Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/114f24a1-f70a-3028-a291-a67f177d0717.roa
File: 114f24a1-f70a-3028-a291-a67f177d0717.roa (raw, json)
Hash identifier: q8upiu02k0opxD45bw9TUSFex9NqI4eTgVh94wlp0xU=
Subject key identifier: 87:D9:2B:B8:E7:7C:D8:D9:2D:48:46:04:42:64:8C:0A:33:67:7A:8E
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F432858492CAE7AC3B1B0947152DE4238
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/114f24a1-f70a-3028-a291-a67f177d0717.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 138195
IP address blocks: 161.129.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 02:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:7a:c3:b1:b0:94:71:52:de:42:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=aab2f58f-5891-4016-8b1e-31324b5e477e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:13:0f:00:5f:50:56:a2:02:7b:e7:81:1f:12:
35:ed:23:1a:86:12:fe:bd:56:4f:7e:eb:2b:fa:6b:
ae:81:4f:9a:88:ea:98:46:91:56:50:f7:5b:6c:4c:
9b:3b:72:ff:fa:46:ec:9d:34:2b:2c:bb:94:bf:8e:
4d:a9:3f:19:48:89:26:c8:cb:e6:db:07:a0:92:b8:
80:a9:04:3b:36:fb:49:30:a9:4a:95:b0:5e:ba:4f:
d1:4e:bd:e1:10:cb:27:99:e0:fe:56:3c:30:15:5d:
20:9a:44:85:d1:9d:d7:de:e1:cf:25:1e:63:7d:a7:
a9:04:f3:98:93:2c:68:88:58:5f:a3:bc:69:21:91:
91:16:b2:8e:57:03:8b:ec:5f:0f:93:58:39:69:2e:
5e:9a:34:62:85:31:6c:bb:63:da:71:5a:23:00:88:
4f:4c:55:53:40:c4:f2:78:4f:0d:3e:89:bc:70:c7:
ce:0b:98:6f:9b:c7:b3:a1:c7:e2:7a:df:1b:6b:cf:
64:4b:17:77:28:66:e3:83:fb:40:75:31:ee:81:e0:
38:68:88:46:f5:38:de:5e:91:3e:04:f8:c8:c1:de:
ee:99:ba:16:b2:6e:6b:94:85:03:c9:50:cc:6e:54:
11:8b:fa:5d:44:67:f5:34:37:61:ff:bb:47:af:e6:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D9:2B:B8:E7:7C:D8:D9:2D:48:46:04:42:64:8C:0A:33:67:7A:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/114f24a1-f70a-3028-a291-a67f177d0717.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:8d:5c:9c:73:4d:26:fa:22:d4:d6:49:99:7d:39:7c:d9:21:
70:20:4f:7a:b7:82:02:79:81:38:9d:f7:c3:b4:14:bc:e2:9d:
f9:d2:b3:a1:dc:8b:6f:80:6e:35:3d:89:3f:5a:08:88:b3:8f:
90:ef:ba:2a:19:b1:e6:9f:d4:68:31:f5:e4:69:be:21:2a:12:
f1:05:9b:e8:80:0b:1c:7a:77:0a:d2:ce:1f:76:3e:7f:6d:fa:
72:c0:e9:e9:f7:b3:b5:0e:99:5b:fe:af:04:ff:a0:86:13:13:
8d:b5:75:44:29:7f:44:8f:c1:f8:3b:68:6f:64:40:0b:73:b7:
95:f4:48:dc:b7:61:08:5c:e4:25:b2:5f:95:90:0f:46:ca:fe:
a1:4c:38:ef:fc:e0:5f:c4:e3:9f:04:12:68:11:e8:7c:57:70:
b6:73:3d:c1:39:23:7d:e4:b2:fd:80:37:5b:97:1e:c0:81:5c:
d6:9a:75:4d:15:d5:b5:2d:d0:8f:e9:f1:69:33:90:29:84:37:
f5:7e:5b:c2:23:6a:6b:68:4c:28:b9:f0:c6:58:ca:f7:05:c7:
d7:8f:4b:e6:4c:d7:62:f0:94:1c:e1:0b:21:2c:b4:14:07:01:
6e:b8:17:9a:95:13:db:4c:13:89:1a:71:96:bc:80:ee:a7:62:
fc:70:f1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:54:45 2025 by rpki-client