Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de835f1d-06b3-3dea-a18a-ff3d44be20d5.roa
File: de835f1d-06b3-3dea-a18a-ff3d44be20d5.roa (raw, json)
Hash identifier: GKslUlhJVxgyvwcw8dfMnQZN/U4zeBKJtF+xei57d5w=
Subject key identifier: C6:23:2C:F0:6E:D2:89:43:D9:0A:2E:A4:5B:B3:BF:8F:F7:A9:98:CD
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112BF775A5243B3F5F9380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de835f1d-06b3-3dea-a18a-ff3d44be20d5.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7268
IP address blocks: 66.84.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 21:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:2b:f7:75:a5:24:3b:3f:5f:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=4d4b5417-3995-4e97-870d-6e5e08267f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:d9:70:5b:89:a7:79:6a:22:14:41:e4:e4:
85:0b:d5:c9:ee:3c:a1:02:63:03:db:a4:ae:f7:66:
c3:ce:e5:9a:f7:1a:28:33:2d:13:0c:e7:4a:06:a8:
b7:92:0a:81:a1:f1:60:ca:df:3d:91:4b:84:46:f8:
58:2d:59:06:55:75:73:19:b7:07:92:c9:d6:16:0f:
0f:b9:95:9c:a6:65:c3:33:20:3e:64:48:3a:59:7a:
a5:4b:f9:38:e4:fc:67:08:0d:99:50:ec:44:8b:ed:
ca:4d:5c:03:74:43:09:fa:6a:ba:83:42:28:95:bd:
7a:de:8a:a4:4b:6e:b6:4f:a4:12:6f:ae:43:9f:83:
da:4b:f1:83:c0:9a:c3:05:61:10:c4:a4:b2:04:30:
fc:bf:b7:8a:6b:90:19:ef:dd:03:eb:56:73:88:e7:
b5:3f:35:d8:89:80:fe:a3:83:6c:e2:7a:71:d9:ea:
e6:fa:16:c0:8f:48:a2:67:7f:5d:bd:23:69:1b:65:
c9:df:ad:39:9d:b5:9e:e8:da:52:d0:71:19:ab:91:
fa:0b:fc:7d:e5:8c:86:4e:2b:24:c9:9a:5b:87:1b:
d6:23:5b:ae:63:81:94:86:87:61:a3:b1:9e:a2:e2:
8e:b4:b3:84:e9:eb:61:1b:77:96:50:be:45:77:16:
72:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:23:2C:F0:6E:D2:89:43:D9:0A:2E:A4:5B:B3:BF:8F:F7:A9:98:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de835f1d-06b3-3dea-a18a-ff3d44be20d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.84.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:ba:bc:6b:58:48:d8:3f:a6:1c:0a:40:0c:ca:f6:58:7f:9c:
6c:9f:56:45:a9:b2:8c:62:53:73:ef:a6:28:02:ab:bc:24:df:
7f:a0:cc:c9:e9:e8:14:56:ab:06:b3:76:07:06:65:3a:a1:3f:
3d:64:a0:9c:3e:e0:57:eb:42:11:f7:63:ba:66:2a:2b:53:87:
fd:62:e3:bf:02:95:df:5c:14:8a:e7:f1:31:04:21:8e:10:fb:
a0:49:3d:6c:43:5d:a1:66:c6:9c:b8:c6:e4:a2:a3:2c:eb:52:
d2:6a:da:f1:25:52:b3:dd:7a:94:fb:56:27:1e:51:c1:ed:76:
32:9e:96:02:4e:0e:89:0b:33:55:93:32:0e:c8:40:30:eb:b7:
c9:0e:40:bb:ae:32:ff:f1:38:44:d1:be:3f:14:bc:9b:e8:11:
e9:83:f5:fc:8e:f3:7c:4e:a8:5f:8b:e9:bf:11:6d:2d:34:45:
45:0b:29:ec:f1:98:4b:9a:88:67:64:e9:20:cf:d6:bb:a1:cf:
5b:55:90:19:25:be:f8:c6:23:01:16:8e:b2:c1:79:f5:2e:3b:
f1:08:47:21:35:35:c3:1b:e4:ac:20:dd:50:c3:84:cf:a8:c0:
c8:7a:b7:62:ee:2b:c5:e1:d1:91:a6:47:8f:03:41:8e:63:e9:
e8:09:bc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:04:43 2025 by rpki-client