Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/da31cc71-2a0f-3504-8240-4442ecd161de.roa
File: da31cc71-2a0f-3504-8240-4442ecd161de.roa (raw, json)
Hash identifier: vs2znLTTsvVvget5hYZbqhZy97Vjc+gz1xNJyY6OcMA=
Subject key identifier: 5F:40:10:64:FB:0A:CA:3E:9B:B0:8E:1A:57:AB:1C:83:A0:6D:9D:2E
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F43285848B2793515B24A25AD4E054A40
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/da31cc71-2a0f-3504-8240-4442ecd161de.roa
Signing time: Tue 28 Jan 2025 18:24:59 +0000
ROA not before: Tue 28 Jan 2025 18:24:59 +0000
ROA not after: Mon 28 Apr 2025 17:24:59 +0000
asID: 23498
IP address blocks: 199.33.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 14:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:79:35:15:b2:4a:25:ad:4e:05:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Jan 28 18:24:59 2025 GMT
Not After : Apr 28 17:24:59 2025 GMT
Subject: CN=67f4ffae-3a87-48a8-83e4-b9ee45b0a843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:19:b9:23:4a:96:6a:d8:61:2e:47:7d:76:c0:
6b:e8:68:19:f9:a3:43:1c:63:88:aa:63:fe:5c:32:
a6:26:18:c9:47:f6:40:c9:2f:29:ab:37:78:46:e7:
cf:dd:f2:df:d7:bd:dc:91:2b:4b:4a:d3:1e:34:f3:
bc:8b:1f:c4:c7:a8:13:1f:cc:3d:62:24:97:41:9f:
70:cc:86:4e:c2:4b:59:88:f4:cd:ca:15:2d:2f:24:
77:13:73:90:ca:5f:a2:49:44:a3:4d:6a:9a:ff:52:
6d:4f:75:4b:8d:b5:bb:f7:99:b8:e6:01:e9:ed:ed:
88:ec:9c:c4:91:e5:ea:47:17:e8:44:26:53:4c:ae:
e6:01:35:2d:89:e7:55:17:37:5c:da:0c:ac:3f:cf:
58:e4:a5:79:34:f6:63:b3:99:b6:01:bb:58:5f:ae:
72:53:36:6c:96:20:82:d1:b3:45:27:b9:d8:5a:51:
83:64:5e:ad:6a:46:bd:73:38:c1:d2:b0:3a:66:97:
fe:6a:0c:04:a5:f3:ba:66:c6:49:48:95:c5:c1:c9:
13:e0:cf:f1:6f:b7:7b:9a:3f:88:94:59:c6:d7:7a:
96:ae:af:73:22:68:71:fd:2e:d4:99:cf:20:f5:a3:
ec:68:b6:a8:6f:2d:89:ce:52:34:36:a8:f1:f2:bb:
29:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:40:10:64:FB:0A:CA:3E:9B:B0:8E:1A:57:AB:1C:83:A0:6D:9D:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/da31cc71-2a0f-3504-8240-4442ecd161de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.33.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:16:af:e2:87:b5:ec:a3:05:d3:0d:b8:66:c4:f4:a0:a8:54:
3d:fb:ee:18:07:7a:ed:c7:d0:70:4b:61:20:5b:ba:f9:1c:32:
69:b1:a1:72:3c:04:62:f1:a1:ee:24:4a:ba:42:ba:7d:17:3f:
3b:b3:7f:03:59:c2:7a:8e:c7:52:e2:9c:20:cc:04:c3:03:e8:
76:49:3d:56:31:f2:f3:c7:26:0f:f5:91:9b:07:f0:34:8e:04:
98:7d:4c:e0:c6:6c:ac:11:af:43:d9:e4:a8:cf:14:5c:ae:ec:
05:4a:a1:74:de:45:4d:d8:3a:cb:68:8a:88:a7:51:2f:2b:e8:
7a:02:eb:d5:e6:26:37:f3:d7:f7:60:3c:46:5f:40:cb:af:14:
7b:d6:6f:bc:8d:05:97:95:52:55:33:ba:34:70:a0:8f:6a:32:
19:fb:b6:77:58:91:23:ec:72:b9:48:b0:f2:d4:a1:58:75:99:
04:8d:64:fa:18:22:5e:01:da:e1:9d:31:e1:71:e4:38:8d:10:
f9:38:0f:29:12:1f:5b:83:96:c0:5c:53:6f:2c:8f:6c:93:3a:
6a:25:7a:9b:3c:67:bf:0d:19:55:0a:02:dc:c0:aa:41:47:35:
34:a8:1c:08:5b:e5:bd:22:43:f0:03:d4:3e:2e:32:3a:ed:f1:
57:00:3b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:49 2025 by rpki-client