Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/8633dcca-ef45-328d-a504-8ad4cb432fe1.roa
File: 8633dcca-ef45-328d-a504-8ad4cb432fe1.roa (raw, json)
Hash identifier: vjAffGRUpMMdVNb+StsvjqFOtqm3bjMTOt18/Cf+aGs=
Subject key identifier: 1E:30:67:7A:62:D8:02:99:42:53:29:D5:FD:F3:63:1A:AF:F9:05:9F
Certificate issuer: /CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
Certificate serial: 010D0C9F4328583EEC4F075600059459330994C0
Authority key identifier: 49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/8633dcca-ef45-328d-a504-8ad4cb432fe1.roa
Signing time: Thu 13 Dec 2018 13:50:45 +0000
ROA not before: Thu 13 Dec 2018 13:50:45 +0000
ROA not after: Wed 13 Dec 2028 05:00:00 +0000
asID: 14618
IP address blocks: 64.57.4.0/22 maxlen: 22
64.57.4.0/24 maxlen: 24
64.57.5.0/24 maxlen: 24
64.57.6.0/24 maxlen: 24
64.57.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Aug 2022 14:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:ec:4f:07:56:00:05:94:59:33:09:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
Validity
Not Before: Dec 13 13:50:45 2018 GMT
Not After : Dec 13 05:00:00 2028 GMT
Subject: CN=99e4c7e9-4564-45cf-aa96-fbf29590a16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:54:24:6b:84:8f:c6:34:92:2d:8d:e8:e5:24:
71:88:29:5d:ac:12:ef:53:8e:2a:28:55:40:21:1c:
e3:80:78:02:59:c8:eb:68:fb:25:62:84:b6:45:27:
eb:63:fd:c5:b6:79:58:29:f6:c3:9f:76:82:9f:ac:
65:48:2e:06:c2:a8:f5:c9:7b:bb:d2:86:fc:51:a3:
5b:4c:14:f7:04:10:0c:bb:2d:2f:c9:ea:6c:25:84:
bc:a2:68:d8:7e:af:52:97:21:09:8c:01:3e:b3:86:
d5:b9:9a:2e:d9:3d:ab:5f:3a:88:6e:d0:6d:3a:0d:
40:b1:d3:e0:df:bf:14:62:f8:bd:64:d2:8a:5d:94:
c7:cc:80:33:5d:10:8d:65:2e:40:05:96:ca:bd:ab:
56:4b:5a:34:df:0b:a6:c2:76:da:d6:73:46:e4:e6:
57:6e:38:82:3c:a6:cd:c0:8d:33:ce:93:d0:cf:f1:
b6:0f:c5:dc:3b:a4:20:72:8c:3e:b8:61:d2:cd:5c:
2a:9d:4a:be:b3:21:8c:e6:bd:c1:a9:91:c9:08:54:
74:61:72:2e:d4:79:94:17:8b:fa:fb:a3:27:c5:45:
dd:79:8c:ae:e3:a4:37:55:b0:de:e3:2c:30:8f:5b:
16:7b:6c:31:1b:25:c9:fb:61:56:84:4e:43:39:64:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:30:67:7A:62:D8:02:99:42:53:29:D5:FD:F3:63:1A:AF:F9:05:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/8633dcca-ef45-328d-a504-8ad4cb432fe1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl
X509v3 Authority Key Identifier:
keyid:49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.57.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:25:3d:c0:48:31:88:f3:70:c4:3f:3b:3d:b5:1b:78:53:d0:
2c:9e:ef:d8:2a:3b:8b:fb:59:fc:a6:31:fe:46:ff:c1:80:19:
42:e7:44:6c:36:7f:78:91:d1:79:2c:ba:a4:7f:d1:11:72:bb:
b9:bc:8e:a1:06:09:26:ba:fc:54:ed:5e:4e:93:3e:4a:1b:aa:
18:5b:81:87:92:0e:0a:d7:30:bc:a0:b2:c5:eb:0e:c0:22:2a:
47:43:7c:bd:5d:bc:04:3e:70:97:91:1d:ab:eb:0f:6b:70:06:
b6:22:fe:97:57:d9:3a:4c:e5:e1:8e:43:b7:4c:3d:27:a7:7c:
72:c3:45:c4:aa:b5:1c:39:4c:99:40:69:5f:f3:8f:dc:d0:a4:
a4:9b:ea:c3:e1:07:9b:ca:b0:05:8a:5a:b8:f0:d0:69:36:0f:
11:79:68:8e:f0:3c:52:3e:fb:8e:19:9b:43:e4:7a:c7:48:39:
7d:b0:b4:d7:86:3b:c4:e4:1c:79:af:3e:c1:92:6c:f8:3a:48:
0d:a4:f9:d5:e3:1b:b0:85:4e:8e:35:21:af:36:e4:0b:20:50:
c1:60:b7:41:f6:7c:9f:92:f0:01:be:76:21:3c:e4:da:fa:9d:
d9:e0:30:57:12:cf:3f:f2:26:3d:63:05:e3:a5:6d:46:ce:6c:
03:d3:66:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:54 2025 by rpki-client