Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/911c6d5a-1324-3323-a0b6-901eb7e6a036.roa
File: 911c6d5a-1324-3323-a0b6-901eb7e6a036.roa (raw, json)
Hash identifier: +vRaLY2XLJC8C4vcMVo74Ow0GYhvcJBrTg5izSJ/1J0=
Subject key identifier: 93:F1:BF:15:1C:F1:74:56:33:F5:8B:FD:2C:01:62:F2:AB:FB:6B:BC
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848B1B4E68061F38BC0CF003680
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/911c6d5a-1324-3323-a0b6-901eb7e6a036.roa
Signing time: Tue 28 Jan 2025 11:49:27 +0000
ROA not before: Tue 28 Jan 2025 11:49:27 +0000
ROA not after: Mon 28 Apr 2025 10:49:27 +0000
asID: 208485
IP address blocks: 104.243.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 06:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:b4:e6:80:61:f3:8b:c0:cf:00:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 28 11:49:27 2025 GMT
Not After : Apr 28 10:49:27 2025 GMT
Subject: CN=8753fa51-8ff2-4159-8d06-ff23f4393efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:d0:e6:23:8b:7b:45:25:e5:6b:4f:5a:9d:
20:2c:75:83:69:45:b5:d0:24:90:85:52:2a:2a:a4:
d6:96:d3:5b:52:b9:53:8f:92:30:9c:b8:b2:ad:1d:
11:b6:83:ea:85:83:d3:88:49:26:ac:81:de:d3:1a:
9a:89:d8:2d:cf:7b:eb:ea:9d:f6:15:55:a8:6c:61:
d6:fd:6e:d3:29:0a:af:09:8c:50:72:3a:fc:e3:33:
75:5d:8f:ad:05:b9:05:d5:8f:af:bf:f4:0e:53:66:
48:e6:34:a9:33:45:29:f9:a6:28:b7:ee:01:50:5a:
22:3d:f0:ae:bc:92:93:eb:53:ff:b7:55:c3:de:21:
ac:ab:7c:f1:3f:f5:dc:81:39:c4:28:89:0e:48:42:
d2:4a:fd:b4:e6:79:97:b6:01:cf:06:82:af:d9:d8:
f2:67:68:95:d4:8d:c6:ff:04:64:6f:4c:8e:94:8b:
fa:e6:5c:bb:09:20:da:5d:74:27:4e:42:f4:57:6e:
cb:63:97:bd:88:65:8d:38:22:87:b8:06:c6:05:12:
63:96:54:73:ea:6b:4e:56:47:26:4e:6d:28:c7:ff:
c9:83:bd:6a:98:4b:65:0e:dd:c3:8a:ce:a1:96:c0:
3a:da:dc:c1:b5:b3:7f:17:2e:4b:26:1f:4d:f4:0c:
ee:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F1:BF:15:1C:F1:74:56:33:F5:8B:FD:2C:01:62:F2:AB:FB:6B:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/911c6d5a-1324-3323-a0b6-901eb7e6a036.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:90:dc:d1:37:ba:06:da:22:5f:db:b2:81:33:e4:f5:06:18:
73:c8:84:60:56:ad:b1:fc:58:11:64:a7:4b:ae:b3:92:b3:59:
42:f4:f5:28:d3:54:dc:63:57:50:94:2f:0b:09:a2:f6:01:63:
b1:d0:8c:48:9f:ee:74:81:f1:ea:d7:43:1d:03:03:10:25:06:
27:11:ed:20:3a:55:f0:e6:f2:52:9b:94:0a:3f:da:0b:77:d7:
28:25:a0:33:0f:ab:87:1d:67:77:bd:70:3e:f3:37:98:f0:5d:
50:3b:ca:28:5d:58:c3:31:66:73:71:a3:ff:fb:cf:b7:f2:3b:
1c:b1:01:d2:5c:74:d7:3e:c0:6f:c4:21:ff:bb:13:ab:c9:57:
a0:c5:91:fe:25:2d:48:19:cb:d2:c7:8f:94:8c:a8:ab:bf:ee:
88:98:cf:35:2a:a4:64:c9:23:f2:8b:81:64:80:ca:ce:d6:2d:
d7:e4:3e:42:fe:77:7a:ff:16:66:fb:6b:58:73:56:ab:82:1b:
8b:7d:f7:00:b0:ea:83:0a:46:2d:af:1c:16:36:9d:6f:d9:15:
19:76:78:9a:e8:aa:de:39:2f:8c:bb:5a:c2:28:04:14:75:cc:
c4:ce:f9:cb:1a:9c:4c:59:b4:9c:cb:19:fe:37:be:c1:97:4f:
43:e6:65:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:09 2025 by rpki-client