Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/c4c950bc-58d0-3309-b185-2fe14b41d9c2.roa
File: c4c950bc-58d0-3309-b185-2fe14b41d9c2.roa (raw, json)
Hash identifier: 3A0jaPOW+DVLxGTS/dKPSt9u/n+F79Y7woyWXp3uVZA=
Subject key identifier: E7:0D:12:18:ED:34:8C:07:DF:CF:4B:06:C6:BB:64:F0:96:87:82:1F
Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial: 010D0C9F43285848C580F83BB9A62EEDB8C8B100
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/c4c950bc-58d0-3309-b185-2fe14b41d9c2.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 31898
IP address blocks: 168.225.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 11:36:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:f8:3b:b9:a6:2e:ed:b8:c8:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=f6a6db68-5ba5-463f-9966-9f769b1fbca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:dd:56:98:9f:39:e6:aa:d9:e5:3e:26:e9:
53:2d:0d:0e:49:b7:00:94:f2:40:0c:10:32:bf:38:
92:69:79:52:cf:5d:56:61:41:91:7e:92:4f:d9:5f:
15:68:7f:96:b5:f2:40:f8:c0:de:5b:ff:4c:c3:c2:
9c:9c:0f:f3:ea:1c:b8:f1:0a:e4:3f:48:1c:b4:1d:
e3:b1:ab:b9:5b:21:e6:ff:10:0a:97:ae:4e:88:72:
6a:55:04:2e:d9:cb:6c:b6:93:20:5b:cf:ba:4d:d0:
92:51:46:0f:05:89:de:7d:e4:b2:ff:48:0f:d7:1c:
a9:ed:b5:f3:6a:db:f7:6f:e9:5a:ec:74:51:64:ee:
7e:e8:d4:f2:5b:b0:ee:9d:7d:06:2f:11:bb:f1:c9:
95:3a:e0:df:f6:c9:ce:48:5d:3a:7c:ee:c7:e0:50:
29:0f:2d:f1:c2:eb:13:99:2a:21:9c:cf:3f:12:f0:
e2:b7:32:49:35:43:ae:e2:3e:7e:e9:f1:ca:98:11:
e4:a4:ec:f3:3d:35:4f:87:a0:f8:03:c6:14:43:cd:
bb:32:56:b2:e9:df:90:1f:c6:af:8b:26:e0:73:ab:
d8:35:9c:9e:02:e2:55:5a:59:55:28:b6:85:de:04:
9f:f8:60:5c:ab:43:ca:99:e8:45:10:a5:66:82:43:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0D:12:18:ED:34:8C:07:DF:CF:4B:06:C6:BB:64:F0:96:87:82:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/c4c950bc-58d0-3309-b185-2fe14b41d9c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
X509v3 Authority Key Identifier:
keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
sbgp-ipAddrBlock: critical
IPv4:
168.225.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:58:88:db:17:27:af:5a:db:7f:cd:8a:eb:79:bc:44:dc:2e:
d0:9e:34:69:32:0f:5b:78:a8:fc:3d:1f:8c:d9:0f:8e:d5:1a:
8d:97:a6:71:5e:cd:71:df:5d:ee:73:6f:45:63:fb:e3:f8:fc:
3d:af:31:7a:0d:b8:52:f3:c9:f2:42:65:a8:2a:6b:c2:3c:9c:
f5:20:0a:67:41:13:bd:c6:83:58:4b:0e:ef:ba:32:83:1c:3d:
0e:90:cf:4a:09:ee:5b:cd:4d:4b:77:33:ed:34:f6:3c:12:48:
0c:01:ee:3a:c8:ff:e1:a9:59:69:58:70:c5:7e:f7:3e:1c:bb:
8a:df:a0:83:15:b7:d4:46:d9:9d:ee:78:82:ea:ee:26:3d:dc:
45:ad:28:50:30:fe:bc:94:1d:af:d0:74:ef:b2:1c:35:8d:3a:
6d:25:6a:89:8e:ae:1e:2d:71:dd:9b:17:e2:06:9b:c8:86:40:
15:6f:d0:2c:60:e0:4b:52:54:59:59:dd:9a:62:42:1d:d8:6e:
da:4c:52:52:cc:ae:fc:53:b1:9b:4c:c9:58:70:f5:83:0a:36:
75:a3:01:f2:15:77:4e:66:d8:04:4c:d6:69:45:bf:5b:54:f2:
c8:16:9e:d8:0c:51:6e:de:49:c6:b9:1d:8f:7f:c7:9f:ea:e0:
8a:f3:dd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:56:33 2025 by rpki-client