Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/67542837-ca92-360a-b073-112eee3ce5bd.roa
File: 67542837-ca92-360a-b073-112eee3ce5bd.roa (raw, json)
Hash identifier: P4ZaZ1tsBIJONI05QE76yclF/S3+zajiFMpjLWfqlwo=
Subject key identifier: 32:72:4A:07:11:BB:7C:05:8C:78:43:E2:EF:D9:32:ED:57:2A:F3:48
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858494B1628C6A7F14FCFFBF5E9C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/67542837-ca92-360a-b073-112eee3ce5bd.roa
Signing time: Mon 24 Mar 2025 10:24:06 +0000
ROA not before: Mon 24 Mar 2025 10:24:06 +0000
ROA not after: Sun 22 Jun 2025 10:24:06 +0000
asID: 329007
IP address blocks: 206.123.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 09:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:16:28:c6:a7:f1:4f:cf:fb:f5:e9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 24 10:24:06 2025 GMT
Not After : Jun 22 10:24:06 2025 GMT
Subject: CN=70a4b0b5-5812-4ee2-865e-1ab38eecaf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:a6:41:48:f6:97:0d:ee:28:1f:33:49:9e:
db:18:d7:c0:5f:3f:d5:24:6e:9b:29:ec:7b:5b:a0:
2e:eb:23:a0:c5:7b:6d:11:dc:a1:5b:ff:a8:d4:ef:
08:e4:50:4f:73:da:00:31:dd:48:56:bf:97:93:e3:
03:4c:36:87:7f:05:ca:68:c3:e5:da:f3:9e:aa:37:
7c:78:6f:17:0b:30:31:70:0e:00:60:ec:53:1a:71:
3c:05:67:44:38:1b:4d:46:ce:59:38:73:4e:9e:57:
13:f9:98:00:17:82:57:ea:0b:e8:90:90:42:90:10:
97:04:32:08:25:6c:a8:1e:b5:c2:19:24:8d:ca:9e:
10:54:49:0b:23:3d:70:cb:0f:dd:29:a6:0d:57:01:
9a:2b:ee:81:c4:52:c5:93:b1:ba:6f:6a:af:bc:a8:
c1:4d:a2:57:ee:95:06:65:91:25:b5:ae:72:d0:35:
ba:7a:5f:4c:74:29:3c:9d:01:9e:ae:b1:97:19:0e:
1b:d9:0c:7a:e7:3c:1a:7c:09:58:87:ae:3b:62:36:
50:14:bc:09:26:c0:13:2a:e8:86:2f:4a:66:1e:53:
c5:cc:f0:92:d3:df:1d:27:18:99:cd:7e:12:3e:ab:
c0:93:fc:19:11:b1:c4:13:b6:cf:c8:8c:72:f7:ac:
31:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:72:4A:07:11:BB:7C:05:8C:78:43:E2:EF:D9:32:ED:57:2A:F3:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/67542837-ca92-360a-b073-112eee3ce5bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:af:fc:4f:a7:71:2f:4c:10:43:6b:74:fd:41:94:9e:62:f4:
b2:ab:fe:80:ed:b6:a7:40:9e:cd:89:3a:8a:bd:db:99:e5:62:
8f:2f:16:2f:56:02:31:03:eb:7e:26:d6:72:24:aa:15:9a:75:
b9:d6:a7:b9:1b:95:ab:6d:1e:fe:cf:65:92:a3:67:1f:0b:27:
2b:73:83:72:a8:38:71:2e:a9:e3:3d:16:9c:b4:4b:43:f6:6f:
29:6a:ce:f1:9b:c8:e8:2c:fa:42:fc:e6:15:43:5f:02:41:ec:
96:f8:0b:68:2b:88:d5:2a:c6:03:fc:65:5c:28:d3:bb:0f:3f:
12:45:f0:31:19:75:29:47:53:6b:87:cc:0e:5d:e5:7c:80:b8:
ee:88:be:9e:2a:05:63:f9:96:93:95:a5:6a:4a:9d:f8:8d:7f:
90:89:13:5f:be:0e:1b:b1:d0:94:96:92:f3:ff:37:66:af:77:
38:b7:85:cb:ca:e4:90:5f:01:df:b7:bb:f3:fe:e4:09:d3:b1:
d7:44:0e:e0:c8:db:c8:c1:46:20:63:cc:f5:3e:6f:ae:90:f6:
17:e7:e0:e3:a2:3b:d7:87:d7:35:0c:1b:c5:33:6d:a3:c8:99:
cf:e6:54:bc:aa:69:8e:fe:6a:fc:12:16:28:fa:8e:26:bd:3b:
b7:a7:1b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:01 2025 by rpki-client