Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c52e92d8-8afc-39ec-9a8a-f4a856ae7634.roa
File: c52e92d8-8afc-39ec-9a8a-f4a856ae7634.roa (raw, json)
Hash identifier: dq0nLGTuS0JcleeW2uByWq+c46vPklgFfLV7fDFxE6c=
Subject key identifier: 76:41:24:06:E7:12:E9:9A:80:3D:98:09:99:1A:CE:8E:79:02:ED:88
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584926427B1936625FC0C5A92FA0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c52e92d8-8afc-39ec-9a8a-f4a856ae7634.roa
Signing time: Tue 11 Mar 2025 05:48:30 +0000
ROA not before: Tue 11 Mar 2025 05:48:30 +0000
ROA not after: Mon 09 Jun 2025 05:48:30 +0000
asID: 329007
IP address blocks: 206.123.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 09:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:26:42:7b:19:36:62:5f:c0:c5:a9:2f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 11 05:48:30 2025 GMT
Not After : Jun 9 05:48:30 2025 GMT
Subject: CN=a8e53066-20ce-4c8d-a488-aabdab1c6768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:40:ea:97:52:8d:2d:8f:fc:13:83:0c:ca:40:
a6:6c:56:6b:51:27:f0:0c:3e:7c:07:84:1c:2e:01:
28:35:05:1c:7c:37:13:d2:e4:cb:7a:27:f7:81:89:
ad:71:85:0a:98:24:6d:b7:43:0d:87:1c:e2:95:c2:
f9:18:13:a1:a3:32:d8:52:66:05:88:61:7d:17:04:
8f:93:ca:4d:0f:14:84:de:ef:2d:8e:db:1b:08:3e:
a9:9f:1f:89:88:03:6d:a3:e7:95:52:5e:c6:f1:e2:
fa:6c:a1:e6:d5:91:44:9a:78:1d:36:77:eb:c5:88:
18:3d:03:53:c2:03:0f:48:c1:c9:40:21:e2:56:38:
3e:08:ee:82:e1:0f:30:3d:c9:96:f0:ce:84:bd:a1:
98:97:88:42:cd:45:9f:97:79:0f:13:e6:bd:fc:83:
58:24:25:0c:07:14:02:1f:fc:6f:fd:3f:50:9b:8a:
31:8c:20:bc:d7:9c:af:90:59:cf:1a:8b:88:e1:a4:
96:ad:79:36:3c:39:f9:3f:d6:de:23:21:cc:9a:00:
c9:24:7e:9d:e8:b3:72:6f:dd:69:c2:ee:34:ae:a0:
f6:56:cf:c3:7c:a8:a1:7a:79:53:c7:37:d8:36:cf:
c1:da:14:1a:64:83:56:03:86:79:ba:cd:f3:83:0c:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:41:24:06:E7:12:E9:9A:80:3D:98:09:99:1A:CE:8E:79:02:ED:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c52e92d8-8afc-39ec-9a8a-f4a856ae7634.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:16:bf:d4:30:b0:4e:54:2c:69:6a:57:5c:4e:72:5b:46:a2:
b3:5b:8f:31:97:18:a9:5f:46:13:89:5f:fc:f6:2e:9f:ce:03:
b6:a7:d2:b6:81:da:88:66:78:51:73:07:40:ea:28:6a:69:0a:
54:29:c7:45:6a:c0:e7:fd:1a:c9:81:91:dc:8b:e1:ee:5f:7f:
19:c5:89:c7:db:b3:a0:b8:79:93:10:90:08:4b:d3:16:9d:12:
96:70:4b:32:35:a9:de:8c:20:e4:ae:fc:fb:17:66:fa:38:5f:
12:49:94:c9:c6:29:6b:18:ed:fc:65:55:8a:2e:ee:17:51:2d:
ac:9b:85:fd:7a:0c:a6:c0:67:5b:b8:8b:c0:c9:76:17:41:ae:
3b:97:43:5c:86:c2:09:78:e3:4f:ce:dc:7a:ad:e3:2e:c3:d4:
1b:c6:91:4f:cd:5a:57:9f:35:34:30:92:8e:c3:05:e2:0e:b7:
5e:66:5b:76:82:f3:51:4a:1c:cd:c9:0a:84:64:b2:8c:43:e8:
48:ec:2d:c3:48:ab:61:d2:4c:5e:7a:4e:f3:fd:4b:49:94:cb:
d0:61:a3:c6:99:0e:1f:ea:ad:60:4a:77:4f:58:73:a2:74:cb:
0a:94:09:22:c0:31:e3:84:8f:f3:0a:06:0c:be:d6:26:ca:55:
0d:94:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:59 2025 by rpki-client