Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/824d4a61-1d00-33f2-a741-a007677c7499.roa
File: 824d4a61-1d00-33f2-a741-a007677c7499.roa (raw, json)
Hash identifier: C3mcaN08feWFr76yUCGrLifSCvgXKGOVp2ZwUqLyYdU=
Subject key identifier: E9:BC:3D:15:A9:6F:42:D8:22:A3:C6:91:DC:5B:DD:8F:24:74:F5:9C
Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e
Certificate serial: 010D0C9F43285848C989D892A51F251C2A565F50
Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/824d4a61-1d00-33f2-a741-a007677c7499.roa
Signing time: Thu 06 Feb 2025 00:42:06 +0000
ROA not before: Thu 06 Feb 2025 00:42:06 +0000
ROA not after: Tue 06 May 2025 23:42:06 +0000
asID: 16509
IP address blocks: 209.54.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 19:37:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c9:89:d8:92:a5:1f:25:1c:2a:56:5f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e
Validity
Not Before: Feb 6 00:42:06 2025 GMT
Not After : May 6 23:42:06 2025 GMT
Subject: CN=5ffacbec-648e-4e33-b1d2-a289e56eba08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:9f:28:b5:5c:4f:3e:8a:5c:76:77:93:34:
77:66:ae:1f:12:85:ff:ff:7f:c9:23:aa:f1:65:e6:
25:55:50:b5:e7:6b:7e:e8:7e:01:eb:bf:11:12:b3:
95:51:55:4b:a3:02:8e:38:29:38:a0:02:7a:51:3f:
b7:12:10:12:68:87:a7:d3:7b:23:3e:bd:92:56:7e:
6b:6a:7a:dd:d4:7c:08:bb:81:54:31:77:44:bb:60:
a1:bc:bd:20:37:0f:13:6a:64:9b:4c:01:a0:d7:9f:
59:75:9f:27:aa:c7:55:b7:24:6f:7f:2f:df:14:4a:
df:dd:de:7f:8e:08:4a:c4:41:48:57:b7:2f:22:13:
0c:5d:e8:17:79:90:41:0e:c5:16:3a:82:55:54:9d:
b5:7f:bc:8a:3e:04:f5:6f:b2:1b:e3:e0:92:39:95:
9a:67:83:31:d1:80:35:c1:a1:3b:9a:ee:23:82:85:
ea:e7:8a:5d:b1:fd:d7:da:bd:47:94:ef:dd:8b:88:
ae:de:90:39:77:31:ff:2f:9f:47:b0:54:0b:b9:1e:
d6:84:04:5b:88:ec:25:99:dc:05:0f:c7:39:46:ca:
c4:7b:16:48:ac:88:76:82:aa:4d:63:b3:e2:8b:d0:
9b:82:44:2f:54:df:c7:a0:86:e4:6a:f6:41:b5:ed:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BC:3D:15:A9:6F:42:D8:22:A3:C6:91:DC:5B:DD:8F:24:74:F5:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/824d4a61-1d00-33f2-a741-a007677c7499.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl
X509v3 Authority Key Identifier:
keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.54.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:0e:84:bf:c4:08:3b:47:7b:40:3d:c5:76:07:19:35:09:4c:
0a:ef:b7:60:b5:3b:28:5c:20:63:d0:42:b7:d5:c2:37:65:0b:
80:f7:94:0e:df:03:5c:18:28:05:b5:4f:01:ed:ed:7f:50:b6:
a2:c1:80:ad:53:79:24:7f:37:dd:59:29:fd:c7:37:63:9b:68:
ae:30:2f:86:d5:c8:10:03:b6:cb:1c:bc:f2:08:90:3c:39:f4:
8d:f3:3b:7f:95:1e:38:e8:bc:d2:7f:ad:b4:5a:21:34:6d:b0:
70:62:9f:6b:f8:ba:8a:d9:b6:1e:55:71:7b:ea:1f:d2:92:d1:
fd:03:fd:69:b3:42:d6:f8:88:f1:5c:96:e5:32:c1:57:cf:bd:
f9:de:58:ff:53:d0:7c:c6:43:0e:4b:68:59:2c:24:cf:73:16:
f2:38:ed:e7:bc:49:ce:98:c0:b1:ab:98:39:6e:86:68:22:21:
a2:75:b4:b9:be:a9:2e:e4:39:09:64:45:bc:79:8a:f4:f6:20:
fb:d7:30:5f:42:65:94:f4:e7:22:6b:59:7c:b3:15:e5:7d:86:
11:c0:0f:01:71:4d:e1:79:d1:b9:7f:7b:76:9c:35:98:ad:48:
46:99:ac:bc:98:6b:8e:01:73:79:8f:6d:9c:b4:40:02:1e:51:
84:3f:f4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:33 2025 by rpki-client