Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/20b9d9ce-096f-3a0d-88bb-d039fc35f2b2.roa
File: 20b9d9ce-096f-3a0d-88bb-d039fc35f2b2.roa (raw, json)
Hash identifier: xGWBiNJkkEQvnANUJ/EYsXAk3/li1kIBjY/tr8lsebI=
Subject key identifier: 6E:E2:D0:D5:C9:D5:FC:DF:0F:DA:BE:DF:25:8A:D2:83:54:A9:3E:7A
Certificate issuer: /CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba
Certificate serial: 010D0C9F4328584949FE90B60928B3FC56AE0200
Authority key identifier: 63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/20b9d9ce-096f-3a0d-88bb-d039fc35f2b2.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 40846
IP address blocks: 23.155.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Apr 2025 19:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:90:b6:09:28:b3:fc:56:ae:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=2a979733-fff6-4866-88b0-ed99836f5ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:b5:5f:dc:48:35:f7:a9:9b:eb:2b:71:77:
fe:c5:f7:e8:f1:3c:96:af:67:f9:e0:6b:e0:9d:6b:
6f:d3:50:e4:e0:af:1c:eb:06:ae:9f:fc:28:91:c2:
7e:7d:fd:41:ec:3f:89:d7:b3:85:a7:09:ef:1e:80:
1c:f2:c6:28:b6:ae:bb:aa:22:16:7d:be:aa:4a:79:
a5:39:9d:18:ba:5f:ed:88:4c:e2:ec:e4:93:8d:fb:
3e:01:6f:bd:60:33:ae:67:db:1b:51:34:56:8a:2a:
da:d0:05:d5:c2:99:2e:9d:e4:65:3e:31:19:0a:c4:
e9:ca:6c:b8:c0:52:ba:80:cb:b0:8d:ca:dc:bd:e8:
f1:82:6c:df:e1:cb:dc:89:bd:fb:a8:d5:a5:ee:c0:
c2:ae:a3:94:92:de:fa:9a:e0:f5:f6:3e:80:46:85:
5c:46:eb:6e:0a:14:69:83:e6:d2:3a:d4:ef:25:8b:
fa:06:86:57:e0:8e:2e:bc:68:4b:07:ae:e0:e7:81:
8b:f6:26:c8:56:35:7a:78:00:af:52:0d:36:10:01:
07:01:f6:1e:41:e9:fc:e2:1c:ff:44:0d:13:7a:86:
7b:f7:ed:eb:ea:e3:73:4a:e4:05:37:57:67:9d:db:
80:a9:b2:19:b2:25:26:3d:e3:31:3f:6f:23:8b:2f:
b5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E2:D0:D5:C9:D5:FC:DF:0F:DA:BE:DF:25:8A:D2:83:54:A9:3E:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/20b9d9ce-096f-3a0d-88bb-d039fc35f2b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.crl
X509v3 Authority Key Identifier:
keyid:63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer
sbgp-ipAddrBlock: critical
IPv4:
23.155.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:46:e8:e8:56:76:c5:36:41:a1:1c:fc:41:62:c2:13:05:f7:
7b:37:67:30:77:d9:b5:dd:7e:82:25:b1:59:07:5b:b5:4f:98:
13:9f:f4:2b:5f:a9:cb:9e:32:91:d0:81:81:b0:f0:e9:08:c0:
59:2e:f8:b1:22:3f:8d:2e:ea:8f:97:8b:ea:30:a0:3e:87:2a:
18:f0:b2:0d:94:49:a0:16:d7:e7:1e:28:f5:b0:cc:4d:f8:16:
30:f7:b0:ff:53:ac:d4:12:fa:c0:62:28:49:57:ab:5d:01:4f:
1c:63:b7:6b:1e:05:0b:14:7e:52:79:d9:07:ff:b9:0f:bd:13:
bc:40:b6:12:bc:c4:36:3a:b3:9f:fd:1b:69:17:6e:f7:bb:96:
4d:7c:ff:73:8a:3e:c1:42:a8:27:4d:88:69:69:6d:56:e0:70:
b6:5e:95:f9:05:ba:82:f5:74:93:84:68:1e:28:14:5c:b7:28:
cb:d0:59:0d:3e:cf:15:38:53:33:34:92:68:c7:00:9f:7e:53:
34:f9:1f:cf:90:2e:00:27:85:54:ee:58:29:ae:20:53:9a:0e:
fa:5b:14:eb:2d:93:b8:0b:39:03:db:6a:4c:16:b3:1a:87:6e:
38:31:d6:d4:30:a3:e1:70:5f:a8:27:ae:a7:4e:99:01:ca:91:
11:07:9d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:05:04 2025 by rpki-client