Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/56091c6b-69b8-3b1b-b32a-0f07a9a1a3ef.roa
File: 56091c6b-69b8-3b1b-b32a-0f07a9a1a3ef.roa (raw, json)
Hash identifier: t2uqG5KKG8jb1cJ0yRGhATz54upxJxYdWeNVRnr2/Ic=
Subject key identifier: 46:9E:DA:94:46:F9:C0:6E:1F:E4:B9:62:4C:81:DF:02:47:04:6E:1D
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858489E14BE4D00C5D2CFA82A9100
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/56091c6b-69b8-3b1b-b32a-0f07a9a1a3ef.roa
Signing time: Tue 21 Jan 2025 11:06:24 +0000
ROA not before: Tue 21 Jan 2025 11:06:24 +0000
ROA not after: Mon 21 Apr 2025 10:06:24 +0000
asID: 329007
IP address blocks: 206.123.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 11:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:14:be:4d:00:c5:d2:cf:a8:2a:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 21 11:06:24 2025 GMT
Not After : Apr 21 10:06:24 2025 GMT
Subject: CN=71c8bac5-c70a-4a5d-8835-962ba17e8069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:78:f2:64:40:c8:e4:1b:b4:91:d2:33:0c:
c6:16:89:dc:e0:93:19:23:08:59:f7:31:9d:d8:f5:
4d:ed:0c:70:4a:3f:85:08:ac:24:5b:12:17:cb:60:
67:09:94:b5:c1:9f:1a:15:7b:33:4b:77:aa:e5:a6:
81:6f:e1:63:0f:db:2a:dc:fd:f8:6c:67:19:74:48:
35:37:8c:ab:91:06:7a:6f:e6:06:d2:95:71:79:ca:
57:c7:ac:ac:5b:1e:68:6a:69:d4:4a:de:2c:19:f3:
a5:f1:b8:83:18:e5:c0:f2:de:0e:16:38:55:6a:b3:
e5:b5:fd:d8:6f:5c:ef:c1:f3:c2:ce:89:ff:29:95:
2b:18:28:2e:e0:ec:95:b5:79:ad:bc:23:55:ee:76:
7c:2f:23:41:0f:81:e2:92:25:1f:b3:c1:bd:c1:46:
ab:e1:81:cd:93:13:25:77:76:d1:12:c3:a4:3b:36:
d2:44:58:4d:61:0f:ab:63:4f:27:1f:5b:01:a5:73:
c0:02:62:27:85:6e:31:4f:f3:c3:ba:54:17:ee:ea:
27:f5:f5:ba:bb:a5:f2:58:74:82:eb:b4:a6:b5:05:
23:f2:7b:df:98:52:23:2a:c9:d0:70:db:88:ce:4e:
e7:dc:13:53:c8:17:55:e6:88:ce:3d:75:0e:e5:30:
3f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9E:DA:94:46:F9:C0:6E:1F:E4:B9:62:4C:81:DF:02:47:04:6E:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/56091c6b-69b8-3b1b-b32a-0f07a9a1a3ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:01:2a:dc:00:d9:e4:b6:53:3d:01:b3:bd:6c:53:14:2b:80:
0f:21:5f:6f:95:1b:3e:55:9d:16:ee:ec:10:74:da:7c:c6:f4:
58:1b:ef:82:31:b5:c8:35:f7:68:77:cf:04:14:c2:10:7b:c4:
f9:fc:cc:0b:81:e8:8a:59:81:05:db:c6:e7:2b:77:65:65:f9:
29:f8:f5:72:37:65:41:d8:61:a7:3e:45:7c:ce:68:85:57:db:
b8:21:67:4d:f3:bd:54:66:b6:26:c9:49:87:72:30:ac:0c:d6:
b6:e4:87:cf:c3:c9:20:85:0f:5c:c6:8a:44:0c:0b:a3:6f:9c:
75:06:08:5a:c7:6f:b2:de:46:4f:fc:0e:57:80:b2:30:46:f2:
27:a4:48:b5:df:38:5d:4c:bd:c1:6f:90:a8:3c:75:76:2a:fc:
11:12:f6:4b:f8:69:e1:67:1d:1c:61:dc:21:4f:ba:e0:8f:b6:
2f:6a:ad:87:ae:47:dc:79:22:49:60:78:b9:ef:45:37:21:f7:
dd:4d:ed:83:db:b7:e4:c9:1b:9f:01:23:7b:1b:7d:f2:4b:fe:
a6:c2:da:c8:bb:f1:fa:ac:ca:46:87:2b:14:3a:43:41:f1:88:
e3:2a:d3:06:27:0c:89:ab:9e:96:5e:ff:42:59:b7:e7:9a:26:
82:7c:73:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:39 2025 by rpki-client