:9e:d5:
aa:9d:52:15:34:b6:d8:a4:24:f3:4a:d9:5a:33:ba:
0d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:54:98:CC:62:1D:43:91:57:AB:4D:51:5D:37:47:9E:72:9B:92:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/089af93c-acab-3561-9fb3-0d7898bbbfd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:f0:32:21:9b:3e:61:82:28:b4:0d:3d:14:b1:47:c5:1a:5b:
00:b3:43:5d:6b:47:2a:36:6b:8a:4c:d2:6f:7d:b8:ef:b9:ad:
7d:f9:73:4d:d6:cb:bc:e7:ec:ee:cc:36:56:36:5b:c3:ab:49:
63:ae:53:14:b5:d2:5e:a4:e8:1c:11:8d:99:5c:7e:64:40:be:
e5:1e:7e:21:92:4e:b9:a4:cb:4d:ca:06:fe:c4:31:e2:fd:ab:
48:a7:f3:8e:de:40:ec:ef:1f:c3:8a:19:3f:00:4e:15:ce:dc:
dd:a9:a2:6d:91:38:7a:1a:81:d2:ec:46:46:4c:aa:ac:57:0c:
c4:ab:a6:08:23:73:a9:4d:f3:65:88:1f:62:47:98:a3:29:60:
3a:65:fd:a6:3a:28:fd:6f:ca:53:e6:6a:6e:e3:7b:2b:c6:e7:
86:e4:98:13:71:a3:0d:c8:2a:64:d6:6e:28:b0:e3:32:01:e2:
d2:fb:59:d8:0c:74:49:3b:b3:11:50:6b:29:be:10:f1:dd:48:
73:1e:f4:94:a8:1d:66:4d:11:5b:82:f1:a9:3c:26:1a:26:6e:
82:4e:17:7a:00:b1:05:15:05:4d:7b:8b:e7:5b:97:9c:ea:5b:
5e:4b:24:f4:ac:32:41:ce:30:12:11:9c:88:f7:63:9a:cd:4a:
11:0c:1a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:57:05 2025 by rpki-client