Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/eb1345be-0a27-3ec4-993c-4d690dc2a05e.roa
File: eb1345be-0a27-3ec4-993c-4d690dc2a05e.roa (raw, json)
Hash identifier: C0nGWZASa4P8xGjNZuQ+aL2iTts45cDmUvDCa12o4Zc=
Subject key identifier: 7A:26:01:25:16:57:F6:D8:DB:57:DB:37:01:C5:B8:3A:03:FF:68:55
Certificate issuer: /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b
Certificate serial: 010D0C9F43285848C85CB7885A645128EE96F7C0
Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/eb1345be-0a27-3ec4-993c-4d690dc2a05e.roa
Signing time: Wed 05 Feb 2025 14:35:22 +0000
ROA not before: Wed 05 Feb 2025 14:35:22 +0000
ROA not after: Tue 06 May 2025 13:35:22 +0000
asID: 14549
IP address blocks: 204.8.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 12:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:5c:b7:88:5a:64:51:28:ee:96:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b
Validity
Not Before: Feb 5 14:35:22 2025 GMT
Not After : May 6 13:35:22 2025 GMT
Subject: CN=5626bf0b-d09c-46e8-b19b-9a8034f8bfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ab:6c:90:95:ac:b7:f8:41:8c:fe:a6:12:b5:
06:4e:8f:6e:6c:aa:7b:29:2a:ca:24:a5:ac:f0:4c:
2d:d5:f2:99:3b:4a:8d:00:7a:80:46:22:9c:d6:d0:
66:7e:e7:49:a1:18:58:03:2a:d0:23:07:07:67:64:
b4:92:e3:24:18:ef:77:15:91:a8:21:fb:fd:a1:16:
11:19:9a:d8:b3:3e:9a:64:4b:89:9e:17:e6:76:f5:
7c:d9:82:0b:e8:00:64:08:9d:42:94:9d:1a:32:5f:
58:f5:ae:ba:6f:1c:bf:ab:1e:17:44:83:4e:5e:74:
39:ab:93:5f:a5:35:e1:6a:fd:a3:86:72:7c:ab:7a:
e5:b2:c3:22:5d:bf:74:0c:d7:8d:9b:be:ae:b0:16:
98:60:5a:74:b5:1b:2b:e2:57:59:05:7e:f1:09:2d:
ab:d4:c3:ff:64:62:b4:ee:70:bc:a4:b2:7f:8a:60:
e2:53:40:19:44:ca:1d:c8:8f:30:e1:bb:3c:9a:1f:
c6:ea:96:bd:79:18:bf:53:b9:40:55:b9:8e:fc:ac:
41:5d:db:e1:f5:33:36:c2:f2:76:8a:e7:e1:a9:93:
d1:94:e4:26:fc:06:71:ba:c6:42:0a:0d:b4:a5:e4:
d0:f7:9d:c3:89:10:dd:7b:c2:70:ec:ad:5b:14:b7:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:26:01:25:16:57:F6:D8:DB:57:DB:37:01:C5:B8:3A:03:FF:68:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/eb1345be-0a27-3ec4-993c-4d690dc2a05e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl
X509v3 Authority Key Identifier:
keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:13:57:1a:46:64:7f:07:e8:e7:74:07:1a:fa:4e:33:bc:94:
34:c7:4c:66:5f:cc:e6:28:42:76:c5:e9:a9:9e:22:e4:1b:64:
ac:77:99:6a:ee:f4:2b:f3:27:8b:c4:45:59:ce:f4:f0:dd:1e:
6f:60:73:fe:21:db:e5:f5:fd:f9:f1:09:8c:76:c2:ba:a5:a9:
98:2c:dd:66:f2:19:b5:a6:c4:79:6f:44:05:04:99:e2:9b:fd:
f1:5e:85:f7:66:e9:a1:3a:1b:ce:82:10:60:88:67:87:60:77:
31:9f:f6:e0:fc:a7:d1:1d:03:37:43:9d:97:3d:c6:ca:5d:a9:
ca:9c:1f:f4:00:23:7a:5f:b9:b9:9f:8c:4e:8d:d5:20:56:5c:
62:2f:01:d9:24:b7:c7:49:11:be:0b:0a:55:cd:54:49:48:30:
59:58:32:6b:4c:10:e7:f1:75:3c:60:08:6c:09:8f:22:b1:c4:
46:67:fa:df:34:55:aa:54:73:a7:c6:5f:65:fd:9e:67:57:2e:
ac:9a:91:4e:21:2b:33:b0:75:39:75:a3:21:ae:3d:f4:48:84:
b6:2c:ca:37:6a:a5:8b:51:e9:6e:84:ee:81:c6:9a:84:1c:06:
af:9f:18:15:fd:4c:08:8c:f1:60:eb:d8:16:1f:29:7e:4e:01:
2b:cd:a0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:29:40 2025 by rpki-client