Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4a1d8956-b2db-36dc-9ee1-d0ba307a9864.roa
File: 4a1d8956-b2db-36dc-9ee1-d0ba307a9864.roa (raw, json)
Hash identifier: njwHD3ATl5nhTnM/KUzeB05kanCge78CWkNHIT80xRI=
Subject key identifier: 1D:4D:F5:D9:23:42:DA:A7:C7:F5:B7:2E:CD:B5:57:C3:EE:46:53:FF
Certificate issuer: /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Certificate serial: 010D0C9F4328584905D74C70F94D35FA0E62FF00
Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4a1d8956-b2db-36dc-9ee1-d0ba307a9864.roa
Signing time: Thu 27 Feb 2025 15:06:40 +0000
ROA not before: Thu 27 Feb 2025 15:06:40 +0000
ROA not after: Wed 28 May 2025 14:06:40 +0000
asID: 2914
IP address blocks: 199.96.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 04 Mar 2025 13:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:d7:4c:70:f9:4d:35:fa:0e:62:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Validity
Not Before: Feb 27 15:06:40 2025 GMT
Not After : May 28 14:06:40 2025 GMT
Subject: CN=c79eb5aa-9e9e-4e75-b6f7-40497f5133d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2f:e5:16:36:16:b0:1a:89:af:b9:98:5f:ea:
ba:89:41:d9:86:46:77:e3:0b:e1:90:32:c0:f3:0a:
e1:44:7e:d2:75:96:e5:46:02:a4:a5:42:40:05:2b:
d0:47:d0:47:06:d4:71:82:4b:98:19:29:4a:d9:73:
4a:56:47:48:d1:0f:1f:73:0d:f5:ce:60:0c:17:fc:
4e:6b:de:26:e0:b6:ce:f8:cd:9c:5e:ae:bf:a0:a8:
1c:8c:b9:68:5f:f6:f6:5e:aa:21:22:ea:2e:9f:51:
db:6b:1d:e8:80:1f:ee:e2:54:63:02:b3:b7:01:5a:
09:64:c9:8b:5c:2d:cd:8b:bc:d9:b2:1b:9b:8d:79:
59:d7:cf:d6:1a:91:a7:94:50:ff:3f:b2:e1:27:a6:
03:5a:b3:33:de:d7:e3:b4:b7:3f:c2:70:72:46:5b:
93:5f:eb:42:96:38:d6:c6:69:be:6a:58:4f:16:00:
11:b7:98:13:4f:51:ef:4a:eb:4e:5a:69:3c:5c:fa:
cf:f9:10:89:66:fd:ed:0b:02:a1:bd:3b:af:31:2d:
0a:8e:4e:71:d5:81:09:34:91:ea:95:39:20:78:bc:
de:ea:58:16:f6:bc:19:21:e2:36:6f:1b:a5:c6:79:
05:d8:0a:44:2f:6c:f9:2f:23:4c:13:a6:e0:76:96:
72:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4D:F5:D9:23:42:DA:A7:C7:F5:B7:2E:CD:B5:57:C3:EE:46:53:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4a1d8956-b2db-36dc-9ee1-d0ba307a9864.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl
X509v3 Authority Key Identifier:
keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:68:2a:41:61:d8:fb:20:45:c4:d3:b0:44:fa:06:84:80:0d:
c0:fc:06:aa:cc:9c:68:cf:6d:9f:c4:6b:68:b8:47:63:ba:bf:
31:2d:7d:45:b5:0c:65:e0:9c:b3:a4:62:c1:ea:ae:6f:35:b9:
31:cf:59:3e:8c:09:9a:99:18:35:7b:df:be:5e:16:00:82:0b:
e5:08:2b:53:14:61:fc:fd:27:ad:f6:7b:10:72:6a:65:71:01:
8a:de:8f:96:cf:b5:27:98:f7:e6:b0:c6:34:fc:37:3e:be:d3:
0a:72:b5:09:43:8d:3c:c5:71:a5:ca:f8:6f:e3:91:2a:41:c8:
e5:f9:d8:98:ab:f3:a2:bb:b1:9e:b8:fd:14:92:ac:61:49:71:
f3:cc:6b:92:d3:93:c7:39:3f:45:1a:0b:b5:b8:9d:32:32:e9:
11:24:aa:66:0f:7d:af:aa:10:4b:86:6c:24:9c:ff:05:bb:fe:
9e:fe:1b:42:95:2a:bc:74:e9:ed:cd:2d:a6:79:10:0e:f5:1b:
ba:56:2f:8c:d1:61:c9:64:0d:b2:59:ec:bf:43:a8:2b:b4:81:
96:06:2f:e3:43:db:45:79:89:23:11:91:f8:05:44:77:62:89:
40:2a:a0:e4:fe:d9:82:c9:eb:18:be:4d:9e:20:45:f8:d1:d5:
cc:e8:a1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:47:40 2025 by rpki-client