Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4f2ac2b2-c1ad-3a8f-8ccc-d44ab938bc83.roa
File: 4f2ac2b2-c1ad-3a8f-8ccc-d44ab938bc83.roa (raw, json)
Hash identifier: UzXygYvfDOpwMOaf4t62r0MPOXRPvLhe2v045nP270w=
Subject key identifier: 06:D5:C5:F7:A9:FC:0B:1A:BB:80:71:0F:D9:12:17:89:56:FE:7C:D4
Certificate issuer: /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Certificate serial: 010D0C9F4328584888818628EC3D94A4163A2980
Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4f2ac2b2-c1ad-3a8f-8ccc-d44ab938bc83.roa
Signing time: Mon 13 Jan 2025 17:37:48 +0000
ROA not before: Mon 13 Jan 2025 17:37:48 +0000
ROA not after: Sun 13 Apr 2025 16:37:48 +0000
asID: 16589
IP address blocks: 199.96.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 26 Jan 2025 20:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:81:86:28:ec:3d:94:a4:16:3a:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Validity
Not Before: Jan 13 17:37:48 2025 GMT
Not After : Apr 13 16:37:48 2025 GMT
Subject: CN=b2aac955-2d41-43b5-acbe-dc503b5d2cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f5:e8:18:2c:bd:c1:f2:6e:93:a2:64:45:44:
77:b1:a6:90:75:54:5c:62:09:fe:55:d2:a8:2c:3b:
d9:df:d4:bd:b5:5d:e9:dc:99:c4:34:46:86:81:83:
43:ba:57:2c:d9:06:26:e6:69:f2:12:eb:e8:41:e3:
0c:f7:43:fb:54:82:2a:18:ae:9d:13:a1:32:2c:f9:
e3:63:98:e4:7e:ae:c8:a6:24:60:23:86:6c:af:40:
94:0a:d4:7f:30:09:7e:67:87:99:f0:26:cc:6c:f9:
b4:91:42:49:b7:8c:8e:60:f6:1e:e5:24:14:77:d3:
15:dc:0a:9b:6e:c5:6f:22:ea:34:df:4c:98:b2:b1:
ed:1a:2d:b6:5f:52:45:90:20:4f:f5:44:63:38:5c:
8f:a7:c8:a8:12:e0:f3:4c:21:3a:49:42:07:d9:e5:
cf:14:cb:2a:f1:56:7b:38:67:ee:13:9d:a2:e9:6f:
86:34:e5:5a:37:81:5f:2d:39:e9:8d:6e:91:e4:be:
62:a2:3a:c6:c3:e2:3d:c0:fe:91:41:c0:3f:89:7e:
64:65:fe:6a:be:dd:f2:28:06:26:7a:3f:7a:14:25:
71:40:a4:7f:86:08:f9:42:51:0a:3a:ab:cc:25:85:
6b:65:5a:3a:bb:e6:fb:54:cc:df:01:a8:f1:53:d4:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D5:C5:F7:A9:FC:0B:1A:BB:80:71:0F:D9:12:17:89:56:FE:7C:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4f2ac2b2-c1ad-3a8f-8ccc-d44ab938bc83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl
X509v3 Authority Key Identifier:
keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:65:e9:9f:c5:3c:80:dc:60:f4:6a:21:79:74:d3:29:aa:c2:
be:e1:9d:a8:4b:50:d7:81:3a:13:37:df:9d:b0:2a:05:35:49:
98:77:6a:02:fa:b4:25:33:5a:e5:d3:0a:77:59:43:e8:21:fc:
5b:ea:40:88:f0:26:06:23:f6:d1:f2:21:9d:e8:92:78:f7:e7:
bf:40:7d:95:05:e1:7c:4c:9f:cf:ed:3d:9d:ab:da:8e:43:80:
af:34:3d:f9:1a:6a:0b:94:30:57:bb:57:d5:58:af:f0:0d:f7:
a9:30:dc:28:37:62:9c:6b:7c:68:44:4b:e0:65:78:cd:fa:c5:
7b:01:5c:2c:1c:6f:e6:03:72:8b:35:4b:3a:c6:1b:ea:92:b7:
b8:35:98:ef:97:5b:e4:2c:57:12:50:cf:7e:28:ff:87:bf:6c:
37:43:4a:e8:72:29:af:67:3f:05:4e:54:a1:c6:31:0e:f0:85:
ee:d7:d7:e1:14:4f:e1:86:4e:44:4c:25:7e:e3:12:92:73:ec:
2f:fb:04:10:f0:c2:5d:01:2d:28:87:67:0e:68:ea:fa:ac:e9:
f1:85:ae:d3:3f:70:c1:e1:a1:48:41:f6:9e:bc:39:f7:00:55:
9b:56:4f:bb:b0:bf:bb:23:53:b2:20:0a:a7:c3:0d:0b:fb:c9:
d9:70:46:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:17:16 2025 by rpki-client