Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/2d0ae23a-7f2c-3fd3-a577-742e6b5477b5.roa
File: 2d0ae23a-7f2c-3fd3-a577-742e6b5477b5.roa (raw, json)
Hash identifier: 7DIUzBb41LXRPTY32llqFdnKJ9zhZ7/hgcSB8Hf7grI=
Subject key identifier: E0:E9:17:14:99:09:3A:75:BC:EA:B5:B8:2E:3D:62:20:DD:6A:15:7F
Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801
Certificate serial: 010D0C9F432858493A9142FBC1660B15733E2DC0
Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/2d0ae23a-7f2c-3fd3-a577-742e6b5477b5.roa
Signing time: Tue 18 Mar 2025 12:23:24 +0000
ROA not before: Tue 18 Mar 2025 12:23:24 +0000
ROA not after: Mon 16 Jun 2025 12:23:24 +0000
asID: 5511
IP address blocks: 65.75.205.0/24 maxlen: 24
65.75.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 18:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3a:91:42:fb:c1:66:0b:15:73:3e:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801
Validity
Not Before: Mar 18 12:23:24 2025 GMT
Not After : Jun 16 12:23:24 2025 GMT
Subject: CN=44b224b5-df83-48e0-a746-5fdd850f0019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7a:f0:e1:f5:45:b3:b6:e2:a5:0c:ef:a1:5c:
4d:13:16:b0:cf:fb:d4:71:fb:2d:58:14:a6:40:a5:
f8:77:c0:f5:10:c8:7a:bd:cc:ce:2e:94:27:53:36:
a3:8a:23:56:b6:12:6a:d4:b4:89:ee:77:c8:e5:51:
7a:ee:00:49:18:7e:01:5b:11:dc:01:40:af:f1:52:
f8:78:4b:96:1c:ae:50:8e:5e:9b:84:66:21:da:60:
01:cb:2a:fb:6c:2e:aa:97:85:87:6d:85:4a:88:3c:
8c:fa:d8:04:0c:73:b2:e5:ad:74:c2:8d:42:bc:e7:
01:a3:16:78:45:14:5e:76:68:40:44:3e:0a:c4:fb:
6d:0e:cb:42:48:52:a4:d9:d6:88:10:bf:2e:18:7f:
6d:5d:ad:cf:35:7a:8d:30:32:28:0a:eb:1d:f5:04:
40:d8:00:e6:48:0d:7d:29:06:88:5a:4e:78:4e:68:
8d:70:b5:98:01:5b:a9:12:7a:17:d9:13:20:cf:3d:
45:32:b5:af:98:58:24:9c:a3:e9:32:b9:85:b2:54:
fc:d6:29:b4:e6:ab:74:de:5f:06:f6:b1:fb:59:8a:
92:11:8a:76:f8:ec:fa:d4:43:1a:46:5f:42:07:4d:
4b:cf:97:87:60:84:c5:f2:7d:29:40:f6:8c:7c:b6:
1e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E9:17:14:99:09:3A:75:BC:EA:B5:B8:2E:3D:62:20:DD:6A:15:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/2d0ae23a-7f2c-3fd3-a577-742e6b5477b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl
X509v3 Authority Key Identifier:
keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer
sbgp-ipAddrBlock: critical
IPv4:
65.75.205.0-65.75.206.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:c3:c2:b2:05:e5:fb:55:ce:13:9c:d5:f5:28:8b:0c:0b:c2:
fb:91:6a:a5:19:36:e4:9c:01:54:c0:f5:cc:64:a0:a4:d6:64:
80:c2:fd:57:ce:e8:eb:79:fa:40:42:e8:88:c7:6e:36:c5:ad:
53:41:fd:25:59:8d:01:c4:05:ab:92:b8:bc:88:33:b6:0a:55:
a1:8a:5c:07:b4:a3:ad:ea:9f:0c:ef:c6:79:fd:9c:f6:60:c6:
62:b7:7d:e9:d1:27:68:44:7f:68:74:5d:e9:91:23:1d:ac:c1:
cb:5b:7e:0b:8d:62:90:21:2b:85:b9:f4:ac:2b:d1:ff:56:6b:
b3:b4:62:ca:12:1a:ca:87:a2:01:b9:9c:ad:ae:34:79:f0:e5:
4a:28:bd:3b:21:8a:28:81:af:d0:55:44:5c:c2:80:cb:90:5b:
c9:6e:04:fd:a9:81:5a:20:59:16:2f:62:6b:39:d0:bd:dc:ee:
d7:62:b5:0f:e0:8a:db:62:84:63:72:12:ff:3f:1b:b6:56:ba:
6c:53:75:c0:40:aa:bd:06:f9:f4:b6:3a:00:fb:16:a6:88:2d:
a3:13:32:5c:0d:8b:8f:32:24:6f:3f:a7:3c:88:77:13:69:39:
ad:e0:12:8a:bb:41:54:11:a1:12:6d:10:bf:eb:98:20:ce:f9:
cb:78:52:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:05:47 2025 by rpki-client